Intelligence products

What changed

Public-source monitoring shows the separate fictional networks People Against Tech and AI (PATAi) and Animals Have Rights (AHR) increasingly focusing on named speakers, session times and the venue. 11 items explicitly call for presentations to be interrupted. Three accounts are linked in the synthetic dataset to previous non-violent event disruption. No credible threat of violence, weapon reference, stalking pattern or specific plan to injure an executive has been identified.

Immediate assessment

It is highly likely in the immediate term that one or more selected sessions will face deliberate disruption. It is unlikely in the immediate term that PATAi or AHR will deliberately attempt serious physical harm to an executive.

Immediate actions: next 2 hours

• ✦Brief venue security, stage managers and executive support teams on the specific sessions drawing attention and the agreed response to disruption.
• ✦Keep executives out of direct physical intervention. Trained security staff should manage removal or separation if required.
• ✦Review public exposure of arrival times, movement details and speaker logistics, and remove unnecessary information where possible.
• ✦Prepare a short communications line that acknowledges lawful protest while separating it from conduct that interrupts or endangers the event.
• ✦Continue monitoring for direct threats, stalking, repeated unwanted approaches, forced access, weapons or sabotage. Any of these would materially change the assessment.

BLUF: Bottom Line Up Front

Public-source reporting between 8 and 17 September 2026 indicates that two unrelated issue-motivated activist networks, People Against Tech and AI (PATAi) and Animals Have Rights (AHR), are separately focusing on speakers and sponsors attending the fictional Crestwell Leadership Forum, a UK industry conference with ~2,400 attendees, livestreamed keynotes and 18 senior corporate speakers. PATAi is criticising a cloud-services sponsor over alleged links to Israeli government and defence activity, while AHR is targeting a facilities company over an alleged supplier relationship with a regulated research-animal business. Available reporting indicates that both networks are primarily seeking visibility, reputational pressure and public attention for their respective causes. Activity has become increasingly event-specific as the conference approaches, with 11 public items explicitly calling for presentations to be interrupted and 18 referring to speakers, session times or locations. The most likely method is normal attendee or public access followed by verbal protest, banners, chanting or a short sit-in during high-visibility presentations, with footage amplified online. Three accounts are linked in the synthetic dataset to previous non-violent disruption. No credible direct threat, weapon reference, violent TTP, stalking pattern or specific intent to injure a speaker has been identified, and there is no evidence that PATAi and AHR are coordinating.

Additional relevant detail

• ✦The Crestwell Leadership Forum runs on 16–17 September 2026; the highest concern is around named, livestreamed sessions on 17 September.
• ✦Activity shifted from broad criticism of organisations and commercial relationships toward specific speakers, sessions, attendance and disruption.
• ✦Previous demonstrations associated with PATAi and AHR in the synthetic scenario have been largely peaceful and disruptive rather than violent.
• ✦No comparable shift toward direct threats, stalking, weapons, forced access, sabotage or preparation to injure an individual has been identified.

Assessment: immediate / business impact

It is highly likely in the immediate term that one or more selected presentations will experience deliberate, non-violent disruption. This assessment is supported by explicit calls to interrupt speeches, the circulation of speaker and session information, and continued engagement by PATAi and AHR.

The immediate business impact is likely to consist of short programme interruptions and increased demands on security, communications and executive-support teams. Any successful disruption is likely to gain visibility beyond the venue because the event is livestreamed and features senior corporate executives. Increased reputational exposure for the event organiser and targeted organisations is therefore likely.

A deliberate attempt to cause serious physical harm to an executive is unlikely in the immediate term. No violent tactics, techniques or procedures have been identified in open-source reporting at the time of assessment, and previous demonstrations associated with PATAi and AHR in the synthetic scenario have been largely peaceful. There is a realistic possibility of escalation involving direct threats, stalking, unwanted approaches or injury, particularly if behaviour becomes more focused on individual executives rather than disruption of the event itself.

In the near term, footage of any successful disruption is likely to continue circulating online and shape discussion of the event and targeted organisations. Increased scrutiny of organisations experiencing a visible disruption is highly likely where their response is perceived as disproportionate or poorly managed, particularly because the event is livestreamed and footage is likely to be further amplified through social media.

Assessment: industry impact

Over the medium term, high-profile corporate events will likely continue to attract issue-motivated disruption where executives, sponsors, or commercial relationships connect organisations to contested political, ethical, or supply-chain issues.

There is a realistic possibility over the medium term that organisations become secondary targets because of supplier, sponsor, customer or investment relationships rather than direct involvement in the disputed activity. Livestreamed events featuring senior executives will also likely amplify reputational impact when disruption occurs.

Should an organisation respond to disruption in a manner perceived as disproportionate or poorly managed, it is likely to lead to increased reputational scrutiny in the near term.

MLCOA: Most Likely Course of Action

The scenario the current evidence supports as most likely.

It is highly likely in the immediate term that a small number of activists will use normal attendee or public access to interrupt one or more named sessions through verbal protest, banners, chanting or a short sit-in. The activity will likely be recorded and amplified online.

• ✦Likely effect: short programme delay, strong social-media visibility, staff distraction and reputational pressure, with limited direct safety impact.
• ✦Watch for: more session-specific calls to attend, ticket/access discussion, coordinated media preparation and live-location posting.

MDCOA: Most Dangerous Course of Action

A lower-likelihood but plausible scenario with much greater consequences.

There is a realistic possibility that a participant crosses a restricted boundary or makes a direct approach to a speaker, and the intervention develops into a physical confrontation near the stage or an executive movement route. There is a realistic possibility that a second disruption divides security attention.

Current judgement: serious physical harm remains unlikely on available evidence; no weapon or injury intent is indicated.

MLCOA and MDCOA are planning tools, not predictions. The MDCOA tests protective planning against a plausible high-impact scenario without implying that activists generally intend violence.

• ✦Potential effect: injury, emergency pause or evacuation, major reputational amplification and a longer-term review of executive/event security.

Advisory

• ✦Before: Brief venue security and stage teams on targeted sessions. Review unnecessary public movement detail. Prepare communications lines and escalation thresholds.
• ✦During: Use trained security staff for intervention. Keep executives out of physical confrontation. Maintain event continuity where safe and distinguish lawful protest from behaviour that affects access, safety or continuity.
• ✦After: Capture incident details and online reaction. Review whether named individuals, companies or suppliers remain focal points. Update protective measures before the next public appearance.

Bottom line

Selected presentations will highly likely face planned, non-violent interruption intended to create visibility and reputational pressure in the immediate term. Current evidence supports disruption of selected speeches more strongly than an intent to harm executives. Speaker naming, venue information and interest in internal access justify additional controls around the most exposed sessions.

What this means for the organisation

• ✦It is likely that disruption will create short programme delays and rapid online amplification rather than prolonged operational shutdown.
• ✦Security, communications, and executive-support teams will likely need to respond at the same time.
• ✦It is unlikely in the immediate term that PATAi or AHR will deliberately attempt serious physical harm; controls should therefore be enhanced but proportionate.
• ✦A poorly handled physical intervention is likely to increase reputational consequences if recorded and shared.

Wider industry relevance

It is likely over the medium term that high-profile corporate events in multiple sectors will continue to attract issue-motivated disruption where companies or speakers are associated with contested political, ethical or commercial relationships. There is a realistic possibility that suppliers, sponsors and service providers become secondary targets because of those relationships.

Decisions required

• ✦Accept that some visible protest may occur and prioritise safety, continuity and proportionality rather than trying to eliminate all dissent.
• ✦Apply extra controls to the sessions, speakers and access points where the evidence justifies them.
• ✦Use trained security professionals, not executives, to manage physical incidents.
• ✦Approve communications lines and escalation thresholds before the event.