Investigators examining the deadly shooting at Silver Rail Elementary School in Bend, Oregon, are now looking closely at the online activity of Griffin J. John II, the 16-year-old former student identified as the attacker. Reports that he may have developed an intense interest in Nazi ideology and had possible connections to violent online extremist networks have raised new questions about the events leading up to the attack.

The shooting occurred on October 15, 2026, when John entered Silver Rail Elementary School and opened fire in a special-education classroom. Three children and a 25-year-old teacher were killed, while two other people were injured. The attack ended when Kaylub Giamanco, a father whose children attended the school, entered the building and shot John.

Authorities have been investigating John’s digital footprint, including his computer, phone, social media activity and search history. Reports published after the shooting said investigators were examining whether he had become increasingly absorbed in Nazi ideology and whether he had connections to online groups associated with violence and exploitation.

One network reportedly under scrutiny is known as “764,” a decentralized online extremist network that has been linked by law enforcement and researchers to the targeting and exploitation of vulnerable young people. Investigators are examining whether John had any meaningful connection to such groups and whether his online interactions provide information about his thinking before the attack.

However, no definitive motive has been publicly established. Investigators have not announced that an online group directed the shooting, nor have they confirmed that extremist ideology alone explains John’s actions.

The investigation is also examining how the teenager obtained the shotgun used in the attack. Reporting by CBS News said the weapon was purchased legally by his mother, Shauntai Nickerson, in August 2026 and was reportedly given to him for recreational use.

The emerging details have intensified questions about what warning signs may have existed before the shooting, how the teenager’s online activity developed and whether anyone knew he posed a danger to others. Authorities have cautioned that determining a motive in a case involving a teenager can take considerable time, and some questions may never receive complete answers.

A former student returns to his elementary school
John was a former student at Silver Rail Elementary School. He was not enrolled in the local public school system at the time of the shooting, but school officials confirmed that he had attended Silver Rail when he was younger and had been a special-education student.

On October 15, shortly before 1 p.m. local time, police received a 911 call reporting that someone was firing at a vehicle outside the school.

Investigators said John had approached the campus carrying a shotgun. After an initial encounter outside, he made his way onto the school grounds and forced entry through glass panes in a set of doors.

He then entered a special-education classroom and opened fire.

Police Chief Mike Krantz said the attacker fired numerous rounds during the incident. Three children and teacher Megan Lambert, 25, died. Two other people were injured, including teacher Becky Drury, 54, who suffered serious but non-life-threatening injuries, and a seven-year-old girl who uses a wheelchair.

The victims’ ages, ranging from five to 54, underscored the impact of the attack on a classroom serving children with additional educational needs.

The incident lasted only a few minutes before John was shot and killed by Giamanco, who had arrived at the school and intervened after hearing the commotion and realizing children were in danger.

Police have credited both Giamanco and a teacher who confronted the attacker with helping prevent further casualties.

The school shooting devastated families, staff members and the wider Bend community. As the investigation continued, attention turned to John’s background and the question of how a teenager who had once attended the school came to return with a weapon.

Investigators examine reports of a Nazi obsession
Reports published on October 22 and in the days that followed said investigators were examining whether John had developed an intense interest in Nazi ideology.

The reporting, which cited people familiar with the investigation, described a review of his digital activity as authorities sought to understand the beliefs, online communities and material he may have encountered before the shooting.

Investigators are examining electronic devices recovered from his mother’s home, along with his online activity and other records. The goal is to establish whether his browsing history, communications or social-media interactions offer reliable information about his motive.

A person’s interest in a particular ideology, by itself, does not establish that the person intends to commit violence. In this case, the relevance of any extremist material will depend on what investigators find, how the material relates to John’s actions and whether there is evidence of planning, encouragement or coordination.

Authorities have not publicly established a complete timeline of John’s online activity or identified a single event that caused him to attack the school.

The reported Nazi interest is therefore one line of inquiry, not a final explanation.

Investigators may need to determine whether the material reflected an ideological commitment, a fixation on violent imagery, an attempt to gain attention online or something else. Those possibilities cannot be distinguished reliably without examining the underlying evidence and its context.

The investigation also needs to establish whether the content was created by John, shared with him by others or merely viewed by him. Those differences can matter when assessing both motive and potential connections to other people.

Possible links to the 764 online network
Another reported focus of the investigation is whether John had connections to the online network commonly referred to as 764.

The network has been described by law enforcement and researchers as a violent online extremist environment associated with the targeting of vulnerable people, including minors. Investigations involving such networks have examined allegations of coercion, blackmail, harassment and pressure on young people to engage in harmful or exploitative behavior.

Authorities are reportedly reviewing whether John interacted with members or spaces associated with 764, or with other online groups that encourage violence.

At this stage, the public information does not establish the precise nature of any alleged connection. It would be inaccurate to say that the network ordered the attack, supplied the weapon or directed John to target Silver Rail Elementary School.

Investigators must determine whether any interactions were direct, sustained and relevant to the attack, or whether the reports reflect a broader examination of the online material he encountered.

That work can involve reviewing chat records, accounts, saved files, search histories and other digital evidence. Investigators may also seek information from online platforms or interview people who interacted with the teenager.

Digital investigations can be particularly challenging when accounts use aliases, messages are deleted or activity takes place across several platforms. Even when a connection is established, authorities must still determine whether it played a meaningful role in a specific crime.

The investigation into John’s possible extremist connections remains ongoing, and officials have not publicly presented a complete account of what his online activity revealed.

The wider question of online radicalization
The reports have renewed discussion about how young people can encounter violent or extremist communities online.

Digital platforms allow teenagers to access a wide range of material, including political ideology, violent imagery, conspiracy theories and online communities that reward increasingly extreme statements. In some cases, individuals may be exposed to material that normalizes cruelty or encourages hostility toward others.

However, online exposure does not affect every person in the same way. Viewing extremist content does not automatically lead to violence, and investigators cannot infer a motive simply from the presence of particular material on a device.

In John’s case, investigators are attempting to establish what he actually viewed, whether he communicated with other users about violence, and whether any online activity was connected to his preparations for the shooting.

Those questions are different from determining whether he had mental-health or educational needs during childhood. Officials have confirmed that John previously attended Silver Rail as a special-education student, but that fact alone does not explain the attack.

The investigation must avoid treating disability, social isolation or any diagnosis as an automatic indicator of dangerousness. Instead, it needs to focus on evidence specific to John’s behavior and the events leading up to October 15.

Reports have described John as socially isolated and highly active online, but investigators have not publicly established that either circumstance independently caused the shooting.

Understanding the distinction is important both for the accuracy of the investigation and for avoiding stigmatization of people who share some of those characteristics but pose no threat to others.

What investigators know about the shotgun
The weapon used in the attack has become another major focus of the investigation.

CBS News reported that the shotgun was purchased legally in August 2026 by John’s mother, Shauntai Nickerson. Sources told the outlet that the weapon was a Maverick 88 pump-action 12-gauge shotgun and that it was reportedly given to John for recreational use.

Police have said they are investigating how the teenager obtained the firearm and ammunition and what circumstances allowed him to bring it to the school.

The fact that the weapon was reportedly purchased by his mother has raised questions about household access, supervision and the rules governing minors’ possession of firearms.

Under Oregon law, some minors may legally possess rifles or shotguns under specified circumstances, including with parental consent. The precise circumstances of this case remain subject to investigation, and the legality of a purchase does not by itself resolve whether every subsequent decision involving the weapon complied with the law.

Authorities have not publicly established that John’s mother knew he intended to carry out an attack. Reports about the purchase should not be treated as proof that she was aware of his plans.

Investigators will need to examine the timeline of the purchase, how the weapon was stored, when John gained access to it and whether any communications or other evidence indicate that he had disclosed an intention to harm people.

The answers may help establish how the attack was prepared and whether anyone else had information relevant to preventing it.

A mother expresses remorse
Following the shooting, Nickerson spoke briefly to reporters outside her apartment.

She expressed sorrow over what happened and said she wished she could have done something to prevent the tragedy.

Her comments came as investigators were beginning to examine the teenager’s background, the weapon’s origin and the circumstances that preceded the attack.

The public reporting about the shotgun purchase has placed her role under scrutiny, but the available information does not establish that she knew her son intended to attack the school.

The distinction between purchasing a weapon and knowingly enabling a crime is significant. Investigators must determine what she knew, when she knew it and whether any evidence supports allegations of criminal conduct.

As of October 26, authorities had not publicly established that she was involved in planning the attack. The investigation remains focused on gathering evidence and reconstructing the events that led to the shooting.

Her expression of regret cannot answer the questions surrounding the attack, but it reflects the personal devastation that has followed the deaths of four people and the injuries suffered by others.

The teacher who confronted the attacker
One of the most consequential moments of the shooting occurred when a teacher confronted John inside the school.

Police said the teacher threw a cellphone at him before tackling him and struggling with him. Chief Krantz praised her actions, saying they likely helped prevent further casualties.

The teacher was not injured in the confrontation, according to police accounts.

Her actions gave others an opportunity to respond while the situation was still unfolding. The intervention also became a central part of the timeline investigators have reconstructed from witness statements and video.

Officials have not suggested that the teacher’s actions alone ended the attack. Rather, police credited both her intervention and Giamanco’s response with helping stop the shooter.

The event illustrates the extraordinary decisions that people in a school may face during an emergency, while also showing why authorities are careful about releasing detailed operational information before an investigation is complete.

The teacher’s identity was not immediately released in the first official briefings, and police focused on her role in preventing further harm.

Kaylub Giamanco’s decision to enter the school
Giamanco, 36, was driving near Silver Rail Elementary School when he witnessed activity outside the campus.

He later told Oregon Public Broadcasting that he saw John firing toward a vehicle and realized that the situation could endanger the children inside the school.

Giamanco called 911 and then made the decision to enter the building with a handgun he had in his truck.

In an interview published on October 23, he described hearing children pleading for help and realizing that people inside were in immediate danger. He said he felt compelled to act, even though he understood the risk to himself.

Inside the school, he saw the teacher struggling with John. Giamanco fired at the attacker, killing him and bringing the immediate threat to an end.

Police have praised his actions and said the intervention likely saved lives.

In subsequent comments reported by the Associated Press, Giamanco said he continued to think about the children who died and expressed regret that he had not arrived earlier to help them.

His response has drawn attention to the emotional impact of intervening in a life-threatening event. Although he helped stop the attacker, he has described feelings associated with the lives he could not save.

His account has also provided investigators and the public with additional information about the final moments of the attack.

Remembering the victims
The four people who died were three children and one teacher.

Megan Lambert, 25, was a teacher at Silver Rail Elementary School. Her family described her as compassionate and devoted to supporting children, particularly those with special needs. They said teaching was her dream job and that she had spent years working toward it.

Five-year-old Rhoam Summer was also among those killed. His father, Kelik Summer, expressed profound grief after learning of his son’s death, describing the family as broken and lost while thanking friends and relatives for supporting them.

The other two children were boys aged eight and 11. Their families had not publicly released their names in the initial reports cited by authorities.

Two additional people were seriously injured. Becky Drury, a 54-year-old teacher, later described how she tried to survive the attack. Reporting published on October 21 said she pretended to be dead after being injured.

The seven-year-old girl who was also wounded was reported to be in serious but stable condition in the immediate aftermath, though subsequent updates would be needed to establish her latest condition.

The victims’ families are now facing grief that extends far beyond the day of the shooting. The school community has also had to confront the loss of children and a teacher in a place meant to provide education, care and security.

The investigation into John’s online activity may eventually provide information about his motive, but it cannot undo the harm experienced by those families.

A family history under scrutiny — but not every allegation is established
Reporting following the shooting has also examined John’s family background and his mother’s history.

An investigation by the Oregon Journalism Project published on October 23 reported that Nickerson had previously been accused of assault on two occasions but had not been convicted. The reporting raised questions about whether a conviction would have affected her ability to purchase the shotgun.

Those details have drawn public attention because the weapon was reportedly bought legally shortly before the shooting. However, an accusation that did not result in a conviction should not be presented as proof that a person committed the alleged conduct.

Investigators have not publicly established that Nickerson’s prior history caused or enabled the shooting. Any legal questions concerning the purchase or transfer of the firearm must be evaluated according to the applicable law and the evidence in this case.

Similarly, the existence of family difficulties or a teenager’s special-education history does not by itself explain a violent act.

The relevant questions are what John did, what he intended, how he obtained the weapon, whether anyone had specific knowledge of his plans and whether any evidence establishes a meaningful connection to extremist networks.

Authorities continue to gather information on those points.

What remains unknown about the motive
More than a week after the shooting, investigators still had not publicly established a definitive motive.

The reported Nazi fixation and possible extremist connections are significant lines of inquiry, but they are not the same as a confirmed explanation for why John attacked the school.

Investigators need to determine whether the digital material shows planning, an expressed intention to harm people, communication with others about violence or a different pattern of activity.

They must also consider whether the available information is reliable and whether online statements reflect genuine intent, attempts to shock others or something else.

Even a detailed digital record may not provide a single, clear explanation. Motives can involve several factors, and investigators may be unable to establish every aspect of a person’s thinking.

Police Chief Krantz has acknowledged that determining why an attack occurred can be one of the most difficult parts of an investigation. Authorities have said they will continue working to find answers, while recognizing that some questions may remain unresolved.

For the families of the victims, the search for a motive is important, but it is only one part of the wider need to understand how the attack happened and whether any warning signs could have been identified.

What happens next?
Investigators are continuing to examine John’s electronic devices, online activity and the circumstances surrounding the shotgun purchase. They are also reviewing witness accounts and other evidence collected from the school and his mother’s residence.

The review may clarify whether John had contact with extremist communities, whether those interactions influenced his behavior and whether anyone else knew of a plan to attack Silver Rail Elementary School.

Authorities have not announced a final motive, and the reported connections to Nazi ideology and the 764 network remain under investigation.

The school community continues to grieve the deaths of Megan Lambert and the three children. The injured survivors and their families are also facing the continuing effects of the attack.

The case has prompted difficult questions about online exploitation, access to weapons, school security and how adults can recognize specific warning signs in young people. Those questions deserve careful examination, but conclusions must be based on verified evidence rather than assumptions about a teenager’s background or interests.

For now, the investigation remains focused on reconstructing John’s activities before October 15 and establishing what led him to return to his former school.

The most important unanswered questions remain: Did his online activity influence the attack? Did he communicate his intentions to anyone? And could investigators identify a clear motive from the evidence he left behind?

Authorities are continuing their work, but as of October 26, 2026, no definitive public answer has been announced.

SOURCES
https://nypost.com/2026/10/22/us-news/oregon-shooter-griffin-john-developed-sickening-obsession-before-killing-4-in-school-massacre/