Who is Cody Allen Balmer? Suspect accused of arson attack on Gov. Shapiro's home
Cody Allen Balmer was arrested on Sunday for allegedly breaking into the governor's home while he and his family were inside and setting fires with two Molotov cocktails.
He was denied bail at his arraignment on Monday.
Before he was arrested and charged with attempted homicide, aggravated arson and terrorism in the attack on the governor's mansion, Balmer was already due in court this coming Wednesday on charges stemming from the domestic assault allegations.
Balmer, 38, had grappled with a protracted back-and-forth over foreclosure proceedings, and allegations that he assaulted his then-wife and children amid what he told police was his failed attempt at suicide.
He had worked as an auto mechanic in the Harrisburg area and served eight years as an Army Reservist from his late teen years onward. U.S. Army Spokeswoman Heather J. Hagan said in a statement that Balmer was a construction equipment repairer (62B) in the Army Reserve from April 2004 to June 2012. He had no deployments. He was a sergeant when he left the Army. The Service declined to say whether he had been discharged honorably, citing privacy laws.
MORE: Arson at Pennsylvania Gov. Josh Shapiro's residence was 'domestic terrorism': Fire chief
In 2022, Balmer was sued by a mortgage lender seeking to foreclose on his Harrisburg house. By June 2024, he owed nearly $117,000 plus interest. A sheriff's sale had been set, but Balmer's lawyer asked that the sale be postponed, saying Balmer had found it harder to make ends meet because of bad luck and marital strife.
Balmer had "fallen behind in his mortgage due to several hardship factors, including injuries from an auto accident leading to his inability to work and maintain an income and a separation from his wife," his lawyer said in court documents. Still, he had just found a buyer despite "numerous issues in and with the property" and needed time to finish the sale. The case was dismissed in Jan. 2025 as the parties had "resolved" the matter.
At the same time, he had an escalating and allegedly violent situation at home, court documents show.
In late Jan. 2023, local police were called to a home in the Harrisburg area for what was characterized in court documents as an "active physical domestic" incident.
"A child caller advised his stepfather was beating his mother," the responding officer's affidavit said. The officer responded and outside the home met Balmer's then-wife "in an elevated state, yelling and crying about her husband, Cody Balmer, having assaulted her."
"Cody was still inside the residence," the officer said.
Balmer told the officer "that he had taken a bottle full of pills in an attempt to kill himself," the affidavit said. "An argument ensued between Cody and [his wife] to a point that his 13-year-old son" had "stepped in between them. Cody then admitted to shoving his son and that a fight ensued between all parties. Cody showcased injuries to his face."
Balmer had hit his 10-year-old son "in the chest and stepped on his broken leg in the midst of a scuffle with the victim and two others," and had hit his 13-year-old son and his wife "with closed fists, and bit his wife causing a puncture wound on her hand," according to the criminal complaint.
A $5,000 unsecured bail was set for Balmer, according to a criminal docket. The document says this was "to make [it] easier to co-parent.'
In Pennsylvania, defendants given an unsecured bail do not have to post any money upfront but must agree to pay the stated bail amount should they not show up for court or violate bail conditions, according to state law.
The assault case is still pending in Dauphin County. A separate criminal docket states that a hearing in that case was scheduled for this coming Wednesday.
Available court documents did not indicate whether he had entered a plea in the domestic assault case. His estranged wife and public defender did not immediately respond to ABC News' requests for comment.
Balmer was also previously accused of forgery. Court records show he pleaded guilty and was sentenced to 18 months of probation. Balmer's estranged wife's aunt told ABC News over the phone that she had only met him "a couple of times" but that "he seemed nice."
"He was a little quiet, just, a little laid back, but he seemed nice," Aunt Janel Jones said. She had heard of the arson attack of which Balmer is now accused -- a "shock" to her, she said.
"It's a shock. To me, it's a shock. But you never know - I wasn't around him 24/7 either. The only person that could give you, like, a better understanding of him would be my niece, his wife," Jones said, adding her niece has two daughters with Balmer. "So that's -- this is crazy. This is really crazy," Jones said.
MORE: Man charged for arson attacks at Tesla dealership, New Mexico GOP office
A Facebook profile being reviewed by law enforcement in connection to Balmer reflects a mix of family photos with what appeared to be an expression of disdain for politicians on both sides of the aisle. His pictures include selfies with small kids wearing costumes, and other posts include critiques of both President Donald Trump and former President Joe Biden, the latter of whom he criticized for his age and his economic policies.
Balmer also made numerous posts complaining about the high cost of living in the United States. In Nov. 2022, he posted, "Can't pay rent? Sell your f**** organs! No more organs? F**** die then this is America be grateful for the opportunity you had."
In a 2022 post, Balmer shared an image of an embroidered flaming Molotov cocktail, with the inscription: "Be the light you want to see in the world."
Who is Cody Allen Balmer? Suspect accused of arson attack on Gov. Shapiro's home originally appeared on abcnews.go.com

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles

an hour ago
Trump told GOP lawmakers he would 'likely' fire Fed chair Powell 'soon,' sources and officials say
President Trump asked a group of Republican lawmakers how they felt about him firing Federal Reserve Chair Jerome Powell and told them he would "likely" fire Powell "soon," according to two White House officials and sources familiar with the Tuesday evening meeting. The Republican lawmakers expressed their approval of Trump's intention to fire him, according to the White House officials and sources on Wednesday. According to one lawmaker in the room, President Trump made it clear he wanted Powell gone and signaled he could move in that direction, but the president was also responding to the reception from other Republicans who were on board with the idea. Trump mentioned this meeting in the Oval Office on Wednesday, saying he discussed the "concept of firing him." "I said, what do you think? Almost every one of them said I should, but I'm more conservative than they are," Trump told reporters. This development follows Trump's ongoing pressure campaign to get Powell to lower interest rates. Powell has said the Fed would have cut rates by now if it weren't for inflation concerns as the result of President Trump's tariff policy. While a decision on Powell could come at any time or not come at all, sources caution that a decision is not final until President Trump makes an announcement publicly. Trump on Wednesday dismissed reports that he drafted a letter to fire Powell. "Are you completely ruling out the idea of firing Jerome Powell?" a reporter asked Trump in the Oval Office. "I don't rule out anything, but I think it's highly unlikely unless he has to leave for fraud," Trump said. Trump allies and top White House officials have been raising questions about the $2.5 billion dollar renovation of two historic Fed buildings on the National Mall, with some suggesting it could be weaponized against Powell to remove him from his role. "We're very concerned. He's doing a little renovation for 2.5 billion of the Fed building -- building a -- a renovation, and they have a close to $900 million cost overrun. And it's a shame, but the biggest cost overrun is the cost overrun for interest rates," Trump said. ABC News White House Correspondent Karen Travers asked Trump if he's calling for an investigation into Powell. Powell has requested a review of the Federal Reserve's renovation project by the agency's inspector general. While many legal scholars argue that Trump does not have the authority to fire Powell, the Director of the National Economic Council Kevin Hassett told Jon Karl on "This Week" on Sunday that he believes Trump can fire Powell if "there's cause." On Capitol Hill, Sen. Thom Tillis, a North Carolina Republican, took to the Senate floor Wednesday afternoon to issue a stark warning against removing Powell. "The consequence of firing a Fed chair just because political people don't agree with that economic decision will be to undermine the credibility of the United States government going forward," Tillis said. "And I would argue, if it happens, you're going to see a pretty immediate response. We've got to avoid that."


Newsweek
3 hours ago
- Newsweek
Good Trouble: The Latest Anti-Trump Protest Is on July 17. Here's Why.
Based on facts, either observed and verified firsthand by the reporter, or reported and verified from knowledgeable sources. Newsweek AI is in beta. Translations may contain inaccuracies—please refer to the original content. National anti-Trump demonstrations will take place across the United States on July 17 under the moniker "Good Trouble Lives On," honoring the late civil rights icon Congressman John Lewis, and continuing a spate of national demonstrations that have been well-attended by Trump detractors in nearly every pocket of the country. Why It Matters "We hope to build off the incredible momentum anti-authoritarian protests including No Kings Day, Hands Off and May Day and bring in communities already engaged in organizing into the fold of Good Trouble Lives On," group spokesperson Katie Garcia told Newsweek on Wednesday. Good Trouble Lives On National Day of Action has been an annual event for the past five years in memoriam of Lewis, and was already scheduled for July 17—the day of his death. Other protests like "No Kings" have been successful. That took place in countless cities on June 14, as part of a rebuke of Trump on his 79th birthday, which also saw the president attend a military parade in Washington, D.C., to celebrate the 250th anniversary of the U.S. Army. An estimated 4 to 6 million people made their voices heard. In April, Hands Off! protests also galvanized opponents of Trump and billionaire Elon Musk during the throes of his Department of Government Efficiency (DOGE) work in the federal government. The group described itself as a pro-democracy, pro-worker movement taking place "in defiance of the Trump-Musk billionaire takeover and the Republican assault on our freedoms and our communities." Good Trouble Lives On is described as "a national day of action to respond to the attacks on our civil and human rights by the Trump administration." Good Trouble Lives On is described as "a national day of action to respond to the attacks on our civil and human rights by the Trump administration." Photo-illustration by Newsweek/AP Who is Organizing the 'Good Trouble' Protests? Good Trouble Lives On is led by Transformative Justice Coalition, Black Voters Matter, The Leadership Conference on Civil and Human Rights, League of Women Voters, Public Citizens, the Declaration for American Democracy Coalition, National Urban League, American Constitution Society, Indivisible, 50501, Third Act, Mi Familia En Acción and many more organizations. Who was John Lewis? Lewis, a Georgia Democrat and advocate of peaceful protests, who famously called for "good trouble" during the civil rights era. He rose to political infamy even before stepping into office. In March 1965, he led more than 600 peaceful protesters across the Edmund Pettus Bridge in Selma, Alabama, as a public outcry for voting rights ultimately transformed into violence between protesters and police, now known as "Bloody Sunday." Lewis was elected to the U.S. House in 1986, representing constituents largely based in Atlanta. The 2017 Trump inauguration was the first that Lewis ever skipped. Lewis died in 2020. Protest locations across the U.S. As of the early afternoon of July 16, event organizers told Newsweek that they had confirmed more than 1,600 events and 162,000 RSVPs, adding that they "expect at least several hundred thousand people will attend across the country with a few international events also confirmed." A map on the organization's website shows events planned nationwide in every state, including Alaska and Hawaii. Locations include major cities such as New York, Chicago, Los Angeles, Washington, D.C., Houston, Phoenix, Philadelphia, Dallas, Austin, Columbus and Charlotte. Palm Beach, Florida, the home city of Trump family's home, will also host events. Bigger Turnout Than Ever Public Citizen Co-President Robert Weissman told Newsweek on Wednesday that although this event has drawn interest in past years, he and organizers felt this year would be different. "We're thrilled," Wiessman said. "It's vastly greater than what we had anticipated. We actually shut off the registration a few days ago. ... This is a very different kind of thing than we've done in the past. We've done it in partnership with the Transformative Justice Coalition. And in the past it's been 75 relatively small events around the country. "We obviously knew this one is going to be bigger, but at this point 1,600 is vastly more than we had anticipated." This event differs from other aforementioned protests in terms of format and scheduling. Thursday's events will include protests, marches and vigils, in addition to panel discussions and even some barbecues. It's also unique in that it's taking place on a weekday, rather than weekends where millions came out for other protests within the past few months. Weissman said Lewis' "courage, commitment and persistence" acts as a backdrop for this particular day, acknowledging how the former congressman endured physical threats and life-altering challenges. "[Lewis] literally marched ahead and inspired others with his words, and even more with his example to be courageous," he said. "We saw his commitment to push and demand what was that victories aren't permanent, but that fighting for justice is permanent and lifelong." What People Are Saying Speaking to Newsweek, Lorella Praeli, co-president of Community Change Action, which has backed anti-Trump demonstrations, said: "Look around—Trump and his allies are deploying the tools of authoritarianism: silencing dissent, targeting immigrants, punishing oversight, and even staging military displays for personal glorification. These aren't isolated incidents; they're part of a broader effort to delegitimize democratic norms." In a statement sent to Newsweek Declaration for American Democracy, a campaign group backing the protest, said: "This isn't the government our founders envisioned, nor the democracy generations of Americans have fought to realize. As the Trump administration continues violating civil liberties and attacking fundamental freedoms, pro-democracy groups are staying vigilant. The power lies with the American people to unify and 'Make Good Trouble.'" What Happens Next It remains to be seen what organizers plan next in terms of protests and anti-Trump sentiment.
Yahoo
4 hours ago
- Yahoo
Former 21-year-old soldier stationed in Texas pleads guilty to hacking, extortion scheme
TEXAS (WHNT) — A former U.S. Army soldier stationed at Fort Cavazos entered a guilty plea in federal court Tuesday. According to federal documents and the U.S. Department of Justice, 21-year-old Cameron John Wagenius used online accounts associated with the nickname 'kiberphant0m' to conspire with 3 other people to defraud at least 10 victim organizations. The DOJ said Wagenius did so by obtaining login credentials for the organization's protected computer networks between April 2023 and December 18, 2024. Huntsville International Airport sets monthly passenger traffic record for June The DOJ said the conspirators obtained the credentials using a hacking tool called SSH Brute, among other names. The DOJ said they used Telegram group chats to transfer the stolen credentials and talk about gaining access to victim companies' networks. The release says all of this happened while Wagenius was on active duty with the U.S. Army. 'After data was stolen, the conspirators extorted the victim organizations both privately and in public forums. The extortion attempts included threats to post the stolen data on cybercrime forums such as BreachForums and The conspirators offered to sell stolen data for thousands of dollars via posts on these forums. They successfully sold at least some of this stolen data and also used stolen data to perpetuate other frauds, including SIM-swapping. In total, Wagenius and his co-conspirators attempted to extort at least $1 million from victim data owners.' U.S. Department of Justice The plea agreement says Wagenius and the co-conspirators, after gaining access to the victim's accounts, threatened to leak the stolen data unless a ransom was paid. From there, the federal document says the conspirators worked to gain access to 'hundreds of thousands' of sensitive business and customer records. This information included non-content call and text history records, telecommunication identifying information and other personally identifiable information. Some examples of the messages sent to the victims are listed below, per federal documents. 'At least on or about April 23, 2023, until at least June 16, 2023, Defendant, Co-Conspirator-1 and others participated in a Telegram group chat. The chat members repeatedly discussed stealing computer credentials, including through brute force attacks used to guess username and password combinations, and transferred stolen credentials among themselves.' DOJ Plea Agreement Document '[I]n or about May 2024, Defendant and Co-Conspirator-1 accessed the computer systems of Victim-1, a telecommunications company located overseas, and stole information pertaining to hundreds of thousands of Victim-1's customers. This stolen information included International Mobile Subscriber Identity, SIM card numbers, maskerkey, and other information needed to successfully clone SIM cards.' DOJ Plea Agreement Document '[I[n or about August and September 2024, Defendant, Co-Conspirator-1, Co-Conspirator-2, and Co-Conspirator-3 accessed the protected computer systems of Victim-3, a tecnology company located in the United States and stole information pertaining to thousands of Victim-2's customers, including telephone numbers belonging to real people who were Victim-2's customers. Victim-2 was a telecommunications company located in the United States, and some of Vicitm-2's stolen data was hosted on Victim-3's computer systems located in Texas and North Carolina.' DOJ Plea Agreement Document 'Defendant and others publicly and privately extorted victims by threatening to sell or otherwise distribute their stolen data unless the victims paid ransoms. They did so through online posts on online cybercrim forums catering to criminals, such as BreachForums and Telegram channels dedicated to online frauds and other cybercrimes; direct messages on Telegram; and other online platforms such as X (formerly known as Twitter). Some of these posts and messages offered to sell the data in exchange for fiat currency and cryptocurrency, while others attempted to extort the victim companies, requesting payment in order to avoid publication of the stolen data. Some posts also published sample data stolen from the victims. The platforms on which these posts were made could be accessed from computers located anywhere in the world, including the Western District of Washington.' DOJ Plea Agreement Document '[O]n or about October 22, 2024, Defendant contacted Victim-2 and wrote, 'If I'm not contacted all 358+ [gigabytes] of data on the [Victim-2] network will be released.' Defendant sent this message, which was transmitted in interstate and foreign commerce, as part of Defendant's efforts to extort a ransom payment from Victim-2. DOJ Plea Agreement Document '[O]n or about November 6, 2024, Defendant sent multiple emails to Victim-4, a telecommunications company located in the United States, sharing sample stolen data and threatening to leak more online unless he was paid '500k USD in the form of cryptocurrency.' Defendant stated, '[i]n the event of [Co-Conspirator-2's] arrest I was to takeover negotiations.' DOJ Plea Agreement Document The department said on Tuesday, Wagenius pleaded guilty to the following charges: Conspiracy to commit wire fraud Extortion in relation to computer fraud Aggravated identity theft. Tri-agency traffic enforcement targets excessive speeding on I-565 He is currently scheduled to be sentenced on Oct. 6 and faces a maximum penalty of 20 years in prison for conspiracy to commit wire fraud, a maximum penalty of five years in prison for extortion in relation to computer fraud, and a mandatory two-year sentence consecutive to any other prison time for aggravated identity theft. Wagenius was first indicted on December 18, 2024, in Seattle, Washington, federal court documents say. The plea agreement, obtained by News 19, says Wagenius waived his right to be charged by indictment as well as waived his right to have the incident tried before a jury. As a result of these waivers, he agreed to enter a guilty plea. Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed. Solve the daily Crossword