Manhunt Continues for Waffle House Shooter

UPDATE: Waffle House Suspected Shooter Arrested

Police continue to search for a 29-year-old suspect that killed four people and injured three more at a Waffle House near Nashville.

[UPDATE: April 23, 2018 1:30 p.m.]

Authorities say they have captured a suspected gunman wanted for killing four people at a Waffle House in Middle Tennessee. 

The Metro Nashville Police tweeted around 2:05 p.m. local time that the murder suspect was in custody. 

This is a breaking story. Please follow @SecurToday for timely updates.

Original story posted below.

Police continue to search for a 29-year-old man suspected of killing four people and injuring another four in a Waffle House outside of Nashville on Sunday morning.

The Metro Nashville Police Department said early Monday morning that there had been no "credible sightings" of the suspected gunman and after an overnight search by local, state and federal law enforcement officers.

Metro Nashville Police have also ensured that all schools in the area have been cleared of potential threats and will remain on "lockout" mode as the search continues. "Guests and visitors will not be allowed inside school buildings," school officials said.

The shooting happened at an Antioch, Tenn. Waffle House just before 3:30 a.m. on Sunday. Metro Nashville Police say the gunman was sitting in his truck for a few minutes, looking around, before he got out, clothed in only a green jacket, and immediately began shooting at customers in the parking lot.

The gunman, according to police, continued shooting as he walked inside, shattering the windows of the establishment. At one point, he stopped to reload his weapon. That's when police say a customer, 29-year-old James Shaw, lunged at the gunman and wrestled away the gun, throwing it over the counter. Shaw told local news stations that he moved the gunman out of the restaurant where he, "just walked away" from the scene.

Three people died at the scene an another died at the hospital as a result of the shooting at the Waffle House. Two people remain in critical condition at Vanderbilt University Medical Center. TriStar Southern Hills Medical Center treated and released two people with minor injuries from the shooting, a spokesperson said.

Months before the gunman became the target of a manhunt, he was arrested for trying to breach a barrier near the White House. Authorities would later seize his guns and revoke his license to carry a gun in the state of Illinois.

Under Illinois law, certain confiscated guns can be released to a family member, but the gunman could not lawfully possess the weapons in that state. Police say the guns were given to the gunman's father who then returned them to the suspected shooter. It is unclear if the weapons were lawfully possessed in the state of Tennessee.

Among the four weapons seized from the gunman was the AR-15 semiautomatic rifle that police say he used in the Waffle House on Sunday. One of the weapons - a pistol - is missing from the gunman's apartment.

Police still have no significant leads on the location of the shooter. Investigators believe the gunman went to his apartment, located less than a mile from the Waffle House and put on a pair of pants before fleeing again. He was last seen in a wooded area near the apartment complex wearing only black pants. 

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • Report: 47 Percent of Security Service Providers Are Not Yet Using AI or Automation Tools

    Trackforce, a provider of security workforce management platforms, today announced the launch of its 2025 Physical Security Operations Benchmark Report, an industry-first study that benchmarks both private security service providers and corporate security teams side by side. Based on a survey of over 300 security professionals across the globe, the report provides a comprehensive look at the state of physical security operations. Read Now

    • Guard Services
  • Identity Governance at the Crossroads of Complexity and Scale

    Modern enterprises are grappling with an increasing number of identities, both human and machine, across an ever-growing number of systems. They must also deal with increased operational demands, including faster onboarding, more scalable models, and tighter security enforcement. Navigating these ever-growing challenges with speed and accuracy requires a new approach to identity governance that is built for the future enterprise. Read Now

  • Eagle Eye Networks Launches AI Camera Gun Detection

    Eagle Eye Networks, a provider of cloud video surveillance, recently introduced Eagle Eye Gun Detection, a new layer of protection for schools and businesses that works with existing security cameras and infrastructure. Eagle Eye Networks is the first to build gun detection into its platform. Read Now

  • Report: AI is Supercharging Old-School Cybercriminal Tactics

    AI isn’t just transforming how we work. It’s reshaping how cybercriminals attack, with threat actors exploiting AI to mass produce malicious code loaders, steal browser credentials and accelerate cloud attacks, according to a new report from Elastic. Read Now

  • Pragmatism, Productivity, and the Push for Accountability in 2025-2026

    Every year, the security industry debates whether artificial intelligence is a disruption, an enabler, or a distraction. By 2025, that conversation matured, where AI became a working dimension in physical identity and access management (PIAM) programs. Observations from 2025 highlight this turning point in AI’s role in access control and define how security leaders are being distinguished based on how they apply it. Read Now

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.”

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.