She would have been alive today if they had answered the warrant.
In the autumn of 2023, a Colorado mother named Kristil Krug was stalked, terrorized, and ultimately killed — not because the truth was unknowable, but because the systems that held it moved too slowly to matter. Her death revealed a quiet gap in the architecture of modern safety: technology companies faced no legal obligation to respond swiftly to police warrants in cases where lives hung in the balance. Oregon has now become the first state to close that gap, passing Kristil's Law on May 1, 2026 — a measure that transforms grief into governance and asks whether the speed of harm must finally be matched by the speed of accountability.
- Kristil Krug carried a gun to her own garage because the companies holding her stalker's identity had not answered police warrants for weeks — and she was killed before they did.
- When investigators pushed hard after her murder, the truth came back within hours: her attacker was not a stranger but her own husband, who had been impersonating her ex-boyfriend to terrorize her.
- The trial exposed a systemic failure with no villain beyond indifference — companies processed warrants on a first-in, first-out basis with no urgency rules for cases involving imminent danger.
- Oregon passed Kristil's Law on May 1, mandating 72-hour responses from social media firms and five-day responses from communications companies in stalking and domestic violence cases — the first law of its kind anywhere in the United States.
- Kristil's family, now raising her three children, is carrying the law toward Colorado, federal legislation, and international adoption, as researchers in Australia and the UK confirm the same deadly gap exists far beyond American borders.
Kristil Krug was 43 years old and living in Colorado when threatening messages began flooding her phone in the autumn of 2023. A man claiming to be her ex-boyfriend sent increasingly dark texts and emails. She reported it to police, who obtained warrants and sent them to Google and mobile providers to identify the sender. Weeks passed. The companies did not respond. On a December morning, after dropping her children at school, Krug pulled into her garage carrying a gun for protection. It was not enough. She was attacked from behind, struck in the skull, and stabbed in the heart. Only after her death, with investigators pressing urgently, did the answer come back within hours: the stalker was her husband, Daniel Krug, who had been impersonating her ex-boyfriend to terrorize his own wife. He was convicted of stalking, murder, and criminal impersonation, and sentenced to life in prison.
What haunted Kristil's family beyond the verdict was the revelation that the companies could have responded to those warrants weeks earlier. Her cousin Rebecca Ivanoff, a former domestic violence prosecutor, joined Kristil's parents in pushing for a legal remedy. The solution they proposed was simple: require companies to respond quickly to warrants in stalking and domestic violence cases. Oregon Representative Kevin Mannix, who had authored the state's original anti-stalking law in 1995, helped negotiate with the communications industry. The companies acknowledged the problem. On May 1, 2026, Oregon became the first state to pass Kristil's Law, mandating 72-hour responses from social media companies and five-day responses from communications firms — with no equivalent standard having existed anywhere before.
Kristil's mother, Linda Grimsrud, is now raising her three grandchildren — aged 17, 13, and 11 — while traveling to state capitols to expand the law. She acknowledges the tension between privacy and safety but holds firm: in an age when technology can be weaponized against the vulnerable, anonymity should not be a shield for those who stalk and kill. Researchers in Australia and the UK have confirmed that technology-facilitated abuse is a global crisis, and that law enforcement everywhere has struggled to keep pace. Advocates are pushing for the law to spread to other US states, to federal legislation, and beyond. Grimsrud says she feels Kristil's presence in the work. 'If she can do some good for other families,' she said, 'I know that she'd be proud of that.'
Kristil Krug was a 43-year-old mother of three living in Colorado when her phone began filling with threatening messages in the autumn of 2023. A man claiming to be her ex-boyfriend bombarded her with texts and emails, each one darker than the last. She reported it to police. The detective assigned to her case obtained warrants and sent them to Google and mobile providers, asking them to identify who was sending the messages. Then nothing happened. Weeks passed. The companies did not respond. Krug lived in mounting fear, so afraid that when she dropped her children at school one December morning and pulled into her garage, she carried a gun for protection.
It was not enough. Her attacker caught her from behind before she reached the house. He struck her in the skull and stabbed her in the heart. Her husband found her body around noon and called for a wellness check. Police arrived and, with urgency finally justified, pushed the tech companies hard for answers. Within hours, the identity came back: it was not her ex-boyfriend. It was her husband, Daniel Krug, who had been impersonating someone else to stalk and terrorize his own wife.
Daniel Krug was convicted of stalking, murder, and criminal impersonation. He received a life sentence last April. But the trial revealed something that haunted Kristil's family more than the verdict itself: the companies could have answered those warrants weeks earlier. They could have identified him. Kristil could have known who was hunting her. She could have made a safety plan. She could have lived.
Rebecca Ivanoff, Kristil's cousin and a former domestic violence prosecutor, began working with Kristil's parents and extended family to change the law. They believed the solution was straightforward: require communications companies to respond quickly to police warrants in cases of stalking and domestic violence. Everyone they spoke to—law enforcement, legislators—called it a no-brainer. On May 1, Oregon became the first state to pass Kristil's Law. It requires social media companies to comply with warrants within 72 hours and communications companies within five days when stalking or domestic violence is involved. Before this, there were no rules at all about response times, no consequences for delay.
Rep. Kevin Mannix, who had authored Oregon's original anti-stalking law in 1995, recognized the problem immediately when he heard Kristil's story. He sat down with the communications companies to negotiate. The typical time for warrant processing, he explained, was around six weeks—first in, first out. But this was different. This was a specific category of warrant for a specific kind of danger. The companies agreed. "Had the communications companies provided their information immediately, she probably would not have been murdered," Mannix said.
Kristil's mother, Linda Grimsrud, has thrown herself into advocacy. She and Kristil's father have visited the Colorado Capitol, working to bring the law to their home state in the 2027 legislative session. They are also raising Kristil's three children—now 17, 13, and 11. Grimsrud spoke about the tension between privacy and safety, acknowledging it was difficult terrain. "But I just don't feel that, especially in this age of technology, people should be able to hide," she said. Hearing that Oregon had passed the law felt nearly as significant as hearing the guilty verdict read in court.
The issue extends far beyond Colorado or even the United States. Academics studying violence against women in Australia and the UK have noted that technology-facilitated abuse is now a global problem, and that law enforcement everywhere has struggled to keep pace. In Australia, there is no statutory requirement for companies to respond quickly. In the UK, criminology professor Nicole Westmarland described stalking as "shape-shifting" over the years, becoming so intertwined with technology that the term "technology-facilitated abuse" no longer quite captures it. "It's practically all technology-facilitated," she said. Kristil's family and advocates like Meg Garvin, executive director of the National Crime Victim Law Institute, are pushing for the law to spread to other states, to federal legislation, and internationally. Grimsrud said she feels Kristil's presence in the work, urging them forward. "If she can do some good for other families, I know that she'd be proud of that."
Citas Notables
I'm confident that she would have been alive today. She would have been in a place to safety plan, and he never would have had the opportunity to get behind her in the way that he did.— Rebecca Ivanoff, Kristil's cousin and former domestic violence prosecutor
Had the communications companies provided their information immediately, she probably would not have been murdered.— Rep. Kevin Mannix, sponsor of Kristil's Law in Oregon
La Conversación del Hearth Otra perspectiva de la historia
Why did it take a death for companies to agree to something that seems so basic—just answering a warrant faster?
Because there was no law requiring them to. They processed warrants in the order they arrived, like any other request. No urgency, no priority. It was a system that worked fine until it didn't—until someone died because of the delay.
But Google says they have a 24/7 team for emergency requests. Couldn't they have flagged this one?
They could have, if someone had told them it was an emergency. But the detective didn't know yet that Kristil's life was in immediate danger. The stalking was real, the threats were real, but it didn't look like a murder-in-progress. By the time it became obvious, it was too late.
So the law creates a new category—domestic violence and stalking warrants get priority. Does that actually solve the problem?
It creates a floor. It says: if you see these words in a warrant, you move it to the front of the line. You have 72 hours, not six weeks. It doesn't prevent all tragedies, but it removes one barrier that killed Kristil.
Her husband was impersonating her ex-boyfriend. How does a warrant even help identify him if he's lying about who he is?
The warrant asks for the IP address, the device information, the account details—the digital fingerprints. Those don't lie. They would have led back to him, to his devices, to his location. The police would have known.
And now her family is pushing this in other states. Do you think it will spread?
It's already spreading. Colorado is next. But the real question is whether companies will adopt it voluntarily in places without laws, or whether every state has to pass its own version first. That's the slower path.
What does Kristil's mother say keeps her going?
She says she feels Kristil's presence in the work. That her daughter would want her family to survive this, to help others, to make sure her death wasn't just another statistic. It's the only meaning she can make from it.