A man accused of tampering with evidence related to the attack on a U.S. Immigration and Customs Enforcement (ICE) detention center in Texas is suspected of trying to hide documents critical of the government and former President Trump. 

Investigations led to Daniel Rolando Sanchez Estrada – identified by ICE as a Mexican green card holder and former DACA recipient – after a jail call from one of the Independence Day suspects. A group of 10 to 12 individuals is believed to have vandalized vehicles and launched fireworks at the Prairieland Detention Center in Alvarado, Texas. Law enforcement and DHS correctional officers were targeted with 20 to 30 shots. 

Upon his arrest, ICE said that law enforcement “found literal insurrectionist propaganda, titled ‘Organizing for Attack! Insurrectionary Anarchy.’ 

“As noted by West Point, ‘insurrectionary anarchism is viewed as the most significant domestic (non-jihadi) terrorist threat,'” ICE shared on X Thursday. “This individual received legal status via DACA and later obtained a green card from the Biden administration in 2024.”

Marciela Rueda is one of seven of the alleged attackers whom law enforcement caught wearing “black, military-style clothing, body armor, and covered in mud” while attempting to flee the scene on foot, according to court documents. 

Rueda placed two phone calls from the Johnson County Jail on July 6 – one to her mother, whom she told in Spanish to contact Sanchez, and another to Sanchez directly. She allegedly told Sanchez in English to tow her vehicle from the street of a Dallas address that investigators determined was used as a “staging location” before the group proceeded to the Prairieland Detention Center, which is being used to hold people related to immigration violations or awaiting deportation.  

Federal prosecutors on Monday announced charges, including attempted murder of a federal officer, against Rueda and nine others: Cameron Arnold, also known as Autumn Hill; Savannah Batten; Nathan Baumann; Zachary Evetts; Joy Gibson; Bradford Morris, also known as Meagan Morris; Seth Sikes; Elizabeth Soto; and Ines Soto. All 10 are U.S. citizens, authorities said. 

Sanchez, a Mexican national, was charged in a separate complaint with conspiracy to tamper with evidence, a felony offense. 

A twelfth individual, Benjamin Hanil Song, was charged on Wednesday and remains at large. The FBI is offering a $25,000 reward for information leading to Song, a former U.S. Marine Corps reservist wanted in connection with the July 4 ambush. 

According to court documents, Song purchased four of the guns that were found in connection with the shooting, including an AR-15-style rifle found in the back of a van driven by Morris while fleeing the scene of the attack. 

A Johnson County Sheriff’s Office detective conducted a traffic stop on Morris while he was fleeing the scene alone. Inside the vehicle, law enforcement also found a pistol, two Kevlar ballistic-style vests and a ballistic helmet, according to court documents. Morris also allegedly had a loaded magazine in his pocket that matched the pistol and a handheld radio in his possession. 

Benjamin Hanil Song is wanted in connection with the July 4, 2025, ambush attack on the Prairieland Detention Center in Alvarado, Texas.  (FBI; Getty Images)

He allegedly told investigators that he had driven himself and three others from Dallas to the ICE detention center and the plan was to “make some noise.” 

Morris said he heard about the event through a Signal group chat he was invited to after attending a protest years ago, court documents say.

Song also allegedly purchased the pistol found in Gibson’s backpack when she was fleeing the scene on foot, authorities said. 

An Alvarado police officer was shot in the neck outside the ICE facility during the attack and is expected to survive.