Police have found a backpack carried by the gunman who killed the UnitedHealthcare CEO

NYPD Chief of Detectives Joseph Kenny told reporters that the words “delay,” “deny” and “depose” were scrawled on the ammunition, one word on each of three bullets.

A law enforcement official, speaking on condition of anonymity, previously told The Associated Press that the words scrawled on the ammunition were “deny,” “defend” and “depose.

The messages mirror the phrase “delay, deny, defend,” which is commonly used by lawyers and critics about insurers that delay payments, deny claims and defend their actions.

Kenny said the suspect arrived at the HI New York City hostel on Manhattan’s Upper West Side on Nov. 24, shortly after arriving in the city, and didn’t speak to anyone else staying there. He kept his mask on while eating, pulling it down to take bites of his food. He paid cash and provided staff with identification that police believed was fraudulent.

The photo police circulated of him smiling was taken at the hostel on the day he checked in.

Police believe the suspected gunman arrived on Nov. 24, getting off a bus that originated in Atlanta and made several stops along the way. One of his first stops was the hotel where the shooting took place 10 days later.

Once in New York, he appeared to pay with cash in any establishment where he was captured on camera.

Police have video of the man entering a bus depot on Wednesday following the shooting but no video of him exiting, leading them to believe he left the city, Kenny said.

NYPD Chief of Detectives Joseph Kenny told reporters that police do not yet have the name of the suspected shooter. They are still waiting for DNA evidence to be processed.

The reason for the killing remained unknown, but New York City police say evidence such as the words “Deny,” “Defend” and “Depose” being written on the bullets, firmly points to it being a targeted attack. “Our thought on it is that it could possibly be a disgruntled employee or a disgruntled client,” said Kenny.

The bus station in northern Manhattan where the suspect was last seen offers commuter service to New Jersey and Greyhound routes to Philadelphia, Boston and Washington, D.C.

As dusk approached, small groups of officers could be seen roaming through the trees in Central Park.

“We still have not found the backpack,” Police Commissioner Jessica Tisch told CNN in an interview that aired Friday afternoon.

“And so we’re doing a full sweep of Central Park to find that backpack, which we believe he dropped in Central Park. We’re using manpower, but we’re also using our drones.”

The area of the park between where the suspected gunman entered and exited is vast. Its varied terrain contains lakes and ponds, meadows, playgrounds, a rink, a zoo, outdoor concert and theater venues and a densely wooded area called “The Ramble.”

The gunman who killed the CEO of the largest U.S. health insurer may have fled the city on a bus, New York City police officials told CNN on Friday.

Video of the suspected shooter leaving the scene of the shooting Wednesday showed him riding a bicycle to Central Park and later taking a taxi cab to a bus depot, Chief of Detectives Joseph Kenny told CNN.

“We have reason to believe that the person in question has left New York City,” Commissioner Jessica Tisch said.

The gunman who killed the CEO of the largest U.S. health insurer made sure to wear a mask during the shooting yet left a trail of evidence in view of the nation’s biggest city and its network of security cameras that have aided authorities piecing together his movements and his identity.

A law enforcement official said Friday that new surveillance footage shows the suspect riding the subway and visiting establishments in Manhattan and provided more clues about his actions in the days before he ambushed UnitedHealthcare CEO Brian Thompson.

The gunman’s whereabouts and identity remain unknown Friday, as did the reason for Wednesday’s killing. New York City police say evidence firmly points to it being a targeted attack.

▶ Read more about the search for the gunman

In many companies, investor meetings like the one UnitedHealthcare CEO Brian Thompson was walking to when he was fatally shot are viewed as very risky because details on the location and who will be speaking are highly publicized.

“It gives people an opportunity to arrive well in advance and take a look at the room, take a look at how people would probably come and go out of a location,” said Dave Komendat, president of DSKomendat Risk Management Services, which is based in the greater Seattle area.

Some firms respond by beefing up security. For example, tech companies routinely require everyone attending a major event, such as Apple’s annual unveiling of the next iPhone or a shareholder meeting, to go through airport-style security checkpoints before entering.

Others forgo in-person meetings with shareholders.

▶ Read more about how companies protect their leaders

Investigators have learned the man lowered his mask at the front desk of the hostel because he was flirting with the woman who checked him in, the law enforcement official said, leading to a photo of his face.

The woman told investigators that during that encounter she asked to see his smile and he pulled down his mask, the official said.

The official wasn’t authorized to discuss details of the ongoing investigation and spoke to The Associated Press on condition of anonymity.

Those images include New York’s subway system, a law enforcement official said. In establishments where the person was captured on camera, he always appeared to pay with cash, the official said.

The official wasn’t authorized to discuss details of the ongoing investigation and spoke to The Associated Press on condition of anonymity.

Medica, a Minnesota-based nonprofit health care firm that serves 1.5 million customers in 12 states, said it’s temporarily closing all six locations.

The firm has offices in Minnesota, Wisconsin, Nebraska and North Dakota, and employs about 3,000 people. Employees will work from home, Medica spokesman Greg Bury said in an email Friday.

“The safety of Medica employees is our top priority and we have increased security both for all of our employees,” a statement from Medica said. “Although we have received no specific threats related to our campuses, our office buildings will be temporarily closed out of an abundance of caution.”

Bury also said biographical information on the company’s executives was taken down from its website as a precaution.

The insurer cited the fatal shooting of UnitedHealthcare CEO Brian Thompson in its announcement about the Dec. 12 event.

“All of us at Centene are deeply saddened by Brian Thompson’s death and want to express our support for all of those affected. Health insurance is a big industry and a small community; many members of the CenTeam crossed paths with Brian during their careers,” Centene CEO Sarah M. London said in a news release. “He was a person with a deep sense of empathy and clear passion for improving access to care. Our hearts are with his family and his colleagues during this difficult time.”

Centene Corp. has grown in recent years to become the largest insurer in Medicaid, the state- and federally funded program that covers care for people with low incomes. Insurers manage Medicaid coverage for states, and Centene has more than 13 million people enrolled in that coverage.

The insurance company also said it’s focused on ensuring the safety of employees and assisting investigators.

“While our hearts are broken, we have been touched by the huge outpouring of kindness and support in the hours since this horrific crime took place,” the company said.

But he said Friday that he’s confident police will arrest the shooter.

“We are on the right road to apprehend him and bring him to justice,” Adams said on TV station WPIX.

Later, it removed their names and biographies entirely.

Police and federal agents have been collecting information from Greyhound in an attempt to identify the suspect and are working to determine whether he purchased the ticket to New York in late November, a law enforcement official said.

Investigators were also trying to obtain additional information from a cellphone recovered from a pedestrian plaza through which the shooter fled.

The fatal shooting of Brian Thompson while walking alone on a New York City sidewalk has put a spotlight on the widely varied approaches companies take to protect their leaders against threats.

Experts say today’s political, economic and technological climate is only going to make the job of evaluating threats against executives and taking action to protect them even more difficult, experts say.

Some organizations have a protective intelligence group that uses digital tools such as machine learning or artificial intelligence to comb through online comments to detect threats not only on social media platforms such as X but also on the dark web, says Komendat. They look for what’s being said about the company, its employees and its leadership to uncover risks.

▶ Read more about the steps companies take to protect their leadership

Police said Thursday they found a water bottle and protein bar wrapper from a trash can near the scene of the ambush and think the suspect bought them from a Starbucks minutes before the shooting. The items were being tested by the city’s medical examiner.

The masked gunman who killed the leader of one of the largest U.S. health insurance companies in front of midtown Manhattan surveillance cameras remained at large Friday as the nation’s largest police department hunted for him.

▶ Read more about what to know in this case