Kristil Krug, a 43-year-old mother of three from Colorado, was murdered by her husband in December 2023 after enduring months of stalking and harassment. The killer used digital tools to impersonate her ex-boyfriend, sending threatening messages while living with her. Despite her reports to police and efforts to seek protection, delays in responses from technology and communications companies left her vulnerable. Her tragic death has since sparked important questions about accountability in the digital age and led to new legislation aimed at preventing similar outcomes.
The Timeline of a Tragedy
Daniel Krug, Kristil’s husband, orchestrated a prolonged campaign of intimidation. He impersonated her former partner through texts and emails, creating a climate of fear. Kristil reported the harassment to law enforcement, prompting police to obtain warrants and send them to Google and mobile providers to identify the source of the threats.
Company responses, however, followed a standard “first-in, first-out” process that typically took around six weeks. While waiting for answers, Kristil lived in constant fear and even carried a gun for protection. On the day of her murder, after dropping her children at school, her husband ambushed her in the garage. He shot her in the head and stabbed her. Only after her death, when police issued urgent requests connected to a homicide investigation, did the companies respond swiftly—revealing that the stalker was her own husband.
Daniel Krug was later convicted of murder, stalking, and criminal impersonation, and sentenced to life in prison.
Kristil’s Law: A Legislative Response
Kristil’s family, including a cousin who previously worked as a domestic violence prosecutor, channeled their grief into advocacy. Their efforts resulted in Kristil’s Law in Oregon, which took effect on May 1, 2026. The law mandates faster timelines for companies handling relevant legal requests:
- Social media companies must respond to warrants within 72 hours.
- Communications providers must respond within 5 days.
These requirements apply specifically to cases involving stalking, domestic violence, and violations of protective orders. It represents the first law of its kind in the United States, with ongoing pushes for similar measures in Colorado and at the federal level.
Could Tech Companies Have Made a Difference?
In Kristil Krug’s case, the answer appears to be yes. Law enforcement and her family have stated that timely identification of the harasser would have given her critical information to create a safer plan, pursue stronger legal protections, or separate from the threat. The prolonged uncertainty left her exposed at a time when stalking was actively escalating—a common pattern in technology-facilitated abuse.
Cyberstalking often exploits social media, messaging apps, and anonymous accounts. While many victims know their stalker (frequently current or former intimate partners), digital tools make it easier to hide identities and intensify harassment. Faster compliance with warrants in urgent situations could close this dangerous gap.
However, the situation is not entirely straightforward. Even with quicker disclosure, the perpetrator was her husband and lived in the same household, meaning discovery alone might not have immediately neutralized the risk without decisive intervention, such as arrest or relocation. Tech companies also manage enormous volumes of legal requests daily and maintain dedicated teams for true emergencies, while citing privacy laws and operational challenges.
Broader Implications
This case exposes systemic frictions between law enforcement needs, victim safety, and technology platforms’ scale and privacy obligations. Stalking has evolved with digital tools, yet response systems have not always kept pace. Kristil’s Law introduces targeted accountability without broadly undermining user privacy, focusing instead on high-stakes situations involving violence and harassment.
Social media and communications companies could contribute more proactively through improved detection of impersonation and threat patterns, streamlined reporting for victims, and standardized rapid response protocols for verified high-risk cases. Yet ultimate responsibility for violence rests with the perpetrator. Effective prevention also requires strong law enforcement follow-through, accessible victim resources, and public awareness.
Kristil Krug’s story is a painful reminder that delays in the digital ecosystem can have life-or-death consequences. Through her family’s advocacy, her death may help protect others by compelling faster action when it matters most. As similar laws are considered elsewhere, the balance between safety, privacy, and efficiency will remain central to the conversation.
About The Author
