She was killed by her stalker. Could social media companies have saved her?

The brutal, premeditated murder of 43-year-old Kristil Krug, a married mother of three from Colorado, has sparked urgent legal reform across the United States – and drawn global attention to gaps in how tech companies respond to law enforcement requests in stalking and domestic violence cases.

Krug’s nightmare began in autumn 2023, when unsolicited, increasingly menacing text messages and emails flooded her devices. The sender claimed to be her ex-boyfriend, and the relentless harassment left her trapped in a constant state of fear. Terrified for her safety, Krug turned to local police, who immediately submitted legal warrants to Google and major mobile providers seeking information to unmask her online tormentor.

For weeks, however, the tech companies failed to respond to the request. No leads emerged to identify the stalker, and by December 2023, Krug was so frightened that she carried a handgun for self-defense even on routine trips. That changed on a December morning, shortly after she dropped her three children at school. When she pulled into her home garage and stepped out of her car, her attacker ambushed her from behind. He fatally fractured her skull and stabbed her in the heart before she could react.

It was only when Krug’s husband requested a routine wellness check several hours later that her body was found. With the investigation now elevated to a homicide, police expedited their warrant demands, and within hours, a shocking truth emerged: the stalker was not an unknown ex-boyfriend. It was Kristil’s own husband, Daniel Krug, who had orchestrated the entire harassment campaign to cover his premeditated plan to kill her.

Daniel Krug was convicted of stalking, murder, and criminal impersonation last April, and sentenced to life in prison. For Krug’s family, the verdict brought little closure – they were left grappling with the avoidable nature of her death. If tech companies had responded to the initial warrant in a timely manner, the stalker’s identity would have been uncovered long before the attack, they argue.

“I’m confident that she would have been alive today,” said Rebecca Ivanoff, Krug’s cousin and a former domestic violence prosecutor based in Oregon. “She would have been able to put a safety plan in place, and he never would have had the opportunity to attack her the way he did.”

Determined to prevent other families from suffering the same devastating loss, Ivanoff, Krug’s parents, and their extended supporters launched a campaign to change state laws. Their core demand was simple: establish mandatory legal deadlines requiring communications and social media companies to respond rapidly to law enforcement warrants in stalking and domestic violence emergencies.

To their surprise, the proposal received widespread bipartisan support from law enforcement and lawmakers alike, who universally agreed the reform was a common-sense necessity. On May 1, Oregon became the first U.S. state to pass the legislation, dubbed Kristil’s Law. The new statute mandates that social media platforms comply with relevant warrants within 72 hours, and traditional communications providers within five business days. Before the law passed, there were no binding rules for response timelines, and no consequences for delayed replies.

Krug’s family is now pushing to pass the same law in Colorado, Kristil’s home state, as well as in other U.S. states and at the federal level. For Krug’s mother, Linda Grimsrud, the passage of the law in Oregon has given new meaning to her daughter’s death. “This at least helps me have a belief that I don’t have to look at her death as just another meaningless statistic … that she’s just another victim of domestic violence,” Grimsrud said. She added that learning the law had passed felt as meaningful as hearing the guilty verdict in Daniel Krug’s trial – and that the family’s work is far from over.

Legal and gender violence experts say the issues that prompted Kristil’s Law extend far beyond U.S. borders. Professor Asher Flynn, of the ARC Centre of Excellence for the Elimination of Violence Against Women at Australia’s Monash University, noted that many other countries face the same regulatory gaps. In Australia, for example, there is no statutory requirement for tech companies to meet response deadlines, and while police can request expedited disclosures for life-threatening cases, the process is entirely discretionary, requiring officers to explicitly frame a case as urgent to move it forward.

“This means that cases may only be escalated to emergency response mechanisms once risk has clearly intensified, rather than at earlier stages of stalking or coercive control,” Flynn explained.

Nicole Westmarland, a criminology professor and director of Durham University’s Centre for Research into Violence and Abuse in the U.K., added that modern stalking has undergone a profound shift in the digital age. Nearly all stalking now involves some form of technology-facilitated abuse, making it a growing global public health problem that law enforcement has struggled to address. “We used to talk about technology-facilitated violence and abuse; I think that’s almost not a useful term anymore, because … it’s practically all technology-facilitated,” she said. “So it’s a massive swing.”

In Oregon, the bill’s lead sponsor, Republican Representative Kevin Mannix – who wrote the state’s original anti-stalking law in 1995 – said he immediately recognized the urgent need for reform after learning of Krug’s case. Before Kristil’s Law, he explained, the typical processing time for law enforcement warrants at tech companies averaged six weeks, handled on a first-come, first-served basis with no priority for life-threatening cases.

“It became clear that, in Kristil’s situation, had the communications companies provided their information immediately, she probably would not have been murdered,” Mannix said. “And so looking at that, we realised we needed a special category of warrant which is dedicated to domestic violence and stalking situations.” Mannix negotiated directly with communications companies to craft the bill, which was structured to only apply to high-risk domestic violence and stalking cases, rather than creating broad new requirements for all warrant requests. Companies ultimately supported the targeted approach.

Requests for comment from Google and the mobile providers that received the original warrant in Krug’s case went unanswered. In prior public statements, Google has noted that it receives a massive volume of law enforcement requests daily, and maintains a 24/7 team dedicated to handling emergency requests.

The new law has sparked ongoing debate about balancing individual digital privacy and personal safety, a point Grimsrud acknowledged. “It’s a tough topic, right, because it does deal with … freedom of speech and your rights and your freedoms,” she said. “But I just don’t feel that, especially in this age of technology … people should be able to hide.”

Meg Garvin, executive director of the National Crime Victim Law Institute, called Kristil’s Law a clear step forward, but expressed frustration that regulatory reform was needed to close a gap that should never have existed. She hopes the law serves as a wake-up call for tech companies and legislatures across the country. “Jurisdictions that don’t have it, corporations in those jurisdictions should take a hard look at themselves and say: Why wouldn’t we automatically prioritise information requests that involve risks to persons?” she said.

Today, Grimsrud and Krug’s father continue their advocacy work: they are lobbying Colorado lawmakers to pass Kristil’s Law during the 2027 legislative session, while also helping care for Krug’s three children, now aged 17, 13, and 11. Grimsrud said her daughter, a former dancer with a biochemical engineering degree, a sharp intellect, and a beloved sense of humor, who was always fiercely protective of her family, would support the work they are doing.

“She would be proud of the fact that we can … try to make someone else’s family not go through such suffering, or at least make some small ripple in the pool,” Grimsrud said. “I just feel really strongly that she’s there and wanting to see us succeed … if she can do some good for other families, I know that she’d be proud of that.”