I managed an extended stay property once where the police knew the front desk number by heart. Not because we were a bad hotel. Because we were housing people who had nowhere else to go, and when you become someone's last option, you inherit problems that no brand standard was ever designed to solve.

Thursday night in Sacramento, two people in wheelchairs got stabbed at an Extended Stay America on Rosin Court after an argument with a neighbor in the building. A neighbor. Not a guest checking in for two nights. Someone who lives there. The suspect caught a puncture wound too. All three went to the hospital with non-life-threatening injuries. Police are booking the neighbor on felony assault charges.

Here's what the headline doesn't tell you. This is the second stabbing-related incident tied to Extended Stay America properties in the Sacramento market in roughly 18 months. A lawsuit filed in January 2025 alleged that ESA failed to provide adequate security after an employee's fiancé was fatally stabbed at another location in South Natomas. That's a pattern, not a coincidence. And the extended stay segment has grown its portfolio by over 50% in the last decade, which means more properties in more markets with the exact same vulnerability. The model works financially... the operational cost to achieve is lower, the length of stay drives labor efficiency, your housekeeping frequency drops. But when guests become residents (some of them vulnerable, some of them in crisis, some of them the last family standing between housed and homeless), you're not running a hotel anymore. You're running something that doesn't have a clean label, and the security model of a transient hotel doesn't fit.

The uncomfortable truth is that most extended stay operators know their properties sit on a spectrum. On one end, you've got traveling nurses and construction crews and relocating families. On the other end, you've got people who can't qualify for an apartment and are paying weekly because they have no other choice. The further you slide toward that second end, the more your operation looks like property management for a population with zero safety net... and your staff is trained to check people in, not to de-escalate domestic disputes between neighbors in wheelchairs at 10 PM. Extended stay brands talk about "diverse long-term guests" in their marketing. What they mean, at some properties, is that you're the affordable housing system's overflow valve. And overflow valves don't come with security budgets.

This isn't an ESA problem exclusively. It's a segment problem. The economics of lower-tier extended stay practically guarantee a guest mix that includes people in crisis, and the staffing model (skeleton crews, especially overnight) practically guarantees that when something goes wrong, nobody's there who's trained to handle it. You can install cameras. You can post signs. You can train your front desk agent on conflict de-escalation. But you can't run a 90-key building with one person on the overnight shift and pretend you've got a security posture. You've got a warm body and a phone to call 911. That's not security. That's a witness.

I worked with a GM years ago who kept a binder behind the front desk labeled "Emergency Procedures." It was three inches thick, laminated tabs, the whole production. I asked the night auditor if she'd ever opened it. She looked at me like I'd asked if she'd read the phone book. "I know where the panic button is," she said. "That's my emergency procedure."

That's the gap. And it's the gap that gets people hurt.

Two people were shot at a hotel in Pinellas County this week. This comes less than three weeks after a 76-year-old woman was found murdered in a hotel room at another property in the same county. In that case, surveillance footage showed the suspect entering with the victim and leaving alone hours later. A hotel employee discovered the body. The suspect had a lengthy criminal record in the area... burglary, grand theft, battery. He was arrested and charged with second-degree murder. In the shooting this week, investigators say the individuals involved knew each other, which law enforcement frames as "no threat to the public." Cold comfort if you're the housekeeper who heard the gunshots. Cold comfort if you're the GM whose property is now a crime scene and a news headline.

Here's the thing nobody in the C-suite wants to talk about honestly. Hotels are, by design, open environments. Anybody can walk in. That's the product. That's the promise. "Welcome." But welcome is a security vulnerability, and most properties are running with the bare minimum... a camera system that may or may not be recording, locks that may or may not be re-keyed properly, and a staff that has never once rehearsed what to do when something violent happens on property. Florida law holds hotels to a non-delegable duty to provide reasonably safe premises, including protection against third-party criminal acts. "Reasonably safe" is going to be defined by a plaintiff's attorney after the fact, and they're going to ask what you did BEFORE the incident. If the answer is "we had a binder," you're going to have a very expensive conversation with your insurance carrier (assuming your carrier hasn't already restricted your A&B coverage, which is happening more and more in high-incident markets).

The insurance piece is where this gets real for owners. Underwriters are increasingly pulling location-level crime data during renewals. If your property sits in a zip code with elevated incident rates, your premiums are going up or your coverage is narrowing... or both. And if you've had an on-property incident without documented evidence of proactive security measures, good luck. The industry's liability exposure on assault and battery claims has been climbing for years, and the carriers know it. They're pricing it in whether you are or not.

I've seen this movie before. A violent incident happens. The brand sends a memo. The management company schedules a conference call. Somebody orders new signage for the parking lot. And then nothing changes at 2 AM when one person is running the building alone. The question isn't whether your property has a security plan. The question is whether the person working the overnight shift right now, tonight, knows exactly what to do if they hear gunshots. If you're not sure... that's your answer.

Let me tell you what happened on March 9th and then let me tell you what it actually means.

A guest at the Signia by Hilton Orlando... that's the big Hilton-branded property on Bonnet Creek, an "Official Walt Disney World Hotel"... had a near-drowning incident at approximately 2:30 in the afternoon. Medical helicopter responded. Patient transported to a hospital. Orange County Sheriff on scene. And then... silence. No statement from the hotel. No statement from Disney. No patient condition update. That's standard protocol when there's no fatality, but the silence doesn't make the liability disappear. It just makes it quieter.

Here's what should bother you. This isn't isolated. In December 2024, a six-year-old drowned at the Crowne Plaza in Lake Buena Vista... another Disney "Good Neighbor" property. That family filed a lawsuit in November 2025 alleging no lifeguard, hazardous pool design, and signage that didn't match reality. In June 2025, a five-year-old autistic boy drowned in a pond at the Westgate Town Center Resort nearby. And Disney's own properties have had a string of guest deaths in the fall of 2025, though those were different circumstances. The pattern isn't "Disney is unsafe." The pattern is that water features at resort-area hotels are killing and nearly killing guests at a rate that should make every operator with a pool take a hard look at what they're actually doing versus what they think they're doing.

I managed a property once where the pool gate latch had been broken for three weeks. Three weeks. Maintenance knew. The GM knew. It was on a list. Nobody fixed it because nobody had drowned yet, and there were 40 other things on the list that felt more urgent. That's how it always works. Pool safety is a "when we get to it" item until the helicopter lands in your parking lot, and then it's the only thing that exists. The Signia is a 1,000-plus key convention hotel with a major brand flag and Disney affiliation. If it can happen there, in the middle of the afternoon, it can happen at your 150-key property at 7 PM on a Tuesday when the front desk agent is the only person in the building.

And here's the part that keeps me up at night as an operator. The "Good Neighbor" designation creates a perception gap that is absolutely going to show up in litigation. The guest books a "Walt Disney World Hotel." They see Disney branding in the marketing. They assume Disney-level safety protocols. But Disney doesn't own it. Disney doesn't operate it. Disney doesn't staff the pool deck. Hilton has brand standards, sure, but the actual safety execution... lifeguards or no lifeguards, pool inspections, emergency response training for front-line staff... that's on the owner and the management company. The guest doesn't know that. The jury won't care. If you're operating a branded property where the brand name implies a level of oversight that doesn't actually exist at the operational level, you're carrying risk that isn't priced into your insurance and isn't reflected in your safety budget.

So what do you do? You do the boring stuff that doesn't make the renovation presentation but keeps you out of a courtroom. You walk your pool deck tomorrow. Not next week. Tomorrow. Check the gates, the latches, the depth markers, the drain covers, the sight lines from wherever your staff is supposed to be monitoring. Check whether your "No Lifeguard On Duty" signage actually complies with your state and local code (in Florida, that's Chapter 514). Check when your last documented safety drill was for a water emergency. If the answer is "I don't know" or "we don't do those"... you just found your Monday morning priority. And document everything. The difference between a defensible position and a catastrophic judgment is almost always paper. Did you train? Can you prove it? Did you inspect? Is it logged? I've seen this play out in depositions. The hotel that has the binder wins. The hotel that says "we take safety seriously" without the binder loses.

Let me paint this for you. You're a couple checking into an Uptown Charlotte hotel. You set your bags down, open a drawer or reach between the cushions, and your hand touches a loaded firearm that does not belong to you. Think about that moment. Think about what that guest is feeling. Now think about the phone call that GM got thirty minutes later.

Here's what actually happened. The previous guest left a loaded handgun in the room. Housekeeping turned that room. A front desk agent sold that room. And nobody... not one person in the chain... found the weapon before the next guest did. That's not a freak accident. That's a process failure with a body count attached to it if the circumstances were slightly different. A child in that room. Someone unfamiliar with firearms handling it incorrectly. We're not talking about a forgotten phone charger. We're talking about a deadly weapon sitting in a space your team certified as ready for occupancy.

I've seen this movie before, and Charlotte keeps screening it. A shooting at a Marriott on West Trade Street last September. A murder-suicide at a Tru by Hilton the year before that. A deadly shooting at a Motel 6 in South Charlotte. This isn't some theoretical risk you put in a safety manual and forget about. This is a pattern in a specific market, and if you're operating in Charlotte (or any city with similar dynamics), your team needs to know exactly what to do when they find something that shouldn't be there. Not "call the manager." Not "figure it out." A specific, trained, documented protocol. Because here's the thing about housekeeping room inspections... most SOPs are built around cleanliness and amenity placement. Check the bathroom, check under the bed for trash, restock the minibar. Nobody's training a room attendant on what to do when they open a nightstand and find a Glock. But they should be. Because it's happening.

And let's talk about the liability for a second, because your owners are going to ask. North Carolina is a shall-issue state for concealed carry. Hotels can prohibit firearms on premises by posting conspicuous notices. Are you posted? Do you know? Have you checked whether your signage actually meets the statutory requirements, or did somebody stick a small placard by the elevator three years ago and nobody's looked at it since? Because if you're not properly posted and a firearm incident occurs on your property, the legal conversation gets very different very fast. And even if you ARE posted, your exposure doesn't disappear... it just shifts. A guest who finds a weapon in their room has a negligence claim that starts with "your team inspected this room and missed a loaded firearm." Good luck defending that in discovery.

I worked with a GM years ago who added one line to his room inspection checklist after a similar incident at his property: "Check all drawers, closets, safes, and concealed spaces for items left by previous guest. Report ANY unusual item to MOD before releasing room." One line. It added maybe 45 seconds to the inspection. He told me later that in the first six months, his team found a hunting knife, two bags of something he didn't want to identify, and a handgun. All before guests checked in. Forty-five seconds. That's the difference between a near-miss and the kind of headline that shows up on the evening news with your flag on it.