THE OLD GUARDIAN
Independent Investigative Journalism
How a decade of decisions left Iryna Zarutska with no one standing between her and Decarlos Brown.
By Chris Allen | The Old Guardian | August 2026
Decarlos Brown Jr. was on the Lynx Blue Line for more than an hour before he killed Iryna Zarutska.
He had no ticket. He was exhibiting visible behavioral disturbance captured on surveillance cameras. At 8:18 PM, two Charlotte Area Transit System security personnel passed him on the train. There was no interaction. No ticket check. No intervention. No removal.
At 9:46 PM, Iryna sat down in the row in front of him. Four minutes later she was stabbed three times from behind.
What happened in those four minutes was a crime committed by one man. What happened in the years, months, and hours before them was a policy outcome. This piece is about the policy.
Section 1: The Cuts
In 2018, the Charlotte Area Transit System contracted with G4S Secure Solutions to provide security across its network. Under that contract, CATS had between 68 and 88 armed security personnel on duty.
By August 22, 2025, that number was 39.
The reduction -- confirmed at a minimum of 40% by the North Carolina Office of the State Auditor -- did not happen in a single decision. It happened across a sequence of contract changes, procurement choices, and institutional priorities that stretched across seven years. Each step, in isolation, had a rationale. Taken together, they left a system of 48 light rail cars with fewer armed guards than it had when the network was smaller.
The math is straightforward. Thirty-nine armed personnel cannot cover 48 train cars simultaneously. The auditor said so explicitly. CATS acknowledged it publicly. And yet, as of August 22, 2025, no policy had been enacted to address it.
The security contract timeline tells the story with unusual clarity. In July 2022, as the city was working toward a new contractor, CATS split its security request for proposals into two separate tracks: one for armed services, open to any qualified vendor, and one for unarmed services restricted exclusively to firms certified under the Charlotte Business Inclusion program -- a city initiative for minority, women, and small business enterprises.
Professional Security Services, a CBI-certified firm, won the unarmed contract in 2023. In June 2024, CATS canceled its armed security contract with Strategic Security Corporation for failing to meet requirements. Rather than issuing a competitive bid for a new armed security provider, CATS expanded Professional Security Services’ contract to cover both armed and unarmed services -- sole-sourcing the expansion without seeking other vendors.
The contract value tells a parallel story. CATS’s security spending tripled from $5.9 million in 2022 to $18.4 million by 2025. More money. Fewer armed guards. The auditor did not characterize this as a coincidence.
While the CATS’s security contract value has increased from $5.9 million in 2022 to $18.4 million in 2025, the number of armed security has decreased by at least 40% over that time.
NC Office of the State Auditor, Preliminary Special Report on CATS Security, September 30, 2025.
CATS defended the shift publicly, arguing that total security personnel had more than doubled -- from 108 under G4S to 219 under PSS -- though the majority of the new positions were unarmed. The city characterized the change as a move toward a more mobile and responsive security model.
The Federal Transit Administration characterized it differently. In a letter to Mayor Vi Lyles dated September 10, 2025 -- eighteen days after Iryna Zarutska’s murder -- FTA Administrator called the tragedy preventable and documented that the rate of crimes against CATS riders had reached three times the national average, and that assault on transit workers had jumped to five times the national average.
Preventable. That word appears in a federal letter, signed by the administrator of the Federal Transit Administration, sent to the mayor of Charlotte. It was written before any lawsuit was filed, before any legislative hearing was convened, and before any reform was enacted. It is a primary document and it says the system failed.
Section 2: The Night of August 22
The following timeline is drawn exclusively from the CMPD Computer-Aided Dispatch report obtained by The Old Guardian through Public Records Request PRR-6565-2025, and the CMPD Incident Report filed under Complaint #20250822-2155-02. These are primary documents on file with this publication.
At 8:18 PM, PSS security personnel passed Decarlos Brown Jr. on the Blue Line. He had no ticket. Surveillance footage showed him exhibiting erratic behavior. No action was taken.
At 9:46 PM, Iryna Zarutska boarded at Scaleybark station and sat in the row directly in front of Brown.
At approximately 9:50 PM, Brown stabbed her three times from behind, including at least once in the neck. Fellow passengers fled the car and attempted to help her. Iryna was conscious or semi-conscious for under a minute before she collapsed.
What follows is the CAD record, entry by entry.
21:55:06 -- First call received. A female has been stabbed. Just occurred.
21:56:01 -- Dispatch confirms: female is on the ground in the train.
21:56:21 -- Dispatch confirms: female does not appear to be responsive.
21:59:05 -- Caller advises: male subject is on scene, standing on the opposite platform.
22:00:07 -- Officers arrive.
22:02:25 -- Platform shutdown ordered.
22:04:26 -- Crime scene requested.
22:15:57 -- Tourniquet applied.
22:23:40 -- Medic transport to CMC Main.
Four minutes elapsed between the first call confirming a woman was stabbed and officers arriving on scene. By 21:56:21 -- seventy-five seconds into the call -- dispatch knew she was on the ground and unresponsive. Officers did not arrive until 22:00:07.
Brown’s location was known before officers arrived. At 21:59:05, eight seconds before officers reached the scene, a caller confirmed the subject was standing on the opposite platform. The system had his location. There was no one there to act on it.
The platform was not shut down until 22:02:25 -- seven minutes and nineteen seconds after the first call. A crime scene was not requested until 22:04:26. A tourniquet was not applied until 22:15:57, twenty minutes and fifty-one seconds after the first call reporting a stabbing.
There was no armed security on the car when Brown attacked Iryna. There was no security response to his presence during the hour he rode the train before she boarded. The platform was open. The system had no mechanism to stop what happened.
Section 3: The Enforcement Collapse
The failure on August 22 did not begin with Brown boarding without a ticket. It began with a system that had effectively abandoned fare enforcement as operational policy before anyone died.
The North Carolina State Auditor’s second comprehensive report, released August 17, 2026, documents the scale of what had become institutional tolerance for non-payment across the CATS network.
60% of light rail riders did not pay to ride in the period examined.
45% of total bus and light rail ridership did not pay -- roughly half the system.
Fare evasion citations dropped from 4,763 in 2023 to 2,018 in 2025.
Total fare evasion fines collected on the light rail in all of fiscal year 2025: $550.
Estimated annual revenue loss from fare evasion: $5 million to $6.5 million.
The citation drop was not accidental. CATS informed the auditor’s office that bus drivers had been instructed not to enforce fares in order to protect themselves from altercations with passengers. The agency made a deliberate operational decision to stop enforcing its own rules, and told its auditor so.
Five hundred and fifty dollars. In a full fiscal year. On a light rail network that CATS estimates loses between five and six and a half million dollars annually to non-payment. That number is not a rounding error. It is a policy outcome.
Brown did not have a ticket the night he killed Iryna Zarutska. He had not paid when he boarded earlier in the evening either. The system he was riding had collected $550 in fare enforcement fines across the entire preceding year. There was no functional barrier between him and that train.
Section 4: The Money
While CATS was collecting $550 in fare enforcement fines across fiscal year 2025, it was spending $3.4 million on a Washington, D.C. public relations firm contracted to enhance public perception of the transit system.
The second state auditor’s report also found that CATS had $1.7 million in unspent safety and security funding sitting idle at the time of the audit. The agency that could not fill its authorized security positions, that instructed drivers not to enforce fares, that reduced armed guards by 40% while tripling its security contract value -- that agency had safety money it did not spend.
These are not allegations. They are findings from the Office of the North Carolina State Auditor, published in two separate reports -- September 30, 2025 and August 17, 2026 -- both conducted in response to Iryna Zarutska’s death.
The pattern is not complicated. CATS spent more on managing its image than it collected enforcing its rules. It had safety funds it did not deploy. It cut armed security while increasing contract value. It sole-sourced an armed security contract without competitive bidding. And on the night of August 22, it had 186 of 219 authorized security positions filled -- a gap of 33 unfilled roles -- while a man with a documented psychiatric history rode its trains for over an hour without a ticket.
After the murder, in the three weeks that followed, PSS filled zero of those 33 open positions.
Section 5: What the FTA Said
On September 10, 2025 -- eighteen days after Iryna Zarutska was murdered -- the Federal Transit Administration sent a formal letter to Mayor Vi Lyles. It was not a suggestion. It was a demand.
This tragedy was preventable, and it reflects systemic failures in leadership and accountability that cannot be ignored.
FTA Administrator, Letter to Mayor Vi Lyles, September 10, 2025. transit.dot.gov. [Primary document -- publicly available.]
The letter identified the rate of crimes against CATS riders as three times the national average. It identified transit worker assault as five times the national average. It told the mayor of Charlotte in writing, on federal letterhead, that her transit system had failed and that the failure was foreseeable.
The FTA subsequently launched a full audit of CATS, identifying 18 areas of non-compliance and establishing a federally supervised corrective action process. That process is ongoing.
CATS has since increased its security contract from $5.8 million to $23.1 million. It reports that Part 1 offenses fell 61% in the first quarter of 2026 compared with the same period in 2025, and 73% in the second quarter. Off-duty law enforcement has provided more than 46,000 hours of coverage. A fare inspection team is scheduled to launch in late 2026.
These are real changes. They are also changes that were not made until after Iryna Zarutska was dead.
The question this series has not yet answered is not whether the system failed.
The FTA answered that in writing on September 10, 2025. The state auditor answered it twice. The family’s attorney is about to argue it in civil court.
The question this series will answer in Part III is who made the decisions that produced this outcome, when those decisions were made, and what they knew at the time they made them. Institutional failure does not happen in the abstract. It happens in meetings, in budget approvals, in contract awards, and in memos that someone signed.
Editor’s Notes and Source Documentation
All factual claims in this piece are sourced to primary documents, state auditor reports, or federal agency communications. Documents marked [ON FILE - TOG] are held by The Old Guardian.
1. CMPD Computer-Aided Dispatch (CAD) Report -- Event Z0822215502. PRR-6565-2025. [ON FILE - TOG] Primary source for all timeline entries in Section 2. Timestamps cited verbatim from redacted CAD log.
2. CMPD Incident Report -- Complaint #20250822-2155-02. PRR-6565-2025. [ON FILE - TOG] Primary source for classification, victim confirmation, weapon, and case status.
3. NC Office of the State Auditor, Preliminary Special Report on CATS Security Contracts, September 30, 2025. auditor.nc.gov. Primary source for: 40% armed security reduction, 68-88 armed guards under G4S vs. 39 under PSS, contract value tripling ($5.9M to $18.4M), sole-source contract expansion, 186 of 219 positions filled at time of murder, zero positions filled in three weeks post-murder, CBI program influence on procurement.
4. NC Office of the State Auditor, Rapid Response Special Report on CATS, August 17, 2026. auditor.nc.gov. Primary source for: $550 in fare fines collected in SFY 2025, 60% light rail non-payment rate, 45% total system non-payment, citation drop from 4,763 to 2,018, instruction to drivers not to enforce fares, $1.7M in unspent safety funding, $3.4M PR contract.
5. Federal Transit Administration, Letter to Mayor Vi Lyles, September 10, 2025. transit.dot.gov. [Publicly available primary document.] Source for: ‘preventable’ characterization, 3x national average passenger crime rate, 5x national average transit worker assault rate, demand for immediate corrective action.
6. U.S. Department of Justice / Western District of North Carolina, Federal Grand Jury Indictment, October 22, 2025. justice.gov. Source for federal charge, surveillance footage description, attack sequence.
7. WBTV / WCNC / Carolina Journal / Axios, September-October 2025: Corroborating coverage of state audit findings, PSS contract history, CATS response statements. Used for corroboration only; all institutional claims traced to auditor primary documents.
8. CATS Integrated Security and Public Safety Plan, September 24, 2025. charlottenc.gov. Source for CATS’s own account of security changes made post-murder.
9. CATS official communications, 2025-2026. charlottenc.gov. Source for CATS’s stated security improvements: 61%/73% crime reduction figures, 46,000 off-duty officer hours, contract increase to $23.1M.