5 suspects arrested in SoCal rail-cargo theft probe after shots fired from moving BNSF train

An attempted-murder warrant changed the Cajon Pass cargo-theft investigation less than 48 hours after the first search came up empty

A BNSF freight train travels through California’s Cajon Pass. Authorities arrested five men after a suspect fired at a BNSF police officer during a rail-car burglary. This photograph has no connection to the case. (Photo: Bill Stephens)

Five men traveled through Southern California as law enforcement closed in. Among them was Angel Castro, whom investigators linked to Monday’s shooting at a BNSF officer. Detectives searched the vehicle and found equipment used to burglarize rail cars. The stop followed a two-day inquiry that began with gunfire from a moving freight train.

The Sheriff’s Department announced the arrests Thursday morning. Authorities identified the 21-year-old as the suspected gunman. He faces attempted murder, cargo theft and conspiracy allegations. Four accused coconspirators also remain in custody.

Task force members conducted an operation along the rail corridor at approximately 4:30 p.m. Wednesday. San Bernardino police helped locate the group traveling through the city. The team stopped their car and detained every occupant. A subsequent examination uncovered rail-burglary tools, according to the agency.

Attempted-murder warrant leads to Castro

Detectives obtained an attempted-murder warrant after linking him to the shooting. That determination followed Monday’s confrontation near Cajon Boulevard and Keenbrook Road in Devore. The gunfire erupted around 6:04 p.m. after BNSF personnel encountered possible rail-car burglars. One person discharged a handgun toward a railway officer as employees tried to deter the activity.

The northbound freight train continued to Summit Valley before stopping farther along the route. Deputies established a perimeter while aviation crews searched from above. The Specialized Enforcement Division examined cars that participants may have entered. The first response produced no arrests.

FreightWaves reported Wednesday that someone took merchandise, but officials had not calculated its value. Investigators still lacked a participant count. The arrest update names five men without identifying recovered goods. The agency continues examining the case.

Four other men face cargo-theft charges

Authorities identified Jorge Sarmiento Ochoa, 31, as Castro’s accused coconspirator. They also named Miguel Humberto Grajeda Carrizos, 24, and Jesus Jose Grajeda, 25. Another suspect is Cesar Geovanny Grajeda Medina, 22. Officers arrested each on suspicion of conspiracy, cargo theft and possessing burglary tools.

The sheriff’s release described every defendant as a Mexican national. Deputies booked the group into San Bernardino’s Central Detention Center. Each remained jailed Thursday morning. Detectives continue gathering evidence.

The Rural Crimes Task Force asks witnesses to contact 909-387-8400. Tipsters may remain anonymous through We-Tip. They can call or text REPORT to 844-909-3006. The online portal also accepts submissions.

Why It Matters

An armed cargo-theft crew can endanger railroad employees while disrupting freight moving through major corridors. Transportation companies need fast escalation procedures because these investigations can quickly become violent criminal cases.

Click here for more articles on cargo theft and freight fraud by Phil Brink.

Indiana State Police recover 12 stolen truckloads worth more than $11 million – FreightWaves

Staged truck crashes could bring 20 years in federal prison under new bill – FreightWaves

Truck tractors hauled 132 pounds of cocaine to Florida, sheriff says – FreightWaves

Upcoming FreightWaves Events
Compliance

Brokerage Compliance Symposium

The day before F3. Every compliance issue you face - fraud exposure, carrier liability, FMCSA rules, cargo theft, insurance gaps - navigated by attorneys and operators defining best practices in a changing industry.

October 26, 2026
The Signal at Chattanooga Choo Choo • Chattanooga, TN
Register Now
Awards

F3 Awards Dinner

The night before F3. FreightTech100 companies honored. FreightTech 25 and Shipper of Choice winners revealed live. Cocktail reception into dinner and live music - 300 industry leaders in one purpose-built room.

October 26, 2026
The Signal at Chattanooga Choo Choo • Chattanooga, TN
Register Now
FreightTech

F3: Future of Freight Festival

Industry-defining keynotes, rapid-fire technology demos, and industry leaders networking in experiences across Chattanooga - plus the inaugural F3 Awards Dinner featuring the FreightTech and Shipper of Choice reveals.

October 27, 2026 – October 28, 2026
The Signal at Chattanooga Choo Choo • Chattanooga, TN
Register Now
Compliance Brokerage Compliance Symposium Oct 26 • The Signal at Chattanooga Choo Choo • Chattanooga, TN

The day before F3. Every compliance issue you face - fraud exposure, carrier liability, FMCSA rules, cargo theft, insurance gaps - navigated by attorneys and operators defining best practices in a changing industry.

The Signal at Chattanooga Choo Choo • Chattanooga, TN Register Now
Awards F3 Awards Dinner Oct 26 • The Signal at Chattanooga Choo Choo • Chattanooga, TN

The night before F3. FreightTech100 companies honored. FreightTech 25 and Shipper of Choice winners revealed live. Cocktail reception into dinner and live music - 300 industry leaders in one purpose-built room.

The Signal at Chattanooga Choo Choo • Chattanooga, TN Register Now
FreightTech F3: Future of Freight Festival Oct 27 – Oct 28 • The Signal at Chattanooga Choo Choo • Chattanooga, TN

Industry-defining keynotes, rapid-fire technology demos, and industry leaders networking in experiences across Chattanooga - plus the inaugural F3 Awards Dinner featuring the FreightTech and Shipper of Choice reveals.

The Signal at Chattanooga Choo Choo • Chattanooga, TN Register Now

Phil Brink

Phil Brink is the Head of Fraud Media and Education at FreightWaves, where he investigates cargo theft, freight fraud and transportation security. He owned and operated a freight brokerage for more than a decade before organized fraud targeted his business, forcing him to rethink how freight companies identify and manage risk. The lessons he learned continue to shape his reporting, education and collaboration with brokers, carriers, shippers and law enforcement. He developed FreightWaves' Certified Fraud Compliance Officer (CFCO) program to give transportation professionals practical knowledge and a structured framework for identifying and managing fraud risk. Reach him at phil.brink@firecrown.com.