Killing Tren de Aragua’s founder barely moved its network

On 12 June 2026, a missile ended one of the most recognisable careers in Latin American organised crime.

President Donald Trump announced on Truth Social that US Southern Command had carried out a “swift and lethal kinetic strike” against Héctor Rusthenford Guerrero Flores, alias “Niño Guerrero,” the founder and most prominent leader of Tren de Aragua. The operation was “closely coordinated” with the Venezuelan government; Caracas later described a joint strike in the southeast of Bolívar state, with intelligence shared between the two governments. Guerrero had been a fugitive since security forces stormed his Tocorón prison stronghold in September 2023, carried an Interpol Red Notice, and sat under a USD5 million US bounty. The intuitive reading wrote itself: behead the organisation, and the organisation falls.

Our data intelligence tells a more uncomfortable story.

Two nodes, one centre

In Evidencity’s Tren de Aragua INI dataset, Guerrero is unmistakably important. He is the highest-degree individual in the entire file, appearing in 66 relationships, roughly 4.6% of the 1,435 connections we have mapped. By the standard of any single person, that is a dense, central position.

It is also a distant second. One node carries 369 relationships, more than a quarter of every connection in the file: the organisation itself, Tren de Aragua as an entity. Guerrero is the second-largest node on the map, not its gravitational centre. The centre is the brand.

The experiment

Network intelligence lets us test the headline rather than assume it. We removed Guerrero from the graph and measured what survived. The dataset’s largest connected cluster holds 475 nodes. Delete Guerrero, and 467 of them stay connected. Only five subjects fall away entirely: the handful of contacts who reached the network through him and no one else. The reason is structural. Of his 66 direct contacts, 58 are also tied straight to the organisation node, so they lose one relationship without losing their place.

Then we ran the opposite experiment. Remove the organisation node instead of the man, and the largest cluster collapses from 475 to 193. Cut both, and 89 remain. The arithmetic is blunt: killing the founder strands five people, while dissolving the brand erases roughly 60% of the network. Guerrero was replaceable plumbing. The identity was the load-bearing wall.

The bench in the data

The successors do not need to be imagined, because they already sit in the file. Yohan José Romero, alias “Johan Petrica,” is recorded as a co-founder who runs the gang’s illegal gold-mining operations in Las Claritas, Bolívar; the US Treasury sanctioned him on the same day it sanctioned Guerrero. Larry Amaury Álvarez Núñez, alias “Larry Changa,” co-founded the group and became its first member to enter Chile. Josué Ángel Santana Peña runs the “mega gang” of Santanita. Guerrero’s brother Gerso and half-brother Cheison appear as kin continuity, alongside regional bosses who have run cells across Chile and Colombia.

The depth runs past people into institutions. The dataset records Fundación Somos El Barrio JK, a charity created under Guerrero that received Venezuelan government funds and acted, in the file’s words, as “an alternative local government,” administering community kitchens and shaping local elections. A group that builds a shadow welfare state does not depend on one man to stay coherent. It has institutionalised. Tren de Aragua reads less like a pyramid with one apex and more like a federation of co-founders, kin, and regional franchises, which is precisely why the node-removal arithmetic looks the way it does.

A caveat

Open sources reach the same conclusion. Chilean organised-crime prosecutor Héctor Barros, who coordinates the region’s largest money-laundering case against the group, told reporters that this “is not a criminal structure sustained solely by the leadership of Niño Guerrero,” naming Romero and one other senior figure as plausible heirs. Barros leads the case that arrested 19 people in June 2026 over a network alleged to have moved some USD85 million between 2022 and 2025, an enquiry whose reporting lines, he says, reached senior figures well above any one boss. The US Treasury had said as much in July 2025, when it sanctioned Guerrero alongside five other leaders on a single day, treating leadership as plural rather than singular.

One honest caveat belongs on the record. Resilience does not mean nothing changed. Analysts at InSight Crime note that Tren de Aragua had been shedding cohesion since the 2023 loss of Tocorón, with regional cells already operating with autonomy. Guerrero’s death may not strengthen the state’s hand so much as scatter the network into smaller, harder-to-track cells. Survival and fragmentation can coexist here: the group can outlast its founder and splinter at the same time.

Where coherence lives

For the compliance officer, the due-diligence analyst, or the counsel mapping exposure to a sanctioned network, the lesson sits in the method. A name-based screen treats a kingpin as the keystone and assumes his removal closes the file. A network view asks a sharper question: where does a structure’s coherence actually live?

For Tren de Aragua, the answer was never one man. It was the identity that 369 relationships were built around, and the bench of co-founders, kin, and franchises already positioned to carry it. Decapitation made the headlines. The map barely moved.

Visit our catalogue to learn more about Evidencity's INI data.