Two arrests made after a 46-year-old man was ambushed in his driveway before dawn, authorities say.
BEACH PARK, Ill. — Lake County sheriff’s detectives say a web of license plate readers and neighborhood cameras led them to two suspects in an alleged murder-for-hire plot that began with a pre-dawn shooting outside a home on Nov. 5. The victim, a 46-year-old Beach Park man, was shot while sitting in his car and later died at a hospital.
Authorities say the case moved quickly after investigators spotted a suspicious vehicle on home surveillance footage and then matched its license plate on a regional reader network. That trail, they said, pointed across the state line to Mount Pleasant, Wis., where officers detained the suspected gunman later that day. Detectives also arrested a second man the following afternoon in North Chicago on suspicion of ordering the attack. The arrests capped a two-day effort touching multiple jurisdictions and underscored how automated plate readers, a technology now used by departments across the Chicago region, can accelerate leads in violent-crime cases.
Deputies were alerted at about 5:45 a.m. on Nov. 5 after Waukegan police reported a gunshot victim had been driven to Vista East Medical Center. The man had been shot around 5:20 a.m. outside his residence in the 38400 block of North Sheridan Road, according to the sheriff’s office. Detectives believe he was warming up his car before work when a gunman approached and opened fire. A relative rushed him to the hospital, and he was later flown to a Level 1 trauma center. Investigators canvassed the block and nearby streets for video and, by midmorning, had identified a vehicle seen moving slowly through the area the previous day. “Our detectives swiftly uncovered a significant amount of evidence that led them to the offender,” Sheriff John D. Idleburg said in a statement.
After obtaining the plate number, detectives queried a Flock Safety license plate reader network and confirmed the same vehicle passed through the neighborhood near the time of the shooting, officials said. They shared the alert with neighboring agencies, including the Mount Pleasant Police Department in Wisconsin, where the registered owner lived. By Wednesday afternoon, Mount Pleasant officers found the owner, identified by authorities as Cristian N. Ruval-Cavatorres, 28, driving a different vehicle and took him into custody during a traffic stop. Investigators executed a search warrant later and recovered a handgun they believe was used in the shooting, along with a phone they say the suspect used to communicate with the person who hired him.
Detectives located the alleged organizer of the attack around 1:30 p.m. on Nov. 6 in the 1600 block of Park Avenue in North Chicago and detained him. Officials have not released that person’s name, age, or possible charges, citing the ongoing investigation. As of the initial arrest, Ruval-Cavatorres was booked on attempted first-degree murder, aggravated battery with a firearm, and aggravated discharge of a firearm. He was held in the Racine County Jail pending extradition to Lake County. The sheriff’s office has said the shooting was targeted; investigators have not publicly discussed a motive, what the victim did for work, or how the suspects allegedly connected.
The victim was identified by the Lake County coroner as Oscar Ochoa-Tello, 46, of Beach Park. He remained in extremely critical condition for several days and was pronounced dead Saturday, according to officials. Preliminary autopsy findings showed he died of complications from multiple gunshot wounds. Prosecutors said charging decisions related to his death are under review, and additional counts could be filed after investigators finish their reports and evidence testing. Court records detailing any new filings were not immediately available, and authorities have not said whether the second man remains in jail or has appeared before a judge.
Lake County officials emphasized the role of technology and routine police work in the case. Detectives pieced together the path of the suspect car from private cameras, then used automated readers to confirm its movements and alert nearby agencies. License plate readers capture plates and time-and-location data as vehicles pass mounted cameras; departments use them to identify stolen cars, track fleeing vehicles, or connect plates to criminal investigations. The tools have expanded in Chicago’s suburbs in recent years, often through interagency agreements that allow alerts to ripple across county and state lines. Officials said those links helped them find the registered owner quickly in Wisconsin and recover potential evidence within hours of the shooting.
Investigators have not said how many rounds were fired, what caliber handgun was recovered, or how much the alleged shooter was paid. They also have not described the suspected relationship between the men in custody and Ochoa-Tello, or whether additional suspects are being sought. Detectives said they are continuing to gather records, analyze phone data, and pull more video from the neighborhood and surrounding corridors. Forensic testing on the firearm and shell casings is pending, as are full autopsy results. The sheriff’s office said it would release more information as charges are reviewed by the Lake County State’s Attorney’s Office.
In the days after the shooting, neighbors on North Sheridan Road described a quiet stretch of homes set back from the roadway, where many residents leave for early shifts. Traffic along that corridor thins before sunrise, one neighbor said, making the sound of gunfire stand out. Deputies kept the block closed for several hours on Nov. 5 as crime scene technicians documented the driveway and street, collected video doorbell footage, and mapped vehicle movements. “Senseless acts of violence have no place in our society,” Idleburg said, adding that the department would “continue to hold relentlessly violent offenders accountable.” Deputy Chief Christopher Covelli, the agency’s public information officer, discussed the investigation on local television, highlighting how plate-reader alerts helped knit together leads across jurisdictions.
As the case proceeds, Ruval-Cavatorres remains jailed while extradition paperwork moves through court. If prosecutors upgrade charges in light of the victim’s death, a grand jury could review the case within days. The second man, detained in North Chicago, has not been publicly charged as of this week. Detectives are expected to complete additional interviews and phone analyses and to seek any further search warrants tied to communications or payment records. Officials said they plan to provide an update once laboratory testing on the firearm and ballistics is complete and after prosecutors determine the charging path.
As of Thursday, investigators had not announced a court date for Ruval-Cavatorres in Lake County, and the sheriff’s office had not released further details about the alleged organizer. The next update is expected after prosecutors review evidence tied to Ochoa-Tello’s death and any extradition hearing is scheduled.
Author note: Last updated November 14, 2025.