Calls are made using Osama bin Laden’s satellite telephone to an al-Qaeda communications hub in Sana’a, Yemen, which is involved in the embassy bombings (see 10:35-10:39 a.m., August 7, 1998). According to MSNBC, two of the calls from bin Laden’s phone are made “days before” the bombings. The NSA is intercepting calls from bin Laden’s satellite phone at this time (see November 1996-Late August 1998) and his phone is used to make dozens of calls to the Yemen communications hub from 1996 to 1998, but it is unclear what is done with the intercepts, as the NSA is sometimes unwilling to share information with other US intelligence agencies (see Between 1996 and August 1998, December 1996, Between 1996 and September 11, 2001, and Before September 11, 2001). [Los Angeles Times, 10/10/2001; MSNBC, 2/14/2002; Newsweek, 2/18/2002; Los Angeles Times, 9/1/2002] The communications hub is run by veteran mujaheddin Ahmed al-Hada, an associate of one of the embassy bombers, Mohamed al-Owhali. Al-Owhali stays at the hub in the months before the bombing and obtains a fake passport in Yemen (see August 4-25, 1998). [Federal Bureau of Investigation, 9/9/1998 
] The NSA continues to intercept calls to and from the hub after the embassy bombings (see Late August 1998 and August 4-25, 1998).
After August 7, 1998: Operative Linked to Al-Qaeda Communications Hub in Yemen Questioned about Embassy Bombings
Yemeni al-Qaeda operative Samir al-Hada is questioned over the embassy bombings in East Africa. A communications hub run by him and his father, Ahmed al-Hada, facilitated the attacks (see Late August 1998) and will also apparently facilitate the attack on the USS Cole and 9/11 (see Before October 12, 2000 and Early 2000-Summer 2001). Details of the questioning, such as the agency that performs it and what results are passed to US intelligence, are not known, but the communications hub the al-Hada family runs will subsequently be monitored and US intelligence will derive much useful information from it (see Late 1998-Early 2002) [New York Daily News, 2/14/2002] Samir al-Hada will die in an explosion in February 2002 (see February 13, 2002).
Mid-August 1998: Al-Qaeda Leader Calls Yemen to Discuss Ship-Bombing Operation
After the East African embassy bombings, al-Qaeda leader Abd al-Rahim al-Nashiri calls a number in Yemen to discuss attacking a US warship. Al-Nashiri will go on to have a prominent role in the attacks against the USS The Sullivans (see January 3, 2000) and USS Cole (see October 12, 2000) in Yemen. US authorities learn of this call no later than December 2000, although it is not clear how they do so. [CNN, 12/20/2000] The number called by al-Nashiri is not disclosed by the media, but some of al-Nashiri’s associates lived at an al-Qaeda communications hub in Sana’a, Yemen, which began to be monitored by US authorities around this time (see Late 1998-Early 2002 and January 5-8, 2000).
Mid-August 1998-October 2000: Al-Qaeda Operatives Use Monitored Yemen Communications Hub to CoordinateColeBombing
Al-Qaeda operatives use a communications hub in Sana’a, Yemen, to “put everything together” before the bombing of the USS Cole. The communications hub is run by Ahmed al-Hada, who US officials will later describe as “a prominent al-Qaeda member who is believed to have been involved in the Cole bombing.” The hub is monitored by US intelligence from 1998, at least, (see Late August 1998) and information gleaned from it is used to thwart a number of plots (see Late 1998-Early 2002). The US monitors the house through bugs planted inside and through spy satellites to monitor people leaving and entering it. The hub was also used before the 1998 embassy bombings and will be used to communicate with the 9/11 hijackers before 9/11 (see Early 2000-Summer 2001). [MSNBC, 2/14/2002; Mirror, 6/9/2002; MSNBC, 5/2005] When the FBI arrives in Yemen to investigate the bombing, it finds that “telephone records show[…] that suspects in the Cole bombing had been in touch with suspects from the 1998 embassy bombings in Kenya.” [Miller, Stone, and Mitchell, 2002, pp. 238] Calls between the hub and an al-Qaeda cell in Ireland that seems to have a connection to the Cole bombing are also intercepted during part of this period (see Late December 1999-October 12, 2000). It is unclear why the information does not allow the NSA to thwart the plot. Despite the scope of the monitoring, NSA Director Michael Hayden will later say there were no intercepts the NSA could have exploited to stop the bombing: “When the Cole disaster took place I had brought to my desk in, in this office, every stitch of NSA reporting on the—that could in any way be related to this. And I went thought it report by report and I sent a letter out to our entire work force, which was essentially, you performed well. Keep up the good work.” [CBS News, 6/19/2002]
Late August 1998: US Intelligence Community Begins Joint Surveillance of Al-Qaeda Communications Hub
The investigation of the East Africa embassy bombings (see 10:35-10:39 a.m., August 7, 1998) led to the discovery of the phone number of an al-Qaeda communications hub in Sana’a, Yemen (see August 4-25, 1998). The hub is run by an al-Qaeda veteran named Ahmed al-Hada, who is helped by his son Samir and is related to many other al-Qaeda operatives in Yemen and elsewhere. He is also the father in law of 9/11 hijacker Khalid Almihdhar, whose wife, Hoda al-Hada, lives at the hub with their children. [Newsweek, 6/2/2002; Die Zeit (Hamburg), 10/1/2002; MSNBC, 7/21/2004; Suskind, 2006, pp. 94; Wright, 2006, pp. 277, 309, 343, 378] Several of Ahmed al-Hada’s relatives die fighting for al-Qaeda before 9/11, a fact known to US intelligence. [Los Angeles Times, 12/21/2005; Guardian, 2/15/2006] The NSA may already be aware of the phone number, as they have been intercepting Osama bin Laden’s communications for some time (see November 1996-Late August 1998) and, according to Newsweek, “some” of bin Laden’s 221 calls to Yemen are to this phone number. [Newsweek, 2/18/2002; Sunday Times (London), 3/24/2002; Media Channel, 9/5/2006] The US intelligence community now begins a joint effort to monitor the number. The NSA and CIA jointly plant bugs inside the house, tap the phones, and monitor visitors with spy satellites. [Mirror, 6/9/2002; Wright, 2006, pp. 343; New Yorker, 7/10/2006 ] US intelligence also learns that the communications hub is an al-Qaeda “logistics center,” used by agents around the world to communicate with each other and plan attacks. [Newsweek, 6/2/2002] The joint effort enables the FBI to map al-Qaeda’s global organization (see Late 1998-Early 2002) and at least three of the hijackers use the number, enabling the NSA to intercept their communications and find out about an important al-Qaeda meeting in Malaysia (see December 29, 1999 and January 5-8, 2000 and Early 2000-Summer 2001). It appears al-Qaeda continues to use this phone line until Samir al-Hada dies resisting arrest in early 2002 (see February 13, 2002).
Late August 1998: NSA Defies Order to Share Raw Intelligence with Other Agencies
Following the African embassy bombings (see 10:35-10:39 a.m., August 7, 1998), CIA managers ask Alec Station, the CIA’s bin Laden unit, what it most needs to improve the agency’s capabilities against al-Qaeda. Alec Station chief Michael Scheuer will later say that he raises “our dire need for verbatim reports derived from electronic collection.” This is a reference to his desire to get verbatim transcripts of calls to and from al-Qaeda’s operations hub in Yemen, in particular ones between it and Osama bin Laden in Afghanistan. The NSA has the transcripts, but is refusing to provide them to the CIA, and the two agencies have been at loggerheads over the issue for nearly two years. Alec Station needs the transcripts, not the summaries the NSA provides, because the operatives talk in code on the phone and this code cannot be cracked based on the summaries, only using the transcripts (see February 1996-May 1998, December 1996, After December 1996, and After December 1996). Other senior CIA officers have similar trouble getting transcripts from the NSA. Higher officials order the NSA to comply, and they do, but only for less than 12 requests. Then the system returns to the way it was, with NSA only sharing summaries. [Atlantic Monthly, 12/2004] The reason for the change back is unclear, although bin Laden stops using his satellite phone around this time (see Late August 1998).
Late 1998: FBI Asks NSA to Pass on All Calls between Al-Qaeda Yemen Hub and US
The FBI asks the NSA to pass on all calls between an al-Qaeda communications hub in Yemen and the US. The hub, which is run by an operative named Ahmed al-Hada and was involved in the attacks on US embassies in East Africa (see Late August 1998), is a key al-Qaeda logistics center and intelligence gleaned from listening in on calls to and from it will help prevent some attacks (see August 4-25, 1998 and Late 1998-Early 2002). Dan Coleman, one of the FBI agents who places the request, will say, “anyone who called the Yemen number is white-hot, a top suspect.” However, the NSA will not inform the FBI of all calls between the hub and the US. [Suskind, 2006, pp. 94] In particular, two 9/11 hijackers will call the hub while they are in the US (see Early 2000-Summer 2001). However, the information will be withheld from the FBI and various explanations will be offered for this failure (see (Spring 2000), Summer 2002-Summer 2004, and March 15, 2004 and After).
Late 1998-Early 2002: US Intelligence Maps Al-Qaeda Network Using Phone Records; Many Attacks Thwarted
Beginning in the autumn of 1998, the FBI uses the phone records of an al-Qaeda communications hub run by operative Ahmed al-Hada and his son Samir to build a map of al-Qaeda’s global organization. A map showing all the places in the world that have communicated with the hub is posted on the wall of the interagency counterterrorism I-49 squad in New York. The hub’s telephone number was uncovered during the East African embassy bombings investigation (see August 4-25, 1998 and Late August 1998). [Al Ahram, 2/21/2002; MSNBC, 7/21/2004; Wright, 2006, pp. 343; New Yorker, 7/10/2006 ] According to FBI agent and I-49 squad member Dan Coleman, al-Hada is “uncle of half the violent jihadists we knew in the country.” [Suskind, 2006, pp. 94] Several of his sons and sons-in-law are al-Qaeda operatives and some die fighting and training with radical Islamists; this is known to US intelligence before 9/11. Hijacker Khalid Almihdhar is also a son-in-law of al-Hada. [MSNBC, 2/14/2002; Fox News, 2/14/2002; Los Angeles Times, 12/21/2005] The number is monitored by the NSA and over the next three years it mines intelligence that helps authorities foil a series of plots, including planned attacks on the US Embassy in Paris and the US Consulate in Istanbul, along with an attempted airline hijacking in Africa. However, the hub also serves as a planning center for the 2000 attack on the USS Cole in Yemen, which is successful (see October 12, 2000). [US News and World Report, 3/15/2004] The CIA, as the primary organization for gathering foreign intelligence, has jurisdiction over conversations on the al-Hada phone. Helped by the NSA, it stakes out the house—tapping the phone, planting bugs, and taking satellite photographs of its visitors. However, the CIA apparently does not provide the FBI with all the relevant information it is obtaining about al-Qaeda’s plans. [Mirror, 6/9/2002; New Yorker, 7/10/2006 ] For example, the FBI is not informed that hijackers Khalid Almihdhar and Nawaf Alhazmi make calls to the communications hub from the US between spring 2000 and summer 2001 (see Spring-Summer 2000 and Mid-October 2000-Summer 2001). The FBI also asks the NSA to pass any calls between the communications hub and the US to the FBI, but the NSA does not do this either (see Late 1998). [Suskind, 2006, pp. 94]
1999: Monitored Al-Qaeda Operative Sits Next to Bin Laden at Banquet
Ahmed al-Hada, an operative who runs a communications hub for al-Qaeda in Yemen, travels to Afghanistan and attends a banquet, where, US intelligence learns, he sits next to Osama bin Laden. The communications hub run by al-Hada, who fought in the anti-Soviet jihad in Afghanistan, helped coordinate the East African embassy bombings and has been under heavy surveillance by the NSA and other US agencies since at least late 1998 (see Late August 1998). [Newsweek, 2/18/2002]
Early 1999: NSA Monitoring Hears 9/11 Hijacker Names, This Information Is Not Shared with CIA or FBI
As the NSA continues to monitor an al-Qaeda communications hub in Yemen run by hijacker Khalid Almihdhar’s father-in-law (see Late August 1998), they find references to Almihdhar and the hijacker brothers, Salem and Nawaf Alhazmi. They also learn that Almihdhar and Nawaf Alhazmi are long time friends. [9/11 Commission, 1/26/2004, pp. 6 ; 9/11 Commission, 1/26/2004] In early 1999, the NSA intercepts communications mentioning the full name “Nawaf Alhazmi.” However, this information is not disseminated to the intelligence community, as it apparently does not meet NSA reporting thresholds. The 9/11 Congressional Inquiry will say, “Those thresholds vary, depending on the judgement of the NSA analyst who is reviewing the intercept and the subject, location, and content of the intercept.” Another intelligence organisation intercepts the same or similar calls and reports this to the NSA. The Inquiry comments: “NSA’s practice was to review such reports and disseminate those responsive to US intelligence requirements. For an undetermined reason, NSA did not disseminate the […] report.” [Associated Press, 9/25/2002; US Congress, 10/17/2002; US Congress, 7/24/2003, pp. 135 ] The NSA continues to intercept such calls and finds more information a few months later (see Summer 1999 and Late Summer 1999). Near the end of 1999, there will be additional intercepts that give Khalid Almihdhar’s full name and the first names of the other two (see Shortly Before December 29, 1999). But while the NSA will provide some information about these new intercepts to the CIA and other agencies, they will not go back to the earlier intercepts to figure out Nawaf’s full name and close connection to Almihdhar (see December 29, 1999).
