Al-Qaeda begins using an important communications hub and operations center in Yemen. [Gunaratna, 2003, pp. 2-3, 16, 188] The hub is set up because al-Qaeda is headquartered in Afghanistan, but requires another location that has access to regular telephone services and major air links. It is located in the Yemeni capital of Sana’a, in the neighbourhood of Madbah. Ahmed al-Hada, an associate of Osama bin Laden’s who fought in Afghanistan, runs the hub and lives there with his family. [Bamford, 2008, pp. 7-8] Terrorism analyst Rohan Gunaratna will say that the hub is used as a switchboard to “divert and receive calls and messages from the [Middle East] region and beyond.” [Gunaratna, 2003, pp. 2-3, 16, 188] FBI agent Mark Rossini will say, “That house was a focal point for operatives in the field to call in, that number would then contact bin Laden to pass along information and receive instruction back.” [PBS, 2/3/2009] Author James Bamford will add: “[T]he house in Yemen became the epicenter of bin Laden’s war against America, a logistics base to coordinate attacks, a switchboard to pass on orders, and a safe house where his field commanders could meet to discuss and carry out operations.” Bin Laden himself places many calls to the house, and it is used to coordinate the attacks on US embassies in East Africa in 1998 and the bombing of the USS Cole in 2000. Future 9/11 hijacker Khalid Almihdhar also lives at the house at some point in the late 1990s with his wife Hoda, al-Hada’s daughter. [Bamford, 2008, pp. 8]
August 4-25, 1998: Embassy Bomber’s Arrest Points to Vital Al-Qaeda Communications Hub
Before and after the August 7, 1998 attack on the US embassy in Nairobi, Kenya (see 10:35-10:39 a.m., August 7, 1998), a bomber involved in that attack named Mohamed al-Owhali makes a series of calls to al-Qaeda associate Ahmed al-Hada, who runs an al-Qaeda communications hub in Sana’a, Yemen. Al-Owhali briefly stayed at the hub about three months before the bombings and made some calls from there. He then traveled to other locations, including Pakistan, and flew to Kenya on August 2. Beginning August 4, he makes a series of calls to al-Hada at the Yemen hub. The details of these calls have not been revealed, but they continue until about two hours before the embassy bombings take place. Al-Owhali is supposed to be martyred in the attack, but he runs away at the last minute and survives. Beginning on August 8, he repeatedly calls al-Hada, asking for help getting out of Kenya. He eventually receives $1,000 from him. Al-Hada is actually about to fly to Kenya to help al-Owhali get out when al-Owhali is arrested on August 12. Al-Hada also receives three calls from bin Laden’s satellite phone, which is being monitored by the NSA (see November 1996-Late August 1998). Following a raid by London police, the FBI allegedly trace a fax claiming responsibility for the attack through Baku, Azerbaijan, to bin Laden’s satellite phone, which leads them to the communications hub in Sana’a (however, it is likely that the NSA at least is already monitoring the hub phone number). Phone records for the hub direct them to al-Owhali in Nairobi. Al-Owhali has already been arrested based on a tip-off and, after the FBI interrogators realize he is lying to them, he confesses to calling the number. [United State of America v. Usama bin Laden, et al., Day 14, 3/7/2001; United State of America v. Usama bin Laden, et al., Day 23, 3/27/2001; Observer, 8/5/2001] The translator during al-Owhali’s interviews is Mike Feghali, who will later be accused of serious improprieties after 9/11 by whistleblower Sibel Edmonds (see July-August 2001). [Federal Bureau of Investigation, 9/9/1998, pp. 1 ] Author Lawrence Wright will say, “This Yemeni telephone number would prove to be one of the most important pieces of information the FBI would ever discover, allowing investigators to map the links of the al-Qaeda network all across the globe.” [Wright, 2006, pp. 275-8] The NSA may well already have been aware of the number since bin Laden’s monitored phone called it many times, but the US intelligence community now begins a joint effort to exploit it (see Late August 1998 and Late 1998-Early 2002). Other apparently inaccurate stories about how al-Owhali was captured have been reported in the press. [Reeve, 1999, pp. 48]
August 5-16, 1998: Hijacker Almihdhar Calls Al-Qaeda Communications Hub Before and After US Embassy Bombings, FBI Learns of This
9/11 hijacker Khalid Almihdhar makes a series of calls to an al-Qaeda communications hub run by his father-in-law, Ahmed al-Hada. A Yemeni police official will later tell Agence France-Presse that Almihdhar “made a number of overseas calls to Ahmed al-Hada, who was then in Sana’a, before, during, and after” the African embassy bombings (see 10:35-10:39 a.m., August 7, 1998). Al-Hada is involved in the embassy bombings and the US intelligence community begins joint surveillance of his phone after the bombings (see Late August 1998), although the NSA may already have been monitoring it (see Before August 7, 1998). The calls made by Almihdhar are from overseas and the FBI learns of this, presumably during the investigation into the embassy bombings (see August 4-25, 1998) [Agence France Presse, 2/15/2002] Around this time Almihdhar is also in contact with al-Hada’s son, Samir, who is his brother-in-law, and the Yemen Times will later report that these contacts are monitored. However, it is not clear whether this is just by local authorities in Yemen, or also by US intelligence. [Yemen Times, 2/18/2002] British Prime Minister Tony Blair will later say that one of the 9/11 hijackers, presumably Almihdhar, played a key role in the attacks on the US embassies in East Africa (see October 4, 2001).
Before August 7, 1998: NSA Intercepts Calls to Communications Hub Involved in Embassy Bombings
Calls are made using Osama bin Laden’s satellite telephone to an al-Qaeda communications hub in Sana’a, Yemen, which is involved in the embassy bombings (see 10:35-10:39 a.m., August 7, 1998). According to MSNBC, two of the calls from bin Laden’s phone are made “days before” the bombings. The NSA is intercepting calls from bin Laden’s satellite phone at this time (see November 1996-Late August 1998) and his phone is used to make dozens of calls to the Yemen communications hub from 1996 to 1998, but it is unclear what is done with the intercepts, as the NSA is sometimes unwilling to share information with other US intelligence agencies (see Between 1996 and August 1998, December 1996, Between 1996 and September 11, 2001, and Before September 11, 2001). [Los Angeles Times, 10/10/2001; MSNBC, 2/14/2002; Newsweek, 2/18/2002; Los Angeles Times, 9/1/2002] The communications hub is run by veteran mujaheddin Ahmed al-Hada, an associate of one of the embassy bombers, Mohamed al-Owhali. Al-Owhali stays at the hub in the months before the bombing and obtains a fake passport in Yemen (see August 4-25, 1998). [Federal Bureau of Investigation, 9/9/1998 ] The NSA continues to intercept calls to and from the hub after the embassy bombings (see Late August 1998 and August 4-25, 1998).
Mid-August 1998-October 2000: Al-Qaeda Operatives Use Monitored Yemen Communications Hub to CoordinateColeBombing
Al-Qaeda operatives use a communications hub in Sana’a, Yemen, to “put everything together” before the bombing of the USS Cole. The communications hub is run by Ahmed al-Hada, who US officials will later describe as “a prominent al-Qaeda member who is believed to have been involved in the Cole bombing.” The hub is monitored by US intelligence from 1998, at least, (see Late August 1998) and information gleaned from it is used to thwart a number of plots (see Late 1998-Early 2002). The US monitors the house through bugs planted inside and through spy satellites to monitor people leaving and entering it. The hub was also used before the 1998 embassy bombings and will be used to communicate with the 9/11 hijackers before 9/11 (see Early 2000-Summer 2001). [MSNBC, 2/14/2002; Mirror, 6/9/2002; MSNBC, 5/2005] When the FBI arrives in Yemen to investigate the bombing, it finds that “telephone records show[…] that suspects in the Cole bombing had been in touch with suspects from the 1998 embassy bombings in Kenya.” [Miller, Stone, and Mitchell, 2002, pp. 238] Calls between the hub and an al-Qaeda cell in Ireland that seems to have a connection to the Cole bombing are also intercepted during part of this period (see Late December 1999-October 12, 2000). It is unclear why the information does not allow the NSA to thwart the plot. Despite the scope of the monitoring, NSA Director Michael Hayden will later say there were no intercepts the NSA could have exploited to stop the bombing: “When the Cole disaster took place I had brought to my desk in, in this office, every stitch of NSA reporting on the—that could in any way be related to this. And I went thought it report by report and I sent a letter out to our entire work force, which was essentially, you performed well. Keep up the good work.” [CBS News, 6/19/2002]
Late August 1998: US Intelligence Community Begins Joint Surveillance of Al-Qaeda Communications Hub
The investigation of the East Africa embassy bombings (see 10:35-10:39 a.m., August 7, 1998) led to the discovery of the phone number of an al-Qaeda communications hub in Sana’a, Yemen (see August 4-25, 1998). The hub is run by an al-Qaeda veteran named Ahmed al-Hada, who is helped by his son Samir and is related to many other al-Qaeda operatives in Yemen and elsewhere. He is also the father in law of 9/11 hijacker Khalid Almihdhar, whose wife, Hoda al-Hada, lives at the hub with their children. [Newsweek, 6/2/2002; Die Zeit (Hamburg), 10/1/2002; MSNBC, 7/21/2004; Suskind, 2006, pp. 94; Wright, 2006, pp. 277, 309, 343, 378] Several of Ahmed al-Hada’s relatives die fighting for al-Qaeda before 9/11, a fact known to US intelligence. [Los Angeles Times, 12/21/2005; Guardian, 2/15/2006] The NSA may already be aware of the phone number, as they have been intercepting Osama bin Laden’s communications for some time (see November 1996-Late August 1998) and, according to Newsweek, “some” of bin Laden’s 221 calls to Yemen are to this phone number. [Newsweek, 2/18/2002; Sunday Times (London), 3/24/2002; Media Channel, 9/5/2006] The US intelligence community now begins a joint effort to monitor the number. The NSA and CIA jointly plant bugs inside the house, tap the phones, and monitor visitors with spy satellites. [Mirror, 6/9/2002; Wright, 2006, pp. 343; New Yorker, 7/10/2006 ] US intelligence also learns that the communications hub is an al-Qaeda “logistics center,” used by agents around the world to communicate with each other and plan attacks. [Newsweek, 6/2/2002] The joint effort enables the FBI to map al-Qaeda’s global organization (see Late 1998-Early 2002) and at least three of the hijackers use the number, enabling the NSA to intercept their communications and find out about an important al-Qaeda meeting in Malaysia (see December 29, 1999 and January 5-8, 2000 and Early 2000-Summer 2001). It appears al-Qaeda continues to use this phone line until Samir al-Hada dies resisting arrest in early 2002 (see February 13, 2002).
Late 1998-Early 2002: US Intelligence Maps Al-Qaeda Network Using Phone Records; Many Attacks Thwarted
Beginning in the autumn of 1998, the FBI uses the phone records of an al-Qaeda communications hub run by operative Ahmed al-Hada and his son Samir to build a map of al-Qaeda’s global organization. A map showing all the places in the world that have communicated with the hub is posted on the wall of the interagency counterterrorism I-49 squad in New York. The hub’s telephone number was uncovered during the East African embassy bombings investigation (see August 4-25, 1998 and Late August 1998). [Al Ahram, 2/21/2002; MSNBC, 7/21/2004; Wright, 2006, pp. 343; New Yorker, 7/10/2006 ] According to FBI agent and I-49 squad member Dan Coleman, al-Hada is “uncle of half the violent jihadists we knew in the country.” [Suskind, 2006, pp. 94] Several of his sons and sons-in-law are al-Qaeda operatives and some die fighting and training with radical Islamists; this is known to US intelligence before 9/11. Hijacker Khalid Almihdhar is also a son-in-law of al-Hada. [MSNBC, 2/14/2002; Fox News, 2/14/2002; Los Angeles Times, 12/21/2005] The number is monitored by the NSA and over the next three years it mines intelligence that helps authorities foil a series of plots, including planned attacks on the US Embassy in Paris and the US Consulate in Istanbul, along with an attempted airline hijacking in Africa. However, the hub also serves as a planning center for the 2000 attack on the USS Cole in Yemen, which is successful (see October 12, 2000). [US News and World Report, 3/15/2004] The CIA, as the primary organization for gathering foreign intelligence, has jurisdiction over conversations on the al-Hada phone. Helped by the NSA, it stakes out the house—tapping the phone, planting bugs, and taking satellite photographs of its visitors. However, the CIA apparently does not provide the FBI with all the relevant information it is obtaining about al-Qaeda’s plans. [Mirror, 6/9/2002; New Yorker, 7/10/2006
] For example, the FBI is not informed that hijackers Khalid Almihdhar and Nawaf Alhazmi make calls to the communications hub from the US between spring 2000 and summer 2001 (see Spring-Summer 2000 and Mid-October 2000-Summer 2001). The FBI also asks the NSA to pass any calls between the communications hub and the US to the FBI, but the NSA does not do this either (see Late 1998). [Suskind, 2006, pp. 94]
1999: Monitored Al-Qaeda Operative Sits Next to Bin Laden at Banquet
Ahmed al-Hada, an operative who runs a communications hub for al-Qaeda in Yemen, travels to Afghanistan and attends a banquet, where, US intelligence learns, he sits next to Osama bin Laden. The communications hub run by al-Hada, who fought in the anti-Soviet jihad in Afghanistan, helped coordinate the East African embassy bombings and has been under heavy surveillance by the NSA and other US agencies since at least late 1998 (see Late August 1998). [Newsweek, 2/18/2002]
December 29, 1999: NSA Tells CIA about Planned Al-Qaeda Summit Involving Future Hijackers
The NSA, monitoring a telephone in an al-Qaeda communications hub in Yemen (see Late August 1998 and Late 1998-Early 2002), has listened in on phone calls revealing that hijackers Khalid Almihdhar, Nawaf Alhazmi, and Salem Alhazmi are to attend an important al-Qaeda summit in Malaysia in January 2000 (see Shortly Before December 29, 1999). Almihdhar’s full name was mentioned, as well as the first names of hijackers Nawaf Alhazmi and Salem Alhazmi. On this day, the NSA shares this information with the CIA’s Alec Station bin Laden unit. Other US intelligence agencies, including FBI headquarters and the FBI’s New York field office, are told as well. Although Khalid Almihdhar’s full name was mentioned in one call, the NSA only passes on his first name. Also, the NSA has already learned from monitoring the Yemen hub that Nawaf’s last name is Alhazmi and that he is long-time friends with Almihdhar (see Early 1999). However, they either don’t look this up in their records or don’t pass it on to any other agency. [9/11 Commission, 1/26/2004, pp. 6 ; US Department of Justice, 11/2004, pp. 239
; Wright, 2006, pp. 310] An NSA analyst makes a comment that is shared between US intelligence agencies, “Salem may be Nawaf’s younger brother.” This turns out to be correct. [US Congress, 7/24/2003, pp. 135
; 9/11 Commission, 1/26/2004, pp. 6
] A CIA officer will later tell the 9/11 Congressional Inquiry that information from the Africa embassy bombings (see 10:35-10:39 a.m., August 7, 1998) was reviewed in late 1999 during a worldwide effort to disrupt millennium attack plots (see December 15-31, 1999) and “a kind of tuning fork… buzzed when two [of the hijackers] reportedly planning a trip to [Malaysia] were linked indirectly to what appeared to be a support element… involved with the Africa bombers.” [US Congress, 7/24/2003, pp. 135
] The fact that they are connected to the Yemen communication hub already indicates some importance within al-Qaeda. It is learned they are connected to the embassy bombings in some way (see October 4, 2001 and Late 1999). [US Congress, 7/24/2003, pp. 135
; 9/11 Commission, 1/26/2004, pp. 6
] The NSA report about them on this day is entitled, “Activities of Bin Laden Associates,” showing the clear knowledge of their ties to bin Laden. [9/11 Commission, 7/24/2004, pp. 502; Vanity Fair, 11/2004] The CIA will track Almihdhar and Nawaf Alhazmi to the Malaysia summit (see January 2-5, 2000 and January 5-8, 2000).
Early 2000-Summer 2001: NSA Intercepts Communications between 9/11 Hijackers in US and Al-Qaeda Communications Hub
While the 9/11 hijackers are in the US, the NSA intercepts several calls between them and an al-Qaeda communications hub in Sana’a, Yemen, run by Ahmed al-Hada, who is hijacker Khalid Almihdhar’s father-in-law (see August 4-25, 1998).
Summary of Calls – The first calls are made by Almihdhar and are intercepted during the spring and summer of 2000 (see Spring-Summer 2000).
More calls are made by hijacker Nawaf Alhazmi after the bombing of the USS Cole in October 2000 (see Mid-October 2000-Summer 2001).
The final call from the US is intercepted just a few weeks before 9/11 (see (August 2001)).
The NSA intercepted the hijackers’ calls outside the US before this (see Early 1999 and December 29, 1999) and continues to do so in 2000 (see Summer 2000) after Almihdhar returns to Yemen (see June 10, 2000 and (Mid-June-Mid-July 2000)).
Calls’ Content – Some of the calls may only contain non-operational information, as they are reportedly between Almihdhar and his wife. [9/11 Commission, 7/24/2004, pp. 222; Suskind, 2006, pp. 94; Wright, 2006, pp. 343] However, the calls are also used to relay messages to the 9/11 hijackers. [Embassy of Yemen (Washington), 2/13/2002; MSNBC, 2/14/2002; MSNBC, 5/2005]
Agencies’ Roles – The CIA is the lead agency monitoring the communications hub. It has planted bugs inside it and is wiretapping all calls (see Late August 1998). Intercepts of calls to and from the hub are a major plank of the US intelligence community’s effort to fight al-Qaeda. Also involved is the FBI, which is using phone records to plot these calls on a map (see Late 1998-Early 2002). Some of the calls intercepted by US intelligence come from Osama bin Laden’s satellite phone in Afghanistan (see August 4-25, 1998 and Late August 1998). After 9/11, counterterrorism officials will say that the number was one of the hottest targets being monitored by the NSA and was an “intelligence bonanza.” [Los Angeles Times, 12/21/2005; Wright, 2006, pp. 343]
Importance of Failure – Also after 9/11, counterterrorism officials will agree that the failure to follow leads to the US from this number was a huge missed opportunity to stop the 9/11 plot. For instance, FBI agent Kenneth Maxwell will say: “Two al-Qaeda guys living in California—are you kidding me? We would have been on them like white on snow: physical surveillance, electronic surveillance, a special unit devoted entirely to them.” [MSNBC, 7/21/2004; New Yorker, 7/10/2006 ]
Discussed after 9/11 – The failure to roll up the plot based on these communications intercepts will be discussed following 9/11 (see Summer 2002-Summer 2004 and March 15, 2004 and After).