Around eight calls made by hijacker Khalid Almihdhar from San Diego to an al-Qaeda communications hub in Sana’a, Yemen, run by his father-in-law Ahmed al-Hada are intercepted by the NSA. [US Congress, 7/24/2003, pp. xii, 16-17, 157 ; Los Angeles Times, 12/21/2005; Wright, 2006, pp. 343; New Yorker, 7/10/2006
] At least one of the calls is made from a phone registered to hijacker Nawaf Alhazmi in their San Diego apartment. [US Department of Justice, 11/2004, pp. 251
] Other calls are made from a mobile phone registered to Alhazmi. [McDermott, 2005, pp. 296] Calls may also be made from the communications hub to the US. [MSNBC, 7/21/2004]
Dates of Calls – One of the calls takes place days after they move into their San Diego apartment in February (see January 15-February 2000). [MSNBC, 7/21/2004] Another is on March 20, 2000 and lasts 16 minutes. [Federal Bureau of Investigation, 10/2001, pp. 57 ; US Department of Justice, 11/2004, pp. 251
]
Intercepted by NSA – Although NSA analysts pick up Almihdhar’s first name, “Khalid,” they do not connect it to his second name, even though the NSA has been intercepting communications to and from the hub involving him throughout 1999 (see Early 1999 and December 29, 1999) and he is on the NSA watch list at this point (see Mid-January 2000). [US Congress, 7/24/2003, pp. xii, 16, 157 ; US News and World Report, 3/15/2004] Some, or perhaps all, of these calls are between Almihdhar and his wife, who lives at the communications hub and reportedly gives birth to a daughter in early 2000 while Almihdhar is in the US. [9/11 Commission, 7/24/2004, pp. 222; Suskind, 2006, pp. 94; Wright, 2006, pp. 343; New Yorker, 7/10/2006
] However, the NSA analysts suspect that Khalid is part of an “operational cadre.” [US News and World Report, 3/15/2004]
Dissemination and Content – According to the 9/11 Congressional Inquiry, the NSA disseminates some of this information to the FBI, CIA, and other agencies, but not all of it, as it apparently does not meet reporting thresholds. It is unclear why it does not meet such thresholds, although some sources will suggest Almihdhar was just talking to his wife. [US Congress, 7/24/2003, pp. 157 ; US News and World Report, 3/15/2004; 9/11 Commission, 7/24/2004, pp. 222; Suskind, 2006, pp. 94] Another source suggests operational information was passed on during the calls (see Early 2000-Summer 2001). However, two FBI agents who worked on al-Qaeda cases relating to Yemen, Dan Coleman and Ali Soufan, will later claim that they and other senior counterterrorism officials only learn about these calls after 9/11. [Los Angeles Times, 12/21/2005; Suskind, 2006, pp. 94; New Yorker, 7/10/2006
]
Significance – Author Lawrence Wright will comment: “You know, this is the key. The NSA is all over this phone. And everybody, you know, that has any connection with it is drawing links from that phone. Now imagine eight lines from Yemen to San Diego. How obvious would it be that al-Qaeda is in America[?]” [Federal News Service, 10/5/2006]
Other Calls – The NSA also intercepts various other communications between the hijackers and the communications hub (see Early 2000-Summer 2001).
Mid-June-Mid-July 2000: 9/11 Hijacker Almihdhar Stays in Yemen Hub House Closely Monitored by US Intelligence
When 9/11 hijacker Khalid Almihdhar leaves the US in June (see June 10, 2000), he flies to Frankfurt, Germany, and then to Oman in the Middle East. [US Congress, 7/24/2003, pp. 135 ] From there he returns to his family’s home in Sana’a, Yemen. [9/11 Commission, 7/24/2004, pp. 237] His wife and children live at an al-Qaeda communications hub that is run by his father in law, Ahmed al-Hada. The hub is being monitored by the NSA and CIA. Phone calls to and from the hub, including ones made by Almihdhar and other hijackers, are intercepted, rooms in the building are bugged, and spy satellites record visitors (see Late August 1998, Late 1998-Early 2002, and Early 2000-Summer 2001). Based on information gained from monitoring this house, the CIA and local intelligence services mounted a major operation against Almihdhar, other hijackers, and several more al-Qaeda operatives in December 1999 and January 2000, when they were followed around the Middle East and South Asia and monitored during an al-Qaeda summit in Malaysia (see December 29, 1999, January 2-5, 2000, and January 5-8, 2000). So presumably US intelligence should have been aware of this visit to the hub and who Almihdhar was, but what exactly was known and who may have known it has not been made public. He will return to the hub in February 2001 and stay an unknown length of time (see February 2001).
August-September 2000: Hijacker Associate Bin Al-Shibh Spends Four Weeks in Yemen; Possibly Visits Monitored Yemen Hub
9/11 hijacker associate Ramzi bin al-Shibh spends four weeks in Yemen. The exact timing of his visit is unknown, except that he arrives in August 2000 and leaves in September. [Australian, 12/24/2002; US Department of Defense, 12/8/2006]
Planning Cole Bombing? – While in Yemen, it seems probable bin al-Shibh is involved in preparations for the USS Cole bombing. There are reports that he takes part in the bombing, and he flies back to Yemen to be there in time for the bombing in early October (see October 10-21, 2000).
Does He Visit Monitored Yemen Hub? – While there, it is also possible that he visits the highly monitored al-Qaeda Yemen communications hub, which is in Sana’a. It will not be confirmed or denied that he visits the hub at this time. However, bin al-Shibh is Yemeni, and he is a cousin of future 9/11 hijacker Khalid Almihdhar’s wife, and she lives at the house where the hub is located. [Washington Post, 6/12/2002; Washington Post, 9/11/2002] (Note that he also has other family in Sana’a, as this is where he grew up, so it seems probable he would spend at least some of his visit in Sana’a.) [McDermott, 2005, pp. 41] Furthermore, at some point before the Cole bombing, bin al-Shibh meets with
al-Qaeda operatives Abd al-Rahim al-Nashiri and Ahmed al-Hada in Yemen. It is not known where the meeting takes place, but al-Hada runs the Yemen hub (and he is also related to bin al-Shibh) (see Before October 12, 2000). Also, al-Qaeda operatives use the hub to “put everything together” for the Cole bombing, and bin al-Shibh is probably involved in preparations for the bombing at this time. The bombers also call the hub as part of their preparations (see Mid-August 1998-October 2000).
Could Bin Al-Shibh Be Tracked? – If bin al-Shibh does visit (or even just call) the Yemen hub at this time, and/or during his later visit right at the time of the Cole bombing, he would be monitored by US intelligence. The US not only listens in on the hub’s phone, but it monitors the house through bugs planted inside and through spy satellites to monitor people leaving and entering it (see Early 2000-Summer 2001). Although it is uncertain, US intelligence may already be aware of bin al-Shibh through his attendance at an al-Qaeda summit in Malaysia in early 2000 (see January 5-8, 2000).
Before October 12, 2000: Commander ofColeAttack Reportedly Meets Monitored Al-Qaeda Operative and Bin Al-Shibh
Abd al-Rahim al-Nashiri, an al-Qaeda leader involved in the attack on the USS Cole, is said to meet two associates, Ahmed al-Hada and al-Hada’s nephew Ramzi bin al-Shibh, in Yemen. [Die Zeit (Hamburg), 10/1/2002; Newsweek, 12/2/2002] Al-Hada, an operative who runs a communications hub for Osama bin Laden, has been under surveillance since 1998, at least (see August 4-25, 1998). The surveillance of al-Hada is reportedly so important that his house is monitored by spy satellites, to visually identify everyone coming and going (see Late August 1998), although it is unclear where the meeting with al-Nashiri takes place. The exact timing of this meeting and that with bin al-Shibh is not known, although bin al-Shibh stays in Yemen for about four weeks up until a month before the bombing (see August-September 2000), and then arrives in Yemen again one day before the bombing (see October 10-21, 2000). [Newsweek, 12/2/2002] Bin al-Shibh is repeatedly denied a US visa. Although the earlier applications are denied on the grounds he may stay in the US, it will later be suggested that his presumed role in the Cole bombing may have influenced one or more later denials (see May 17, 2000-May 2001).
Mid-October 2000-Summer 2001: NSA Intercepts Calls between Hijacker in US and Al-Qaeda Communications Hub
In the months after the USS Cole is bombed in autumn 2000 (see October 12, 2000), the NSA intercepts about half a dozen communications between hijacker Nawaf Alhazmi in the US and an al-Qaeda communications hub in Sana’a, Yemen, run by hijacker Khalid Almihdhar’s father in law, Ahmed al-Hada. [MSNBC, 7/21/2004; Los Angeles Times, 12/21/2005; US President, 12/26/2005 ] The hub and people associated with it are thought to have played a support role in the Cole bombing (see also October 14-Late November, 2000 and October 4, 2001). [CNN, 2/14/2002; MSNBC, 7/21/2004] It was also involved in the bombing of US embassies in Tanzania and Kenya (see August 4-25, 1998). The NSA has been monitoring the number for at least two years (see Late August 1998) and the FBI has used it to map al-Qaeda’s global organisation (see Late 1998-Early 2002). The NSA had previously intercepted calls between hijacker Khalid Almihdhar in the US and the hub (see Spring-Summer 2000 and Early 2000-Summer 2001) and also intercepts a call between Alhazmi and the hub a few weeks before 9/11 (see (August 2001)).
November 2000 or After: FBI Connects Al-Qaeda Communications Hub toColeBombing, No Apparent Action Taken
The FBI’s investigation of the USS Cole bombing in Aden, Yemen, connects the bombers to an al-Qaeda communications hub in Sana’a, the country’s capital, which has been monitored by the US for at least two years (see Late August 1998 and Mid-August 1998-October 2000). It was also used in the East African embassy bombings (see August 4-25, 1998) and will be used by the 9/11 hijackers (see Early 2000-Summer 2001). It is not known when this connection is made. No apparent action is taken against Ahmed al-Hada, the operative who runs the communications hub, before 9/11. However, this may be due to the importance of intelligence generated from his phone (see Late 1998-Early 2002). In early 2001, al-Hada will be publicly identified as an al-Qaeda operative at the embassy bombings trial, when his phone number is disclosed openly in court and reported in the media (see February 2001 and After). Yet he still is not publicly indicted for either the embassy bombings or the Cole bombing, even though a number of other fugitives are publicly indicted. In 2002, US officials will describe al-Hada as a “prominent al-Qaeda member who is believed to have been involved in the Cole bombing,” and say his phone was used by the bombers to relay messages and “put everything together” before the attack. [MSNBC, 2/14/2002; MSNBC, 5/2005]
February 2001: 9/11 Hijacker Almihdhar Stays in Closely Monitored Yemen Hub House Again
Future 9/11 hijacker Khalid Almihdhar stays at al-Qaeda’s communications hub in Yemen again. His father-in-law Ahmed al-Hada runs the hub in Sana’a, Yemen, where Almihdhar’s wife and other family live. Almihdhar stayed at the hub for around a month in June 2000 (see (Mid-June-Mid-July 2000)) and then traveled around Asia until returning to it now. It is unclear how long he stays, except he goes to Afghanistan for an unknown amount of time and then is in the United Arab Emirates and Malaysia in June 2001. [9/11 Commission, 7/24/2004, pp. 237] He may travel to Afghanistan via Iran later in February (see February 2001). [9/11 Commission, 7/24/2004, pp. 241, 529; Shenon, 2008, pp. 370-3] He will fly from Sana’a to Saudi Arabia on May 26, 2001, and probably stays at the hub again while in Sana’a (see (May 26, 2001)). The CIA and NSA have been closely monitoring the hub for years. Phone calls to and from it, including ones made by Almihdhar and other 9/11 hijackers, are intercepted, rooms in the building are bugged, and spy satellites record visitors (see Late August 1998, Late 1998-Early 2002, and Early 2000-Summer 2001). Based on information gained from monitoring this house, the CIA and local intelligence services mounted a major operation against Almihdhar, other 9/11 hijackers, and several more al-Qaeda operatives in December 1999 and January 2000, when they were followed around the Middle East and South Asia and monitored during an al-Qaeda summit in Malaysia (see December 29, 1999, January 2-5, 2000, and January 5-8, 2000). So presumably US intelligence should be aware of this visit to the hub and who Almihdhar is, but what exactly is known and who may know it will not be made public.
February 2001 and After: Al-Qaeda Communications Hub in Yemen Is Disclosed in Global Media, but 9/11 Hijackers Continue to Call It
During the trial of men accused of the 1998 East African embassy bombings, an FBI witness mentions that one of the defendants, Mohamed al-Owhali, told investigators that he had stayed in a Yemen-based al-Qaeda communications hub run by Ahmed al-Hada. He also revealed that he had called the hub before and after the Nairobi bombing. (Note: al-Hada’s surname is transliterated as “al-Hazza” during the trial.) The existence of the communications hub in Yemen is then reported by the US State Department, CNN, the Guardian, and UPI over the next few months. [United Press International, 2/13/2001; US Department of State, 3/7/2001; United State of America v. Usama bin Laden, et al., Day 14, 3/7/2001; CNN, 5/2/2001; Observer, 8/5/2001] The hub was also previously mentioned at a big trial of Islamic Jihad operatives in Cairo (see 1999). The 9/11 hijackers have been calling the communications hub by phone since early 1999, at least (see, e.g., Early 1999). The calls are being intercepted by the NSA and some of them have originated from within the US (see Early 2000-Summer 2001). Perhaps unaware that the hub’s existence has been disclosed, they will make at least one more call to the hub (see (August 2001)).
May 26, 2001: 9/11 Hijacker Almihdhar Probably Stays in Closely Monitored Yemen Hub House Yet Again
Future 9/11 hijacker Khalid Almihdhar probably visits the closely monitored al-Qaeda communications hub in Yemen again. While it will not be reported that he is at the hub at this time, it is known that he flies from Sana’a, Yemen, to Saudi Arabia on May 26, 2001 (see May 26, 2001), and the Yemen hub is in Sana’a. [Bamford, 2008, pp. 64] Furthermore, Almihdhar’s wife, his recently born baby, and other family members live in the hub (which is run by his father-in-law Ahmed al-Hada). It would seem highly likely he would not pass through Sana’a without visiting his family. Almihdhar stayed at the hub for around a month in June 2000 (see (Mid-June-Mid-July 2000)) and then visited it again in February 2001 (see February 2001). Details of Almihdhar’s travels are unclear, but he may have traveled to Afghanistan via Iran later in February (see February 2001). He is in the United Arab Emirates and Malaysia in June 2001. [9/11 Commission, 7/24/2004, pp. 237] Each time Almihdhar visits the hub presents a great opportunity for the CIA and NSA, because they have been closely monitoring the hub for years. Phone calls to and from the hub, including ones made by Almihdhar and other 9/11 hijackers, are intercepted, rooms in the building are bugged, and spy satellites record visitors (see Late August 1998, Late 1998-Early 2002, and Early 2000-Summer 2001). Based on information gained from monitoring this house, the CIA and local intelligence services mounted a major operation against Almihdhar, other 9/11 hijackers, and several more al-Qaeda operatives in December 1999 and January 2000, when they were followed around the Middle East and South Asia and monitored during an al-Qaeda summit in Malaysia (see December 29, 1999, January 2-5, 2000, and January 5-8, 2000). So presumably US intelligence should be aware of this visit to the hub and who Almihdhar is, but what exactly is known and who may know it will not be made public.
Summer 2001: 9/11 Hijackers’ Associates Call Monitored Al-Qaeda Communications Hub in Yemen
Associates of the 9/11 hijackers call a number in Yemen also called by the radicals who bombed two US embassies in East Africa in 1998. The calls, which MSNBC says are made “in the weeks before the attacks,” are presumably to an al-Qaeda communications hub in Sana’a, Yemen, run by Ahmed al-Hada, an associate of Nairobi embassy bomber Mohamed al-Owhali (see August 4-25, 1998). The number is monitored by US intelligence at this time and is also called by the hijackers themselves (see Early 2000-Summer 2001), at least one of the calls being around this time (see (August 2001)). But it is not clear what intelligence the NSA and CIA gleaned from these calls or which associates of the hijackers make the calls. [MSNBC, 10/3/2001] However, it is thought that one of the hijackers’ associates, Ramzi bin al-Shibh, met with an associate of al-Hada’s in Yemen the year before (see Before October 12, 2000) and traveled to Yemen before the bombing of the USS Cole (see October 10-21, 2000).