The FBI’s New York field office, which specializes in international terrorism and houses the I-49 squad that focuses on Osama bin Laden (see January 1996), receives information from the NSA about a wiretap on the phone of 9/11 hijacker Khalid Almihdhar. The information concerns travel by Almihdhar, fellow alleged hijacker Nawaf Alhazmi, and other operatives to an al-Qaeda summit in Kuala Lumpur, Malaysia (see December 29, 1999, Shortly Before December 29, 1999, and January 5-8, 2000), but the office, like the rest of the FBI, is not told Almihdhar has a US visa (see 9:30 a.m. – 4:00 p.m. January 5, 2000). However, the New York office apparently does not realize it has this information and when investigators become aware of its importance in June 2001 they will conduct a running argument with FBI headquarters and the CIA over whether they can receive it again (see June 11, 2001). [US Department of Justice, 11/2004, pp. 293 ]
December 29, 1999: NSA Tells CIA about Planned Al-Qaeda Summit Involving Future Hijackers
The NSA, monitoring a telephone in an al-Qaeda communications hub in Yemen (see Late August 1998 and Late 1998-Early 2002), has listened in on phone calls revealing that hijackers Khalid Almihdhar, Nawaf Alhazmi, and Salem Alhazmi are to attend an important al-Qaeda summit in Malaysia in January 2000 (see Shortly Before December 29, 1999). Almihdhar’s full name was mentioned, as well as the first names of hijackers Nawaf Alhazmi and Salem Alhazmi. On this day, the NSA shares this information with the CIA’s Alec Station bin Laden unit. Other US intelligence agencies, including FBI headquarters and the FBI’s New York field office, are told as well. Although Khalid Almihdhar’s full name was mentioned in one call, the NSA only passes on his first name. Also, the NSA has already learned from monitoring the Yemen hub that Nawaf’s last name is Alhazmi and that he is long-time friends with Almihdhar (see Early 1999). However, they either don’t look this up in their records or don’t pass it on to any other agency. [9/11 Commission, 1/26/2004, pp. 6 ; US Department of Justice, 11/2004, pp. 239
; Wright, 2006, pp. 310] An NSA analyst makes a comment that is shared between US intelligence agencies, “Salem may be Nawaf’s younger brother.” This turns out to be correct. [US Congress, 7/24/2003, pp. 135
; 9/11 Commission, 1/26/2004, pp. 6
] A CIA officer will later tell the 9/11 Congressional Inquiry that information from the Africa embassy bombings (see 10:35-10:39 a.m., August 7, 1998) was reviewed in late 1999 during a worldwide effort to disrupt millennium attack plots (see December 15-31, 1999) and “a kind of tuning fork… buzzed when two [of the hijackers] reportedly planning a trip to [Malaysia] were linked indirectly to what appeared to be a support element… involved with the Africa bombers.” [US Congress, 7/24/2003, pp. 135
] The fact that they are connected to the Yemen communication hub already indicates some importance within al-Qaeda. It is learned they are connected to the embassy bombings in some way (see October 4, 2001 and Late 1999). [US Congress, 7/24/2003, pp. 135
; 9/11 Commission, 1/26/2004, pp. 6
] The NSA report about them on this day is entitled, “Activities of Bin Laden Associates,” showing the clear knowledge of their ties to bin Laden. [9/11 Commission, 7/24/2004, pp. 502; Vanity Fair, 11/2004] The CIA will track Almihdhar and Nawaf Alhazmi to the Malaysia summit (see January 2-5, 2000 and January 5-8, 2000).
Shortly Before December 29, 1999: NSA Monitors 9/11 Hijackers Talking to Each Other about Upcoming Al-Qaeda Summit
The NSA has been monitoring a telephone in an al-Qaeda communications hub in Yemen (see Late August 1998 and Late 1998-Early 2002). According to Vanity Fair, “Amid the storm of pre-millennial ‘chatter,’ the [NSA] intercepted communications among three Arabic men, each of whom bore some connection to the East Africa bombings (see 10:35-10:39 a.m., August 7, 1998) and to al-Qaeda.” The men are hijackers Khalid Almihdhar, Nawaf Alhazmi, and Salem Alhazmi. [Vanity Fair, 11/2004] Apparently, the NSA listens in on a phone call between al-Qaeda figure Khallad bin Attash and hijacker Khalid Almihdhar, who is staying at the hub. Attash mentions Almihdhar’s full name, as well as the first names of hijackers Nawaf Alhazmi and Salem Alhazmi. He says he wants the three of them to come to an important al-Qaeda summit in Malaysia in January 2000 (see January 5-8, 2000). The NSA has already heard the names of the three hijackers mentioned repeatedly in 1999 while monitoring the Yemen hub (see Early 1999). Apparently, US intelligence does not yet know bin Attash’s full name or role in al-Qaeda and won’t figure it out until late 2000 (see Early December 2000). [Wright, 2006, pp. 310] At the same time, US officials in Pakistan intercept Nawaf Alhazmi in Karachi calling Almihdhar at the Yemen hub. They learn Nawaf is planning a trip to Malaysia on January 4, 2000. The NSA is also monitoring Nawaf calling his brother Salem (the location of Salem at this time has not been revealed). [US Congress, 7/24/2003, pp. 143-144 ; Asia Times, 3/19/2004] The NSA will share details of these calls with the CIA and other agencies on December 29, 1999 (see December 29, 1999) and the CIA will eventually track Almihdhar to the Malaysia summit (see January 2-5, 2000).
2000: CIA Stops Reviewing NSA Transcripts after Short Period of Time, Allegedly due to ‘Resource Constraints’
The CIA sends an officer from its Counterterrorist Center (CTC) to the NSA to review raw transcripts of intercepted communications between terrorists. However, the officer is only there for a “brief period” and is subsequently withdrawn and not replaced, damaging the CIA’s ability to exploit the information gleaned from the intercepts. The CIA only previously received summaries of intercepted calls, not the transcripts themselves, and had been arguing for years that it needed the actual transcripts to better understand the material (see February 1996-May 1998, December 1996, After December 1996, After December 1996, and Late August 1998). After the single officer leaves the NSA, which intercepts calls between the US-based 9/11 hijackers and an al-Qaeda communications hub in Yemen around this time (see Early 2000-Summer 2001), the reason the CIA gives for not replacing him is “resource constraints.” In 2005, the CIA’s Office of Inspector General will regard this failure as so serious that it will recommend an accountability board be convened to review the performance of the CTC managers responsible, and will suggest that officers should have been detailed to the NSA “on a consistent, full-time basis.” [Central Intelligence Agency, 6/2005, pp. xxiii ] The CIA and NSA are obtaining information about people in the US from phone companies to support “black ops” at this time (see After July 11, 1997).
January 9, 2000: NSA Not Asked about Nawaf Alhazmi
The CIA fails to ask the NSA for information about Nawaf Alhazmi. The CIA is monitoring a summit of al-Qaeda operatives in Kuala Lumpur, Malaysia, along with local authorities there (see January 5-8, 2000), and is aware that one of the attendees is sometimes referred to by the first name Nawaf, and one is sometimes referred to by the last name Alhazmi. However, it apparently fails to put these two names together (see January 8-9, 2000). If asked, the NSA, which has been monitoring Alhazmi’s calls for at least a year (see Early 1999), could easily have realized “Nawaf” and “Alhazmi” were the same person. The 9/11 Commission will comment, “NSA’s analysts would promptly have discovered who Nawaf was, that his full name might be Nawaf Alhazmi, and that he was an old friend of Khalid [Almihdhar].” [US Congress, 7/24/2003, pp. 145 ; 9/11 Commission, 7/24/2004, pp. 353-4] The CIA does actually tell the NSA about Almihdhar and ask for information about him (see January 10, 2000 and Mid-January 2000), but, according to author James Bamford, “inexplicably” does not do this for Alhazmi. [US Congress, 7/24/2003, pp. 156
; Bamford, 2004, pp. 227] According to NSA director Michael Hayden, had the NSA been asked at this point, it may also have been able to identify Nawaf Alhazmi’s brother Salem, another of the hijackers. [US Congress, 7/24/2003, pp. 145
]
January 10, 2000: NSA Receives CIA Report on 9/11 Hijacker Almihdhar, but Does Not Disseminate More Information about Him
The CIA sends the NSA some information about 9/11 hijacker Khalid Almihdhar, including information about al-Qaeda’s Malaysia summit (see January 5-8, 2000), which Almihdhar attended, as well as the name of a person who helped him in Kuala Lumpur, where the summit was held. The NSA is also told Almihdhar’s primary purpose for coming to Malaysia was to meet with other people. The CIA knows Almihdhar has a US visa (see January 2-5, 2000), but it is unclear whether the NSA is informed of this. [US Congress, 7/24/2003, pp. 156 ] At this time, the NSA has some information about Almihdhar, whose calls it has been intercepting for at least a year (see Early 1999, Summer 1999, Late Summer 1999, and Shortly Before December 29, 1999), that has not been disseminated. In particular, the NSA seems to have overheard something in early 1999 that should have been disseminated, but was not. This new information from the CIA does not cause the NSA to re-examine its material on Almihdhar or disseminate any important information to other US agencies. However, Almihdhar is subsequently put on the NSA watchlist (see Mid-January 2000) and the NSA intercepts calls between his home in Yemen and him in the US (see Spring-Summer 2000), but fails to alert the FBI to his presence in the US (see (Spring 2000)).
Mid-January 2000: CIA Asks NSA to Pass on New Information about 9/11 Hijacker Almihdhar, but NSA Fails to Do So
Following a request by the CIA, the NSA puts hijacker 9/11 Khalid Almihdhar on its watch list. This means that the NSA should pass details of any new monitored communications involving him to the CIA. [US Congress, 7/24/2003, pp. 157 ; 9/11 Commission, 1/26/2004, pp. 6
] The CIA is looking for Almihdhar and knows he has a US visa (see January 13, 2000), but fails to add him to the State Department’s watch list until 19 months later (see August 23, 2001). The 9/11 Congressional Inquiry will later state: “In mid-January 2000, NSA queried its databases for information concerning Khaled [redacted]. These queries remained active until May 2000, but did not uncover any information.” In fact, the NSA intercepts eight of Almihdhar’s calls from San Diego to Yemen during this time and even gives some details about some of the calls to the FBI (see Spring-Summer 2000). However, they do not tell the CIA everything about them, despite the watch list requirement to provide the information. It is not clear why the NSA failed to share this with the CIA. It is also not known if or when Almihdhar was removed from the NSA watch list before 9/11. [US Congress, 7/24/2003, pp. 157
]
Early 2000-Summer 2001: NSA Intercepts Communications between 9/11 Hijackers in US and Al-Qaeda Communications Hub
While the 9/11 hijackers are in the US, the NSA intercepts several calls between them and an al-Qaeda communications hub in Sana’a, Yemen, run by Ahmed al-Hada, who is hijacker Khalid Almihdhar’s father-in-law (see August 4-25, 1998).
Summary of Calls – The first calls are made by Almihdhar and are intercepted during the spring and summer of 2000 (see Spring-Summer 2000).
More calls are made by hijacker Nawaf Alhazmi after the bombing of the USS Cole in October 2000 (see Mid-October 2000-Summer 2001).
The final call from the US is intercepted just a few weeks before 9/11 (see (August 2001)).
The NSA intercepted the hijackers’ calls outside the US before this (see Early 1999 and December 29, 1999) and continues to do so in 2000 (see Summer 2000) after Almihdhar returns to Yemen (see June 10, 2000 and (Mid-June-Mid-July 2000)).
Calls’ Content – Some of the calls may only contain non-operational information, as they are reportedly between Almihdhar and his wife. [9/11 Commission, 7/24/2004, pp. 222; Suskind, 2006, pp. 94; Wright, 2006, pp. 343] However, the calls are also used to relay messages to the 9/11 hijackers. [Embassy of Yemen (Washington), 2/13/2002; MSNBC, 2/14/2002; MSNBC, 5/2005]
Agencies’ Roles – The CIA is the lead agency monitoring the communications hub. It has planted bugs inside it and is wiretapping all calls (see Late August 1998). Intercepts of calls to and from the hub are a major plank of the US intelligence community’s effort to fight al-Qaeda. Also involved is the FBI, which is using phone records to plot these calls on a map (see Late 1998-Early 2002). Some of the calls intercepted by US intelligence come from Osama bin Laden’s satellite phone in Afghanistan (see August 4-25, 1998 and Late August 1998). After 9/11, counterterrorism officials will say that the number was one of the hottest targets being monitored by the NSA and was an “intelligence bonanza.” [Los Angeles Times, 12/21/2005; Wright, 2006, pp. 343]
Importance of Failure – Also after 9/11, counterterrorism officials will agree that the failure to follow leads to the US from this number was a huge missed opportunity to stop the 9/11 plot. For instance, FBI agent Kenneth Maxwell will say: “Two al-Qaeda guys living in California—are you kidding me? We would have been on them like white on snow: physical surveillance, electronic surveillance, a special unit devoted entirely to them.” [MSNBC, 7/21/2004; New Yorker, 7/10/2006 ]
Discussed after 9/11 – The failure to roll up the plot based on these communications intercepts will be discussed following 9/11 (see Summer 2002-Summer 2004 and March 15, 2004 and After).
Spring-Summer 2000: Calls between 9/11 Hijacker in San Diego and Al-Qaeda Communications Hub Intercepted by NSA
Around eight calls made by hijacker Khalid Almihdhar from San Diego to an al-Qaeda communications hub in Sana’a, Yemen, run by his father-in-law Ahmed al-Hada are intercepted by the NSA. [US Congress, 7/24/2003, pp. xii, 16-17, 157 ; Los Angeles Times, 12/21/2005; Wright, 2006, pp. 343; New Yorker, 7/10/2006
] At least one of the calls is made from a phone registered to hijacker Nawaf Alhazmi in their San Diego apartment. [US Department of Justice, 11/2004, pp. 251
] Other calls are made from a mobile phone registered to Alhazmi. [McDermott, 2005, pp. 296] Calls may also be made from the communications hub to the US. [MSNBC, 7/21/2004]
Dates of Calls – One of the calls takes place days after they move into their San Diego apartment in February (see January 15-February 2000). [MSNBC, 7/21/2004] Another is on March 20, 2000 and lasts 16 minutes. [Federal Bureau of Investigation, 10/2001, pp. 57 ; US Department of Justice, 11/2004, pp. 251
]
Intercepted by NSA – Although NSA analysts pick up Almihdhar’s first name, “Khalid,” they do not connect it to his second name, even though the NSA has been intercepting communications to and from the hub involving him throughout 1999 (see Early 1999 and December 29, 1999) and he is on the NSA watch list at this point (see Mid-January 2000). [US Congress, 7/24/2003, pp. xii, 16, 157 ; US News and World Report, 3/15/2004] Some, or perhaps all, of these calls are between Almihdhar and his wife, who lives at the communications hub and reportedly gives birth to a daughter in early 2000 while Almihdhar is in the US. [9/11 Commission, 7/24/2004, pp. 222; Suskind, 2006, pp. 94; Wright, 2006, pp. 343; New Yorker, 7/10/2006
] However, the NSA analysts suspect that Khalid is part of an “operational cadre.” [US News and World Report, 3/15/2004]
Dissemination and Content – According to the 9/11 Congressional Inquiry, the NSA disseminates some of this information to the FBI, CIA, and other agencies, but not all of it, as it apparently does not meet reporting thresholds. It is unclear why it does not meet such thresholds, although some sources will suggest Almihdhar was just talking to his wife. [US Congress, 7/24/2003, pp. 157 ; US News and World Report, 3/15/2004; 9/11 Commission, 7/24/2004, pp. 222; Suskind, 2006, pp. 94] Another source suggests operational information was passed on during the calls (see Early 2000-Summer 2001). However, two FBI agents who worked on al-Qaeda cases relating to Yemen, Dan Coleman and Ali Soufan, will later claim that they and other senior counterterrorism officials only learn about these calls after 9/11. [Los Angeles Times, 12/21/2005; Suskind, 2006, pp. 94; New Yorker, 7/10/2006
]
Significance – Author Lawrence Wright will comment: “You know, this is the key. The NSA is all over this phone. And everybody, you know, that has any connection with it is drawing links from that phone. Now imagine eight lines from Yemen to San Diego. How obvious would it be that al-Qaeda is in America[?]” [Federal News Service, 10/5/2006]
Other Calls – The NSA also intercepts various other communications between the hijackers and the communications hub (see Early 2000-Summer 2001).
Spring 2000: NSA Does Not Inform FBI that 9/11 Hijacker Almihdhar Is in US, Reason Unclear
The National Security Agency (NSA) intercepts calls between 9/11 hijacker Khalid Almihdhar in the US and an al-Qaeda communications hub in Yemen, but does not notify the FBI that Almihdhar is in the US. However, the NSA disseminates reports about some of the calls, which are made from phones registered to Nawaf Alhazmi (see Spring-Summer 2000). The NSA will later say that it does not usually intercept calls between the US and other countries at this time, as it believes that this should be done by the FBI. Despite this, the NSA acquires information about such calls and provides the information to the FBI in regular reporting and in response to specific requests. The FBI, which has a standing request for such information about any calls between the communications hub in Yemen and the US (see Late 1998), then uses this information in its investigations based on warrants issued under the Foreign Intelligence Surveillance Act. The NSA will later tell the 9/11 Congressional Inquiry the reason the FBI is not notified about Almihdhar is because it does not realize that Almihdhar is in the US. However, no explanation is offered for why the NSA fails to realize this. [US Congress, 7/24/2003, pp. 36, 73-4 ] This explanation will be contradicted by one offered in a 2004 article about the issue that reports the intercepts are not exploited precisely because the NSA knows one of the parties is in the US and therefore does not want to deal with his calls (see Summer 2002-Summer 2004 and March 15, 2004 and After). In addition, the FBI used information gained from intercepted calls to and from the hub in Yemen to make a world map of al-Qaeda’s organization, indicating that the locations talking to the hub could be determined by US intelligence (see Late 1998-Early 2002). [MSNBC, 7/21/2004]