Counterterrorism “tsar” Richard Clarke writes an e-mail to National Security Adviser Rice saying that the pattern of al-Qaeda activity indicating attack planning has “reached a crescendo.” He adds, “A series of new reports continue to convince me and analysts at State, CIA, DIA [Defense Intelligence Agency], and NSA that a major terrorist attack or series of attacks is likely in July.” For instance, one report from an al-Qaeda source in late June warned that something “very, very, very, very” big is about to happen, and that most of bin Laden’s network is anticipating the attack. [9/11 Commission, 7/24/2004, pp. 256; US District Court of Eastern Virginia, 5/4/2006, pp. 1 ] CIA Director Tenet sends Rice a very similar warning on the same day (see June 28, 2001). The 9/11 Commission does not record Rice taking any action in response to these warnings. [9/11 Commission, 7/24/2004, pp. 256]
June 28, 2001: CIA Director Tenet Warns National Security Adviser Rice of Imminent Al-Qaeda Attack
CIA Director Tenet writes an intelligence summary for National Security Adviser Rice: “It is highly likely that a significant al-Qaeda attack is in the near future, within several weeks.” A highly classified analysis at this time adds, “Most of the al-Qaeda network is anticipating an attack. Al-Qaeda’s overt publicity has also raised expectations among its rank and file, and its donors.” [Washington Post, 5/17/2002] The same day, Tenet is briefed by another CIA official that bin Laden “will launch a significant terrorist attack against US and/or Israeli interests in the coming weeks. The attack will be spectacular and designed to inflict mass casualties against US facilities or interests” (see June 28, 2001). [US Congress, 7/24/2003] Apparently, these warnings are partly based on a warning given by al-Qaeda leaders to a reporter a few days earlier (see June 21, 2001). Counterterrorism “tsar” Richard Clarke also later asserts that Tenet tells him around this time, “It’s my sixth sense, but I feel it coming. This is going to be the big one.” [Clarke, 2004, pp. 235]
Late June 2001: FAA Disregards Recommended Antiterrorist Measures
Counterterrorism “tsar” Richard Clarke gives a direct warning to the FAA to increase security measures in light of an impending terrorist attack. The FAA refuses to take such measures. [New Yorker, 1/14/2002]
July 2001: Company of the First Victim of the 9/11 Hijackings Is Recruited to Provide Cybersecurity for the White House
In order to protect the White House website against a predicted attack by the Code Red virus, Richard Clarke, the White House counterterrorism chief, employs high-tech firm Akamai, which is run by Daniel Lewin, who will be the first person killed in the 9/11 hijackings. [Clarke and Knake, 2010, pp. 112; Forbes, 4/8/2010; Forbes, 7/1/2010; Ha’aretz, 11/11/2011] Akamai was co-founded in 1998 by Lewin, a graduate student at the Massachusetts Institute of Technology (MIT), and Tom Leighton, a professor of applied mathematics at MIT. Its technology enables the Internet to handle Web congestion, so content can be delivered quickly and efficiently. [Slate, 9/11/2015; Forbes, 3/25/2019] The Code Red worm was created to cause damage by conducting a “distributed denial of service” attack, which, according to Scientific American, “overwhelms a website by directing computers to deluge it with spurious connections.” [Scientific American, 10/28/2002] It is designed to attack the White House infrastructure on the Internet by bombarding the White House Web server with data, thereby shutting it down for hours or even days. [Register, 7/24/2001; Minneapolis/St. Paul Business Journal, 8/26/2001; MIT Technology Review, 10/1/2003; Forbes, 3/25/2019]
Help Is Needed to Stop an Attack on the White House Website – Clarke wants help from Akamai because he has learned that 300,000 computers infected with Code Red are about to attack the White House website. [Forbes, 4/8/2010] He therefore turns up at the company’s headquarters in Cambridge, Massachusetts. This is the first time Akamai has dealt with him. “We did not know him, but he somehow knew us,” Leighton, who is Akamai’s chief scientist, will later remark. [Forbes, 3/25/2019] Lewin is presumably one of the people Clarke deals with during the visit since, as well as being the firm’s co-founder, as chief technology officer he “effectively ran the company,” according to Lior Netzer, one of his colleagues. [Ha’aretz, 11/11/2011] Clarke tells Akamai “that there was going to be a massive attack on the White House Internet infrastructure… and he believed that we could help him,” Leighton will recall. Akamai agrees to provide the White House with the assistance he requests. [Forbes, 3/25/2019]
Akamai Stops the Virus – The Code Red worm attacks the White House website with requests that threaten to overload its server on July 19. [CNET News, 7/27/2001; Guardian, 8/31/2001] But Akamai is able to stop the fraudulent data requests by redirecting them to Akamai servers around the world.
Akamai Has No Experience of Cybersecurity Work – It is unclear when Clarke approaches Akamai for help. The firm is enlisted by him “with just a few hours’ notice,” according to Forbes magazine. [Forbes, 7/1/2010] But Leighton will say he visits Akamai two weeks before the worm is set to attack the White House’s Internet infrastructure. It is also unclear why Clarke has chosen to go to Akamai for help since the company apparently has never previously done any cybersecurity work. Leighton will in fact say that the assistance it provides to the White House on this occasion “gave birth to our government and security business.” According to Leighton, the reason is that Clarke has “figured out that [Akamai] had a large edge network with a large number of servers close to where the users were and where the attacking bots were,” and he “felt that if the traffic was directed through us, that the network had enough capacity to filter out the attack and protect the core.” [Forbes, 3/25/2019] Ironically, Lewin will apparently be the first person killed in the 9/11 attacks. He will be a passenger on Flight 11, the first plane to be hijacked, and reportedly have his throat slashed when the hijackers are taking over (see (8:14 a.m.) September 11, 2001). [Ha’aretz, 11/11/2011; Raskin, 2013, pp. 218; CNN, 9/11/2013; Tablet, 9/11/2013]
July 3, 2001: CIA Director Tenet Makes Urgent Request for Counterterrorism Help from Allies
CIA Director Tenet makes an urgent special request to 20 friendly foreign intelligence services, asking for the arrests of anyone on a list of known al-Qaeda operatives. [Washington Post, 5/17/2002] Also in late June, the CIA orders all its station chiefs overseas to share information on al-Qaeda with their host governments and to push for immediate disruptions of al-Qaeda cells. Vice President Cheney asks Saudi
Crown Prince Abdullah for help on July 5, and counterterrorism “tsar” Richard Clarke makes appeals to other foreign officials. As a result, several terrorist operatives are detained by foreign governments. According to a later analysis by the 9/11 Commission, this possibly disrupts operations in the Persian Gulf and Italy (see June 13, 2001) and perhaps averts attacks against two or three US embassies. For instance, al-Qaeda operative Djamel Beghal is detained by the French government in July and gives up information about a plot to attack the US embassy in France (see July 24 or 28, 2001). [9/11 Commission, 7/24/2004, pp. 258, 534] Perhaps as part of Tenet’s request for help, Mohammed Haydar Zammar, a member of the al-Qaeda cell in Hamburg, Germany, is detained in Jordan in July 2001 and then let go (see July 2001).
July 5, 2001: Counterterrorism ‘Tsar’ Clarke Warns Domestic Agencies of ‘Something Spectacular’ Planned by Al-Qaeda
At the request of National Security Adviser Rice and White House Chief of Staff Andrew Card, counterterrorism “tsar” Richard Clarke leads a meeting of the Counterterrorism Security Group, attended by officials from a dozen federal agencies, including the Immigration and Naturalization Service (INS), the FAA, the Coast Guard, the Secret Service, Customs, the CIA, and the FBI. The CIA and FBI give briefings on the growing al-Qaeda threat. [Washington Post, 5/17/2002; Time, 8/12/2002; 9/11 Commission, 7/24/2004, pp. 258] Then Clarke later recalls saying, “You’ve just heard that CIA thinks al-Qaeda is planning a major attack on us. So do I. You heard CIA say it would probably be in Israel or Saudi Arabia. Maybe. But maybe it will be here. Just because there is no evidence that says that it will be here, does not mean it will be overseas. They may try to hit us at home. You have to assume that is what they are going to do.” [Clarke, 2004, pp. 236] Two attendees later recall Clarke stating that “something really spectacular is going to happen here, and it’s going to happen soon.” One who attended the meeting later calls the evidence that “something spectacular” is being planned by al-Qaeda “very gripping.” [Washington Post, 5/17/2002; Time, 8/12/2002; 9/11 Commission, 7/24/2004, pp. 256] Clarke directs every counterterrorist office to cancel vacations, defer non-vital travel, put off scheduled exercises, and place domestic rapid-response teams on much shorter alert. However, there is very poor follow up to the meeting and the attendees don’t share the warnings with their home agencies (see Shortly After July 5, 2001). By early August, all of these emergency measures are no longer in effect. [CNN, 3/2002; Washington Post, 5/17/2002]
Shortly After July 5, 2001: Warning from Urgent Meeting Is Not Shared within Domestic Agencies
On July 5, 2001, counterterrorism “tsar” Richard Clarke gave a dramatic briefing to representatives from several domestic agencies on the urgent al-Qaeda threat (see July 5, 2001). However, the warnings given generally are not passed on by the attendees back to their respective agencies. The domestic agencies were not questioned about how they planned to address the threat and were not told what was expected of them. According to the 9/11 Commission, attendees later “report that they were told not to disseminate the threat information they received at the meeting. They interpreted this direction to mean that although they could brief their superiors, they could not send out advisories to the field.” One National Security Council official has a different recollection of what happened, recalling that attendees were asked to take the information back to their agencies and “do what you can” with it, subject to classification and distribution restrictions. But, for whatever reason, none of the involved agencies post internal warnings based on the meeting, except for Customs which puts out a general warning based entirely on publicly known historical facts. [9/11 Commission, 7/24/2004, pp. 258, 264] The FAA issues general and routine threat advisories that don’t reflect the level of urgency expressed by Clarke and others (see January-August 2001). FAA Administrator Jane Garvey later claims she was unaware of a heightened threat level, but in 2005 it will be revealed that about half of the FAA’s daily briefings during this time period referred to bin Laden or al-Qaeda (see April 1, 2001-September 10, 2001). [New York Times, 4/18/2004] Clarke said rhetorically in the meeting that he wants to know if a sparrow has fallen from a tree. A senior FBI official attended the meeting and promised a redoubling of the FBI’s efforts. However, just five days after Clarke’s meeting, FBI agent Ken Williams sends off his memo speculating that al-Qaeda may be training operatives as pilots in the US (see July 10, 2001), yet the FBI fails to share this information with Clarke or any other agency. [Washington Post, 5/17/2002; Clarke, 2004, pp. 236-37] The FBI will also fail to tell Clarke about the arrest of Zacarias Moussaoui (see August 16, 2001), or what they know about Nawaf Alhazmi and Khalid Almihdhar (see August 23, 2001).
July 6, 2001: Counterterrorism ‘Tsar’ Clarke Tells Rice to Warn Agencies to Prepare for 3 to 5 Simultaneous Attacks; No Apparent Response
Counterterrorism “tsar” Richard Clarke sends National Security Adviser Rice an e-mail message “outlining a number of steps agreed on” at the Counterterrorism Security Group meeting the day before (see July 5, 2001), “including efforts to examine the threat of weapons of mass destruction and possible attacks in Latin America. One senior administration official [says] Mr. Clarke [writes] that several agencies, including the FBI, the CIA, and the Pentagon, [have] been directed to develop what the official [says are] ‘detailed response plans in the event of three to five simultaneous attacks.’” However, no response or follow-up action has been pointed out. [New York Times, 4/4/2004]
July 10, 2001: CIA Officials Black, Blee, and Tenet Warn National Security Adviser Rice about Possible Imminent Al-Qaeda Attacks
CIA Director George Tenet and two other senior CIA officials give a briefing at the White House in which they present National Security Adviser Condoleezza Rice and other officials with information indicating an al-Qaeda attack, possibly in the United States, is imminent. [Tenet, 2007, pp. 151-153; Whipple, 2020, pp. 186-187] Earlier today, Richard Blee, head of the CIA’s bin Laden unit, went to Cofer Black, director of the CIA’s Counterterrorist Center, with compelling evidence that al-Qaeda will attack the United States in the near future, and the two men then presented this information to Tenet. Realizing its significance, Tenet called Rice and arranged to meet her right away (see July 10, 2001). [Politico Magazine, 11/12/2015; WBUR, 10/13/2020]
Briefing Is the CIA’s ‘Starkest Warning’ about Al-Qaeda – After arriving at the White House, Tenet, Blee, and Black meet Rice in her office. Also present are Stephen Hadley, the deputy national security adviser, and Richard Clarke, the White House counterterrorism chief. To emphasize the urgency of the information they are going to present, the three CIA officials sit at the conference table instead of on the couch. “I thought the more formal setting and stiff-backed chairs were appropriate for what was about to be said,” Tenet will later comment. [Tenet, 2007, pp. 151; Whipple, 2020, pp. 186] The meeting that ensues will stand out “in the minds of both Tenet and Black as the starkest warning they had given the White House on [Osama] bin Laden and al-Qaeda,” according to journalist and author Bob Woodward. [Woodward, 2006, pp. 52]
‘Spectacular’ Attacks against the US Are Expected – Blee hands out briefing packages to the White House officials. He then begins with a PowerPoint presentation. [Tenet, 2007, pp. 151; Whipple, 2020, pp. 186] Rice will recall that it includes “the threat information that we had been reviewing daily along with some new intelligence.” [Rice, 2011, pp. 67] Blee describes the threat facing the nation, saying: “There will be significant terrorist attacks against the United States in the coming weeks or months. The attacks will be spectacular. They may be multiple. Al-Qaeda’s intention is the destruction of the United States. This is an attack that is intended to cause thousands of American casualties somewhere.” He notes, however, that the location where any attack will occur is unknown. “We cannot say it will be New York City or the United States, but it is geared toward US citizens,” he says. It is also impossible to determine when an attack might occur. “We know from past attacks that [bin Laden] is not beholden to attacks on particular dates” and will act “when he believes the attack will be successful,” he explains.
Recent Statements Suggest an Imminent Attack – Blee then lays out the signs of an impending attack that have been observed. He says Ibn Khattab, a Chechen rebel leader, has promised some “very big news” to his troops (see (July 9, 2001)). He shows a chart that depicts seven pieces of evidence gathered over the last 24 hours that suggest an attack is imminent. These include an increase in the number of Islamic extremists that have been traveling to Afghanistan and significant departures of extremist families from Yemen. He then shows another chart that lists some of the most chilling statements the CIA has compiled through its intelligence work. These include a statement made by bin Laden to trainees in mid-June that there will be an attack in the near future; information from late June that referred to an imminent “big event”; information that mentioned moving toward decisive acts; and two pieces of information received just days earlier in which people were predicting “a stunning turn of events in the weeks ahead.” [Tenet, 2007, pp. 151-152; Whipple, 2020, pp. 186-187]
Threats Are Serious, Blee Maintains – Rice, Clarke, and Hadley are told that all the intelligence, from human and technical sources, is consistent and while some of it is uncertain, this kind of information is often the best indicator. [Woodward, 2006, pp. 51; Washington Post, 10/1/2006] Blee also asserts that bin Laden’s threats are serious. “Throughout the Arab world, [bin Laden’s] threats are known to the public,” he says. There would therefore be “a loss of face, funds, and popularity” if the threatened attacks were not carried out.
America ‘Must Take the Battle’ to Bin Laden – Blee summarizes efforts that have been made to disrupt specific targets tied to bin Laden. One goal of these actions was to prompt the targets to spread the word that bin Laden’s plans have been compromised, in the hope that this might cause bin Laden to delay any planned attacks. Blee then says immediate consideration should be given to moving from a defensive to an offensive posture. “We must consider a proactive instead of a reactive approach to [bin Laden],” he says, adding, “Attacking him again with cruise missiles after this new terrorist attack will only play to his strategy.” He says the US “must take the battle to [bin Laden] in Afghanistan. We must take advantage of increasing dissatisfaction of some Afghan tribes with the Taliban. We must take advantage of the Afghan armed opposition.”
US Needs to Go on a ‘War Footing’ – After Blee has finished his briefing, Rice turns to Clarke and asks him: “Dick, do you agree? Is this true?” “Clarke put his elbows on his knees and his head fell into his hands, and he gave an exasperated yes,” Tenet will recall. She then asks Black, “What should we do now?” In response, he slams his fist on the table and declares, “This country needs to go on a war footing now!” Rice asks what can be done to go on the offensive right away against al-Qaeda. “We need to re-create the authorities that we had previously submitted in March,” she is told (see Early March 2001). Tenet reminds her that before these authorities can be approved, President Bush will need to align his policy with the new reality. Rice assures him that this will happen. [Tenet, 2007, pp. 152-154; Whipple, 2020, pp. 187] She also asks him if there is more the CIA could do to capture Abu Zubaida, whom the government believes to be al-Qaeda’s chief facilitator and therefore someone who might know the details of the plot. [Rice, 2011, pp. 67]
Black and Blee Think the Meeting Was a Success – There will be contradictory accounts of how the CIA officials feel about the meeting after it ends. Blee and Black will say they felt they had gotten their message across. As they walk across the West Wing parking lot, they high-five each other. “We thought we’d finally gotten through to these people,” Black will recall, adding, “We had executed our responsibilities.” Blee will recall them telling each other: “Boom! We hit a home run. She got it.” [Whipple, 2020, pp. 187] But according to Woodward, Black, along with Tenet, feels that “they were not getting through to Rice” and Tenet leaves the meeting “feeling frustrated.” [Woodward, 2006, pp. 51; Washington Post, 10/1/2006]
Tenet Will Say He Was Happy with Rice’s Response – Woodward’s account will be disputed, though. “[B]oth current and former officials, including allies of Mr. Tenet, took issue with Mr. Woodward’s account that [Tenet] and his aides had left the meeting feeling that Ms. Rice had ignored them,” the New York Times will report. And members of the 9/11 Commission who interview Tenet in 2004 will say the CIA director “never indicated he had left the White House with the impression that he had been ignored” when he discussed today’s meeting with them. [New York Times, 10/2/2006] When Daniel Marcus, the 9/11 Commission’s general counsel, asks Tenet how Rice reacted to his message about the dangers of al-Qaeda, Tenet will answer: “She got it. She agreed. We were all working on it.” [Newsweek, 4/29/2007]
‘Nothing Happened’ after the Briefing, Blee Will Say – Black and Blee will be disappointed at what they see as the White House’s lack of action following the briefing. Blee’s assessment will be, “From July to September, nothing happened.” [Whipple, 2020, pp. 187] “To me it remains incomprehensible,” Black will complain. “How is it that you could warn senior people so many times and nothing actually happened?” he will ask. [Politico Magazine, 11/12/2015] Tenet will come to regard today’s meeting as “a tremendous lost opportunity to prevent or disrupt the 9/11 attacks,” according to Woodward. [Woodward, 2006, pp. 79] However, according to the New York Times, records will show that “far from ignoring Mr. Tenet’s warnings,” Rice “acted on the intelligence” and asked Tenet to make the same presentation he gave today to Defense Secretary Donald Rumsfeld and Attorney General John Ashcroft (see July 11-17, 2001).
Rice Will Have a Poor Recollection of the Meeting – Controversy will arise when the existence of today’s meeting comes to light in 2006 and details of the meeting will be disputed (see September 29, 2006 and September 30-October 3, 2006). Rice will initially tell reporters she does not recall this specific meeting and note that she met Tenet numerous times this summer to discuss terrorist threats (see October 1-2, 2006). [Washington Post, 9/30/2006; New York Times, 10/2/2006; New York Times, 10/2/2006] However, in her memoir, published in 2011, she will simply write that her “recollection of the meeting is not very crisp” because she and Tenet “were discussing the [terrorist] threat every day.” [Rice, 2011, pp. 67] Furthermore, although Tenet discusses the meeting when he testifies before the 9/11 Commission, there will be no mention of it in the Commission’s final report. [Washington Post, 10/1/2006; Tenet, 2007, pp. 153; Politico Magazine, 11/12/2015]
July 27, 2001: Counterterrorism ‘Tsar’ Clarke Says Immediate Threat Is Over but Attacks Are Still Going Forward
Counterterrorism “tsar” Richard Clarke informs National Security Adviser Rice and her deputy Stephen Hadley that the spike in intelligence about a near-term al-Qaeda attack has stopped. However, he urges keeping readiness at a high level during August, when President Bush and many other top US leaders go on vacation. He warns that another recent report suggests that an attack has just been postponed for a few months “but will still happen.” Similarly, on August 3, the CIA sends a cable to the US intelligence community warning that the threat of impending al-Qaeda attacks is likely to continue indefinitely. [9/11 Commission, 7/24/2004, pp. 260, 534]