The FAA’s Command Center in Herndon, Virginia, is informed that a Korean Airlines plane is a possible hijacking, although the aircraft is in fact fine. [CNN, 8/14/2002; Spencer, 2008, pp. 256-257] Korean Airlines Flight 85, a Boeing 747 with 215 people on board, is on its way from Seoul, South Korea, to New York. It is heading for a refueling stop in Anchorage, Alaska, and is currently several hundred miles west of Alaska, over the North Pacific.
Pilots Sent Message Signifying Hijacking – The alarm has been raised by ARINC, a Maryland company that airlines pay to transmit text messages to and from their planes. In response to the morning’s terrorist attacks, the company had begun scanning every communication it had transmitted on this day, in a search for other hijacked aircraft. It found a message sent by the pilots of Flight 85 to the Korean Airlines headquarters at 11:08 a.m. that included the letters “HJK,” which is the code signaling a hijacking. ARINC officials are concerned the message was a coded plea for help, and so alert the FAA to it. In response to this notification, the FAA informs air traffic controllers in Anchorage of the suspicious flight, and alerts NORAD to it (see (12:00 p.m.) September 11, 2001). [USA Today, 8/12/2002; Spencer, 2008, pp. 257]
Reason for Message Unclear – The reason the Flight 85 pilots used the code for a hijacking in their ARINC message when their plane is not hijacked is unclear. Korean Airlines administrator Michael Lim will suggest the “HJK” code was intended as a question rather than a warning, but this was unclear in the message because pilots are unable to type question marks into ARINC messages. [Anchorage Daily News, 9/8/2002] David Greenberg, the Korean Airlines operations chief, will say the pilots’ message was “innocent, part of a routine discussion on where to divert the flight after airspace in the United States had been closed.” He will add that the pilots used the hijack code “to refer to the hijackings that day.” [USA Today, 8/12/2002] Author Lynn Spencer will similarly suggest that the crew of Flight 85 had “simply been trying to relay to controllers their awareness of the hijackings on the East Coast.” She will add: “It was an odd idea for the pilots to have, and contrary to their training. But for whatever reason—perhaps because of some language or communication barrier, or some training failure—they made a very dangerous bad call.” [Spencer, 2008, pp. 279]
Flight 85 Redirected to Canada – At 1:24 p.m., the pilots of Flight 85 will set their plane’s transponder to indicate that the flight has been hijacked (see 1:24 p.m. September 11, 2001). The plane will be directed away from Anchorage (see (Shortly After 1:24 p.m.) September 11, 2001) and escorted by fighter jets to Whitehorse Airport in Canada, where it lands at 2:54 p.m. (see 2:54 p.m. September 11, 2001). Only then will officials be able to confirm that the aircraft has not been hijacked (see September 12, 2001). [Canadian Broadcasting Corporation, 9/12/2001; Yukon Government, 11/13/2001, pp. 16, 18
; USA Today, 8/12/2002]
Between Late Morning and Early Afternoon September 11, 2001: Congressional Leaders Evacuated to Secure Location outside Washington
Congressional leaders are evacuated from Washington and flown to Mount Weather, a secret and secure bunker in Virginia, where they remain until late in the afternoon. [Los Angeles Times, 9/12/2001; Washington Post, 1/27/2002; ABC News, 9/15/2002] The Capitol building was evacuated shortly after the Pentagon was hit (see 9:48 a.m. September 11, 2001). Most of the leadership teams of both parties subsequently assemble at the Capitol Police building. [Daschle and D’Orso, 2003, pp. 112] Around late morning or early afternoon, orders are given to take them to a secure location outside Washington. The Congressional leaders return to outside the Capitol building, and from there are flown by military helicopter to Mount Weather. [Washington Post, 1/27/2002] Each is allowed to bring one staff member with them. [Daschle and D’Orso, 2003, pp. 114] The Mount Weather Emergency Operations Facility in Bluemont, Virginia, is located 48 miles—about 20 minutes journey by air—from Washington. [Bulletin of the Atomic Scientists, 11/2001; ABC News, 9/15/2002] It was originally built to serve as the new seat of government if there was a nuclear war. [ABC News, 9/11/2001] The underground complex contains about 600,000 square feet of floor space, and can accommodate several thousand people. [Bulletin of the Atomic Scientists, 11/2001] It has extensive communication systems linking it to the nationwide network of Federal Emergency Management Agency (FEMA) bunkers, relocation sites, and the White House Situation Room. [Center for Land Use Interpretation Newsletter, 3/2002] Members of Congress taken to the facility include House Majority Leader Dick Armey (R-TX), House Majority Whip Tom DeLay (R-TX), House Minority Leader Dick Gephardt (D-MO), House Minority Whip David Bonior (D-MI), Senate Majority Leader Tom Daschle (D-SD), Senate Minority Leader Trent Lott (R-MS), Assistant Senate Majority Leader Harry Reid (D-NV), and Senate Minority Whip Don Nickles (R-OK). [Hastert, 2004, pp. 10] Speaker of the House Dennis Hastert (R-IL) was taken there earlier on (see (9:50 a.m.) September 11, 2001). [Bamford, 2004, pp. 80-81] The Congressional leaders will remain at Mount Weather until later in the afternoon, and then return to the Capitol around 6:00 p.m. (see (Between 5:00 p.m. and 6:00 p.m.) September 11, 2001). [ABC News, 9/15/2002; Daschle and D’Orso, 2003, pp. 116; Hastert, 2004, pp. 10] The decision to send them outside Washington on this day has its roots in a top secret program dating back to the cold war, which serves to ensure the “Continuity of Government” (COG) in the event of an attack on the US (see 1981-1992). [United Press International, 9/11/2001; CNN, 9/11/2002; Mann, 2004, pp. 138-139] Counterterrorism “tsar” Richard Clarke activated the COG plan shortly before 10:00 a.m. this morning (see (Between 9:45 a.m. and 9:56 a.m.) September 11, 2001). [Clarke, 2004, pp. 8]
Before 12:00 p.m. September 11, 2001: Defense Secretary Rumsfeld Asks What the Enemy Could Do Next
Secretary of Defense Donald Rumsfeld asks officers at the Pentagon what else they think the terrorists might do and General Richard Myers, vice chairman of the Joint Chiefs of Staff, suggests they could conduct an attack using weapons of mass destruction. [Myers and McConnell, 2009, pp. 156; George C. Marshall European Center for Security Studies, 8/3/2012; Graff, 2019, pp. 302] Myers has been in the National Military Command Center (NMCC) at the Pentagon since around 9:58 a.m. (see (9:58 a.m.) September 11, 2001) and Rumsfeld has been there since around 10:30 a.m. (see (10:30 a.m.) September 11, 2001). [US Department of Defense, 9/11/2001
; 9/11 Commission, 7/24/2004, pp. 38, 43-44] Since 11:00 a.m., the two men were with other senior officials in the Joint Chiefs of Staff conference room within the NMCC, participating in a teleconference with other government agencies (see (11:00 a.m.) September 11, 2001). [Historical Office, Office of the Secretary of Defense, 4/9/2003
; Myers and McConnell, 2009, pp. 155] That meeting has now been adjourned and they start making their way back to the deputy director for operations’ office within the NMCC along with Colonel Matthew Klimow, Myers’s executive assistant. Suddenly Rumsfeld stops Myers and Klimow in their tracks. Then, in a command voice, he calls out to the dozen or so officers in the room: “What haven’t we thought of yet? What else can the enemy do?” He “was thinking ahead, engaging in [his] well-known outside-the-box speculation,” Myers will later comment. “He was always challenging his staff to think out of the box,” Klimow will say. Immediately, Myers replies, “NBC,” meaning a nuclear, biological, or chemical attack. Apparently as a result of this interaction, Myers orders that special response units be positioned outside Washington, DC, and New York, presumably in case a nuclear, biological, or chemical attack should occur in one of these cities. It is unclear exactly when the interaction occurs. However, in his 2009 memoir, Myers will place it before midday, when Vice Admiral Tom Wilson, director of the Defense Intelligence Agency, confirms to him and his colleagues in the NMCC that today’s attacks have undoubtedly been committed by al-Qaeda (see 12:00 p.m. September 11, 2001). Klimow will explain why he considers Rumsfeld’s question about what else the terrorists might do to have been “significant in terms of lessons learned.” Rumsfeld was simply saying words to the effect of: “Wake up! Wake up! What else can happen?” But, Klimow will comment, “Somebody needed to do it and they needed to do it right at that moment.” [Myers and McConnell, 2009, pp. 156; George C. Marshall European Center for Security Studies, 8/3/2012; Graff, 2019, pp. 302]
September 11, 2001: Television News Footage of Gleeful Palestinians Shown out of Context
Television news coverage on 9/11 repeatedly shows images of Palestinians rejoicing over the 9/11 attack. According to Mark Crispin Miller, a professor of media studies at New York University who investigated the issue, the footage was filmed during the funeral of nine people killed the day before by Israeli authorities. He said, “To show it without explaining the background, and to show it over and over again is to make propaganda for the war machine and is irresponsible.” [Agence France-Presse, 9/18/2001; Australian, 9/27/2001]
September 11, 2001: Suspected Militants Found with Calling Cards
An unnamed, young, Middle Eastern man flying from Amsterdam, Netherlands, to Detroit, Michigan, is arrested after his plane is diverted to Toronto, Canada. He is apparently found to be carrying a flight jacket, Palestinian Authority travel documents, and a picture of himself in a flight crew uniform in front of a fake backdrop of the WTC. [Toronto Star, 9/15/2001; Toronto Sun, 9/15/2001; Ottawa Citizen, 9/17/2001] Apparently, the man, who identifies himself as an aircraft maintenance engineer in Gaza, Palestine, was supposed to have arrived in the US a few days before but was delayed for unknown reasons. [CBS News, 9/14/2001] A second man was arrested a few days earlier while trying to enter Canada carrying a similar photo. He also possessed maps and directions to the WTC. Both men are soon handed over to the US. [Toronto Star, 9/15/2001] A similar picture of suspected Egyptian al-Qaeda operative Mohammad Zeki Majoub, arrested in Canada in June 2000, in front of a fake WTC backdrop was found in the luggage of one of the US hijackers. [Associated Press, 3/1/2001; Toronto Sun, 9/15/2001] Canadian officials “believe the photos could be calling cards used by the terrorists to identify those involved in plotting the attacks.”
[Toronto Sun, 9/15/2001]
September 11, 2001: Existing Files on Hijackers Enables Investigation to Start Within Hours of Attacks
One day after 9/11, the New York Times will report that FBI agents in Florida investigating the hijackers quickly “descended on flight schools, neighborhoods and restaurants in pursuit of leads.” At one flight school, “students said investigators were there within hours of Tuesday’s attacks.” [New York Times, 9/13/2001] Also on September 12, the Times will report, “Authorities said they had also identified accomplices in several cities who had helped plan and execute Tuesday’s attacks. Officials said they knew who these people were and important biographical details about many of them. They prepared biographies of each identified member of the hijack teams, and began tracing the recent movements of the men.” [New York Times, 9/13/2001] In September 2002, 9/11 victim’s relative Kristen Breitweiser, testifying before the 9/11 Congressional Inquiry, will cite these news reports and will ask, “How did the FBI know exactly where to go only a few hours after the attacks? How did they know which neighborhoods, which flight schools and which restaurants to investigate so soon in the case?… How are complete biographies of the terrorists, and their accomplices, created in such short time? Did our intelligence agencies already have open files on these men? Were they already investigating them? Could the attacks of September 11th been prevented?” [US Congress, 9/18/2002] In at least some cases, it appears that US intelligence did quickly access existing files on the hijackers. The Washington Post reports, “In the hours after Tuesday’s bombings, investigators searched their files on [Satam] Al Suqami and [Ahmed] Alghamdi, noted the pair’s ties to [Nabil] al-Marabh and launched a hunt for him.” A top Customs official claims that by checking flight manifests and comparing them with other information such as watch lists, he is able to determine the names of all 19 hijackers by 11:00 a.m.(see (11:00 a.m.) September 11, 2001). [Washington Post, 9/21/2001]
September 11, 2001: Germans Learn of 30 People Traveling for 9/11 Plot
A few hours after the attacks, German intelligence intercepts a phone conversation between followers of bin Laden that leads the FBI to search frantically for two more teams of suicide hijackers, according to US and German officials. The Germans overhear the operatives refer to “the 30 people traveling for the operation.” The FBI scours flight manifests and any other clues for more conspirators still at large. [New York Times, 9/29/2001] Two days later, authorities claim to have identified teams of as many as 50 infiltrators who supported or carried out the strikes. About 40 are accounted for as dead or in custody; ten are missing. They also believe a total of 27 suspected operatives received some form of pilot training. This corresponds with many analyses that the attacks required a large support network. [Los Angeles Times, 9/13/2001] Yet there is no evidence that any accomplices in the US shortly before 9/11 have since been arrested or charged.
Between 12:00 p.m. and 5:00 p.m. September 11, 2001: World Trade Center Leaseholder Discusses Possible Controlled Demolition of WTC 7 with Insurer, Reporter Will Later Claim
Larry Silverstein, who recently took over the lease of the World Trade Center complex (see July 24, 2001), discusses possibly bringing down WTC Building 7 in a controlled demolition in a telephone conversation with his insurance carrier, according to a reporter who is at the WTC site this afternoon. [Fox News, 4/22/2010] WTC 7 is a 47-story office building located just north of the Twin Towers. The National Institute of Standards and Technology (NIST) will say it suffered some structural damage (see 10:28 a.m. September 11, 2001) when the North Tower collapsed (see 10:28 a.m. September 11, 2001) and it has fires on several floors (see (10:28 a.m.-5:20 p.m.) September 11, 2001). It will collapse at 5:20 p.m., apparently becoming the first tall building ever to come down primarily as a result of fire (see (5:20 p.m.) September 11, 2001). [National Institute of Standards and Technology, 11/2008, pp. xxxv-xxxvi]
Silverstein Allegedly Wants WTC 7 Demolished – Investigative reporter Jeffrey Scott Shapiro, who is at the scene of the attacks in New York, will later recall: “Shortly before [WTC 7] collapsed, several NYPD officers and Con Edison workers told me that Larry Silverstein… was on the phone with his insurance carrier to see if they would authorize the controlled demolition of the building, since its foundation was already unstable and expected to fall. A controlled demolition would have minimized the damage caused by the building’s imminent collapse and potentially save lives.” Shapiro will add: “Many law enforcement personnel, firefighters, and other journalists were aware of this possible option. There was no secret.” [Fox News, 4/22/2010] Preparing a large building for demolition usually takes weeks, or even months. This time is spent on operations such as wrapping concrete columns to ensure pieces do not fly off. [Baltimore Sun, 2/26/1995; PBS NOVA, 12/1996; Construction Equipment Guide, 2/24/2005]
Discussion of Demolition Later Denied – Silverstein will later recall discussing WTC 7 over the phone with the commander of the New York Fire Department, and telling him, “We’ve had such terrible loss of life, maybe the smartest thing to do is pull it” (see After 12:00 Noon September 11, 2001), but a spokesman will subsequently claim that Silverstein was referring to withdrawing firefighters from the building, not bringing WTC 7 down with explosives. [US Department of State, 9/16/2005; BBC, 7/4/2008] At the end of a three-year investigation into the building’s collapse, NIST will say WTC 7 “did not collapse from explosives,” but critics will dispute this conclusion (see August 21, 2008). [Associated Press, 8/21/2008; New York Times, 8/21/2008]
12:00 p.m. September 11, 2001: NORAD Launches Fighters to Follow Suspicious Korean Airlines Plane
The North American Aerospace Defense Command (NORAD) launches fighter jets in response to a Korean Airlines passenger jet that is mistakenly suspected of being hijacked. [CNN, 8/14/2002; Air Force Magazine, 7/2009] Korean Airlines Flight 85 is a Boeing 747 bound from Seoul, South Korea, to New York, and currently heading for a refueling stop in Anchorage, Alaska. For reasons that are unclear, its pilots entered the code signaling a hijacking into a text message they sent to their airline at 11:08 a.m. The FAA was alerted to this, and it in turn alerted NORAD (see (Shortly Before 12:00 p.m.) September 11, 2001). [USA Today, 8/12/2002]
Fighters Launched from Alaska Base – Lieutenant General Norton Schwartz, the commander of the Alaskan NORAD Region, will later recall: “Given what had happened on the East Coast, it was entirely plausible to me this was an analog on the West Coast. So naturally, we took this seriously.” Schwartz orders Elmendorf Air Force Base, near Anchorage, to launch two F-15 fighter jets armed with missiles to intercept and shadow Flight 85. [Anchorage Daily News, 9/8/2002; Spencer, 2008, pp. 257] The jets belong to the 3rd Wing. [Commemorative Air Force, Inc., 4/2/2008
] Schwartz’s instructions for the fighter pilots are: “Tail the aircraft.… Follow Flight 85 at a position out of sight of passengers. Follow so the four-man flight crew—and anyone in the cockpit with them—couldn’t see them either.” [Anchorage Daily News, 9/8/2002] The two jets will fly about a mile behind Flight 85, shadowing it so its crew and passengers do not realize there are fighters in close proximity. [Alaska Legislature. Joint Senate and House Armed Services Committee, 2/5/2002]
Canadian Fighters Launched – Two Royal Canadian Air Force CF-18 fighter jets are also launched in response to Flight 85, although whether they take off before or after the 3rd Wing F-15s is unstated. [Anchorage Daily News, 9/29/2001] After Flight 85’s pilots refuse to confirm that their plane is not hijacked, Schwartz will threaten to have the plane shot down (see (Shortly After 1:24 p.m.) September 11, 2001). [Spencer, 2008, pp. 278] The NORAD jets will escort Flight 85 until it lands at Whitehorse Airport in Canada at 2:54 p.m. (see 2:54 p.m. September 11, 2001). [Canadian Broadcasting Corporation, 9/12/2001; USA Today, 8/12/2002]
12:00 p.m. September 11, 2001: Engineer at WTC Site Predicts the Collapse of Building 7
An engineer at the World Trade Center site correctly predicts that WTC Building 7 is going to collapse. Deputy Chief Peter Hayden of the New York Fire Department will later recall: “We had our special operations people set up surveying instruments to monitor and see if there was any movement of [WTC 7]. We were concerned of the possibility of collapse of the building. And we had a discussion with one particular engineer there, and we asked him, if we allowed it to burn could we anticipate a collapse, and if so, how soon?” The engineer apparently predicts correctly that WTC 7 will collapse and also the time it will take before it comes down. Hayden will recall, “He said yes and he gave an approximate time of five to six hours, which was pretty much right on the money because the building collapsed about 5 o’clock that afternoon.” Hayden will not reveal the name of this engineer. [BBC, 7/6/2008; Aegis Insurance Services, Inc. v. 7 World Trade Center Company, LP, 12/4/2013
] WTC 7 will collapse at about 5:20 p.m. (see (5:20 p.m.) September 11, 2001), indicating that the engineer makes his prediction around midday or shortly after. [CNN, 9/12/2001]


