When the CIA Knew Enough but Stayed Silent

In January 2000, an FBI agent working inside the CIA sat down to write a report. He had learned that a man under investigation for terrorist connections held a valid visa allowing multiple entries into the United States. His own agency, the one with the authority to investigate people inside America, did not know.

The report was never sent. A note in the file put it on hold. Twenty months later, the man it described boarded American Airlines Flight 77 and helped fly it into the Pentagon.

This is not the story people usually argue about. It is not about a president secretly holding the attack plan. It is smaller and harder to dismiss: names, travel records, and a series of chances that never turned into a search.

Kuala Lumpur

Intercepted communications in late 1999 pointed toward a gathering of al-Qaeda figures in Malaysia. The CIA, working with Malaysian authorities, got surveillance photographs of the men who showed up in January 2000.

Two of them were Khalid al-Mihdhar and Nawaf al-Hazmi. Nobody at the time knew what they would eventually do.

What made the operation suddenly relevant to America was a copy of Mihdhar’s passport. Inside it was a US visa.

A visa is not a crime. But attached to a man being watched for terrorist ties, it raises an obvious question, and the agent who spotted it understood that. He drafted the report. On January 5 it was put on hold, a notation attributing the instruction to a deputy chief in the CIA’s bin Laden unit. He later asked whether it needed revising. Investigators found no answer.

Meanwhile a separate internal cable stated the information had already gone to the FBI. Both records survived. When questioned afterward, the officials involved could not explain the contradiction.

The Justice Department’s inspector general later concluded the visa information did not reach the FBI through the channels it examined until August 2001.

Inside the country

On January 15, 2000, Mihdhar and Hazmi landed in Los Angeles. Neither had been placed on the State Department’s watchlist.

In March, a report from Bangkok identified Hazmi’s flight to Los Angeles. The CIA now had specific confirmation that a suspected extremist had travelled to the United States. Again it was not passed to the FBI.

The two men were not hard to find. They used their real names, opened a bank account, settled in San Diego, tried and failed at flight training. In May they rented rooms in the home of a man who supplied information to the FBI. His handler later said he learned their first names and never got their full identities. The FBI concluded the source was not complicit. The inspector general still criticised the failure to document basic facts about his boarders.

Proximity is not knowledge. But it is another line in a growing list of moments where the information existed and nobody assembled it.

The meeting in New York

On June 11, 2001, CIA and FBI personnel met in New York with agents investigating the bombing of the USS Cole, which had killed 17 American sailors the previous October. Surveillance photographs from Malaysia were shown. The investigators asked who these men were and why the meeting mattered.

A CIA analyst in that room knew Mihdhar held a US visa and that Hazmi had flown to Los Angeles. He said nothing, later telling investigators he did not believe he was authorised to discuss CIA material. The FBI side assumed that if he knew more, he would offer it.

Two days later, Mihdhar was granted another American visa. On July 4 he arrived in New York.

Fourteen days

The connection was finally made by an FBI analyst assigned to the CIA, asked to revisit the Malaysia files. According to the 9/11 Commission, she was expected to do it in her spare time.

On August 21 she found the March 2000 report placing Hazmi on a flight to Los Angeles. The next day, immigration records confirmed Mihdhar had entered in January 2000 and returned that July. No newly recruited source produced this. It came from checking files the government already held.

Both men were watchlisted on August 24. A search request went to the New York field office on August 28, classified routine, which allowed thirty days to respond. September 11 was fourteen days away, a deadline nobody in the chain could see.

An agent on the Cole investigation asked to help and was told he could not, because his was a criminal case and this was intelligence. He was even told to destroy his copy. He wrote back warning that someday someone would die, and that the public would not understand why every available resource had not been thrown at the problem.

Later reviews found the restriction was a misunderstanding. The Cole investigation could have supplied a lawful basis to pursue Mihdhar. The agents were not asking to break the law. They were being blocked from using authority they already had.

The lead went instead to an agent handling his first counterterrorism case. He was still checking hotel records on the morning of September 11.

What the record shows

The CIA’s inspector general found that roughly 50 to 60 people read at least one of the cables containing the relevant travel information between January and March 2000. This was not a document nobody opened.

The review identified crushing workloads, unclear ownership, and mismanagement. Calling it a systemic failure is accurate, but it obscures something. Someone held the draft. Someone claimed it had been sent. Someone marked the search routine.

None of that establishes that anyone allowed the attacks to happen. Knowing a suspect holds a visa is not knowing what he intends to do with it, and withholding information can be a grave failure without being complicity in the crime that follows.

The commission never promised that catching these two men would have stopped the operation. Al-Qaeda could replace personnel, and neither was a pilot. What an investigation might have exposed was the money, the contacts, and the size of what was actually underway.

That is what was lost. Not a guaranteed outcome, but the chance to find out how much bigger the danger was.

The warning was not discovered in the wreckage. It was written while there was still time to act on it.