Episode art: Blinking Red
← All episodes

The Long Fuse · Season One · Episode 2 · 20 min

Blinking Red

April to August 2001: the threat reporting grows so loud that, in the 9/11 Commission's words, "the system was blinking red." Episode 2 is the American side of that summer: the drumbeat of warnings, the reports that pointed overseas, the Phoenix memo, what the airlines were told, and a case opened in Minneapolis on August 15. The warnings were loud. Why did no one know where to look?

0:00 / 19:31

Disclaimer: a dramatization based on public records, including The 9/11 Commission Report, court filings and trial testimony. Some scenes and dialogue are reconstructed or composited. Voices are AI-generated and are not intended to resemble any real person. Not affiliated with or endorsed by any person or agency depicted. Allegations in court filings are unproven claims. No private victim is named beyond the public record, and people the Commission identified only by pseudonym keep those pseudonyms.

Chapters

Sources

Bibliography

  • CR6. The 9/11 Commission Report (2004), ch. 6, "From Threat to Threat"
  • CR7. The 9/11 Commission Report (2004), ch. 7, "The Attack Looms"
  • CR8. The 9/11 Commission Report (2004), ch. 8, "'The System Was Blinking Red'"
  • PDB. President's Daily Brief, August 6, 2001, "Bin Ladin Determined To Strike in US" (declassified April 10, 2004; reproduced in CR8)
  • OIG. U.S. Department of Justice, Office of the Inspector General, A Review of the FBI's Handling of Intelligence Information Related to the September 11 Attacks (2004; released 2006)
  • LW. Lawrence Wright, The Looming Tower: Al-Qaeda and the Road to 9/11 (Knopf, 2006) [secondary]

The 9/11 Commission Report: https://govinfo.library.unt.edu/911/report/index.htm

Scene-by-scene source notes

  • 1. A WINDOWLESS ROOM, WASHINGTON. Before dawn, spring 2001. Quote: CR8 §8.1, "The Drumbeat Begins". The room, the coffee and the printer are invented staging. The analyst is an unnamed composite who says nothing about any report's content.
  • 3. THE DRUMBEAT. April to May 2001. SEIB described: CR8 §8.1. CSG discussed the Abu Zubaydah reports on April 19; the briefing "the next day" headline "Bin Ladin planning multiple operations": CR8, fn 8. Abu Zubaydah, "a major figure in the millennium plots": CR8 (paraphrase of the text). "The drumbeat of reporting grew louder"; "Bin Ladin public profile may presage attack"; "Bin Ladin network's plans advancing": CR8, May 2001. CR8 does not give the dates of the two May headlines, so none are spoken. Clarke's May 29 note to Rice and Hadley, quoted sentence: CR8, fn 10–11 region. Black's "7 on a scale of 1 to 10, as compared to an 8 during the millennium": CR8, fn 11. Clarke, Rice, Hadley and Black are named and not voiced; only CR-quoted words are attributed to them. Abu Zubaydah: captured 2002 and held at Guantánamo, never charged. On air he is only "a man… a major figure in the plots around the millennium", which is the Commission's description.
  • 4. CRESCENDO. June to early July 2001. "An even higher peak of urgency"; the list of countries; "possibly Rome"; "the danger could be anywhere, including a possible attack on the G-8 summit in Genoa": CR8, "High Probability of Near-Term 'Spectacular' Attacks". The late-June advisory, "spectacular", and the headlines "Bin Ladin Attacks May be Imminent" and "Bin Ladin and Associates Making Near-Term Threats": CR8, fn 14. Clarke's June 28 note: both quotations verified against the official text; the bracketed expansion "[Defense Intelligence Agency]" in CR8 is omitted on air. "Very, very, very, very": CR8. The June 30 headline and the Saudi alert: CR8. The deception doubts and the June 30 SEIB "Bin Ladin Threats Are Real": CR8. CR8 names Wolfowitz as questioning the reporting; he is not named on air, which keeps the episode from seeming to assign blame. Disruption operations in 20 countries, operatives detained, "perhaps averting attacks against two or three U.S. embassies", and the Fourth of July concern with the alert maintained afterwards: CR8 fn 19–20. Capitalization follows CR8.
  • 4b. THE FEW THAT POINTED HOME. May to June 2001. Early-May walk-in (London, Boston, New York); the May 16 embassy phone call, "high explosives"; the May 17 CSG agenda: CR8. June 12 CIA report on KSM's recruiting: CR8 fn 12. "Khaled", the presumption that he was KSM, the July photo identification, "seen primarily as another freelance terrorist, associated with Ramzi Yousef", and links "not recognized at the time": CR8, late-leads KSM passage, fn 108 and 111. June 22 CIA notice to station chiefs and the State notice to embassies: CR8 fn 12. KSM was charged by military commission and has not been convicted; on air he is described only as CR8 and E01 describe him.
  • 4c. CONDITION DELTA. June 21 to July 31, 2001. CR8 §8.1, fn 15 (CENTCOM Delta in six countries; Fifth Fleet; Jordan exercise; Gulf embassies' review; Yemen embassy closed; FESTs on four hours' notice; "rolling 24 hour basis"), fn 21 (Cheney–Abdullah July 5; Genoa airspace and antiaircraft batteries; the President attended), fn 23 (Ashcroft July 5 briefing; "addressed only threats outside the United States"), fn 29 (FAA circular July 31: "reports of possible near-term terrorist operations . . . particularly on the Arabian Peninsula and/or Israel"; no credible evidence; "plan and train for hijackings"). All verified against the official text on 2026-10-17. Paraphrase outside quotation marks. The closing reflection is ours. This resolves the "FAA information circulars: hold" note below for the July 31 circular only.
  • 5. THE ROOM THAT WAS TOLD TO KEEP QUIET. July 2 to July 9, 2001. July 5 meeting: agency list, overseas focus, "told not to disseminate", the attendees' interpretation, and "An NSC official recalls a somewhat different" instruction: CR8 fn 21–22 and §8.1. Presented as contested, both sides stated, unadjudicated. July 9 meeting, 37 officials from 27 agencies, "exercise extreme vigilance": CR8 fn 25. The diagnosis quote: CR8. "More than a year": Hazmi and Mihdhar reached Los Angeles on January 15, 2000 (CR6; CR7). CR7 fn 1. NON-ADJUDICATING.
  • 5b. WHAT THE AIRLINES WERE TOLD. May to September 2001. FAA security directives (none increased checkpoint or on-board security); circulars urging carriers to "exercise prudence"; the CD-ROM and its quoted sentence; 27 special briefings between May 1 and Sep 11, 2001, two on overseas hijacking, none on suicide hijacking or aircraft as weapons, no new measures: CR8 fn 47–48. The FBI counterterrorism head is Dale Watson (CR8 fn 51, verified against the official text); "500 analysts…" is verified against the official text. Restraint note: the CD-ROM line is read once, level, with no music sting. It is the most painful sentence in the chapter, and the dignity line needs it to play plain. Family-sensitivity reviewer: flag this line.
  • 6. PHOENIX. July 10, 2001. The memo's date, addressees, quoted phrases, the four recommendations, "His recommendations were not acted on", the managers not seeing it until after 9/11, NY taking no action, and the author's own caveat (a Pan Am 103 scenario; broad aviation references): CR8, "Phoenix Memo", fn 87–89. The date: CR8 says "In July 2001"; the EC is "dated July 10, 2001" per DOJ OIG (2006 release, ch. 3; verified against the official text in the OIG PDF text). The agent is not named (a living person; The closing reflection is ours and consistent with CR8.
  • 7. "IT COULD NOT GET ANY WORSE." Late July 2001. Aug 1 FBI advisory; Aug 3 IC advisory, "likely continue indefinitely": CR8 fn 33–34. "Historical in nature": the President's account to the Commission, CR8 fn 36, attributed. No CSG or NSC meeting as a result: CR8 fn 38. The "We have found no indication…" quote: CR8 fn 40. Genoa airspace and anti-aircraft batteries, the President attended: CR8 fn 21. The mid-July delay reporting; Acting Director Pickard's July 19 conference call and the Commission's note that he did not task field offices: CR8 fn 27. The resignation consideration: CR8 fn 31. "The system was blinking red" and "get any worse": CR8 fn 30. The President's question and the PDB title: CR8 text at fn 35 (VERBATIM, verified for E01). The analyst line is invented and has no content.
  • 8. EAGAN, MINNESOTA. August 13 to 15, 2001. Training began at Pan Am in Eagan, Minnesota, on August 13; 747 simulators; "none of the usual qualifications"; "did not intend to become a commercial pilot"; "ego boosting thing"; Aug 13, 2001 was a Monday (calendar). The Minneapolis office initiated an intelligence investigation on August 15: CR8. French national, overstayed visa: CR8 fn 93. Jihadist beliefs, $32,000, no plausible explanation, agitation about travel and religion, the agent's quoted conclusion, and the plan being related to flight training: CR8 fn 91. The decision to prevent further training, the INS arrest, and the deportation order of August 17: CR8 fn 92–93. Pan Am manager's Aug 15 call to the Minneapolis Field Office, "suspicious", the $8,000–$9,000 cash payment, and custody on Aug 16: DOJ OIG (2006 release) ch. 4 §B and executive summary. The manager is not named (the OIG doesn't name him either). Cut: the DESK composite line (invented words for a real, if unnamed, person at a pivotal moment). Moussaoui pleaded guilty in 2005 and was sentenced to life in 2006, so naming him is safe; he is not voiced. Qutb's arrival in New York in November 1948 is from LW ch. 1 (SECONDARY; carried into E03). "Twenty-seven days": Aug 15 to Sep 11 (arithmetic).
Full transcript

0:07Analyst Okay. Okay, okay. Who took the last of the coffee and put the pot back empty? Animals.

0:16Analyst Overnight. Same. Same. More.

0:21The Record There is a kind of person whose whole job is reading. Cables, intercepts, reports from foreign services. In the spring of two thousand one, the people who did that job all noticed the same thing at about the same time. There was more.

0:39The Record The Commission put it in one sentence. "In the spring of 2001, the level of reporting on terrorist threats and planned attacks increased dramatically to its highest level since the millennium alert."

0:52Analyst Come on. Come on. Thank you.

0:55The Record The President would receive a page about it in August. You heard that page at the end of the last episode. This is how the summer got there.

1:07The Record From Will Sigmon Media. This is The Long Fuse. Episode two. Blinking Red.

1:15The Record As before, what you'll hear comes from the public record, mostly the 9/11 Commission Report. The documents are read as written. A few short scenes are reconstructed; the people in them are composites, and their words are ours. Where the record is uncertain, we'll say so.

1:34The Record Every morning, the President read a short document called the President's Daily Brief: six to eight brief articles, chosen by the CIA, and shown to only a handful of people. Between the inauguration and September tenth, two thousand one, more than forty of those articles related to bin Laden.

1:53The Record A wider version, the Senior Executive Intelligence Brief, went to a broader group of officials. It carried less detail, to protect sources. The Attorney General, the FBI Director and the White House counterterrorism coordinator got that one, not the President's. The Commission printed some of that spring's headlines. Hear them in order, because the order is the story.

2:18The Record In April, the counterterrorism group at the White House discussed reports about a man named Abu Zubaydah, who had been a major figure in the plots around the millennium. The next day, April twentieth, a briefing to top officials read: "Bin Ladin planning multiple operations."

2:35The Record In May, as the Commission puts it, "the drumbeat of reporting grew louder." Two more headlines. "Bin Ladin public profile may presage attack." And, "Bin Ladin network's plans advancing."

2:49The Record The group that discussed those reports was chaired by the White House's national coordinator for counterterrorism, a career official named Richard Clarke. On May twenty-ninth, Clarke wrote to the National Security Adviser, Condoleezza Rice, and her deputy, Stephen Hadley, about the threat from Abu Zubaydah. The Commission quotes one sentence from that note.

3:11The Record "When these attacks occur, as they likely will, we will wonder what more we could have done to stop them."

3:19The Record That same month, the head of the CIA's Counterterrorist Center, Cofer Black, gave Rice a number. On a scale of one to ten, he said, the threat was a seven. During the millennium, it had been an eight.

3:36The Record In June the reporting surged. The Commission wrote that it reached "an even higher peak of urgency." And it pointed abroad: to Saudi Arabia, Israel, Bahrain, Kuwait, Yemen, perhaps Rome. The danger, the Commission adds, could be anywhere, including at a summit of world leaders in Genoa, Italy.

3:58The Record A late-June threat advisory warned of a high probability of near-term "spectacular" attacks. Two more headlines followed. "Bin Ladin Attacks May be Imminent." "Bin Ladin and Associates Making Near-Term Threats."

4:15The Record On June twenty-eighth, Clarke wrote to Rice again. The pattern of al Qaeda activity over the past six weeks, he wrote, "had reached a crescendo." "A series of new reports continue to convince me and analysts at State, CIA, DIA, and NSA that a major terrorist attack or series of attacks is likely in July."

4:38The Record One al Qaeda intelligence report warned that something "very, very, very, very" big was about to happen. On June thirtieth, the headline was "Bin Ladin Planning High-Profile Attacks." That same day, Saudi Arabia declared its highest level of terror alert.

4:57The Record Not everyone was sure the threats were real. Some officials wondered whether they were deception, whether bin Laden was trying to study how America would react. The same day's brief carried an article with a title that answered them: "Bin Ladin Threats Are Real."

5:13The Record Twenty countries took part in operations to disrupt al Qaeda cells that summer. Several operatives were detained abroad. The Commission says those operations may have averted attacks on two or three American embassies. Clarke and others feared an attack on the Fourth of July. It passed quietly. The alert stayed up.

5:36The Record Not every report pointed abroad. A few pointed home, and the Commission lists them too.

5:42The Record In early May, a walk-in to the FBI claimed there was a plan to attack London, Boston and New York. On May sixteenth, a phone call to an American embassy warned that bin Laden's supporters were planning an attack in the United States using "high explosives." The next day, that report topped the agenda of Clarke's counterterrorism group.

6:05The Record And on June twelfth, a CIA report passed along background on several terrorists. In a comment about one of them, it said he was recruiting people to travel to the United States, to meet colleagues already there, so that they might carry out attacks on bin Laden's behalf.

6:23The Record The report called him "Khaled". CIA headquarters presumed, from the details, that he was Khalid Sheikh Mohammed. In July, the source was shown photographs and picked out his. If you heard the last episode, you know who he was. The CIA, in June two thousand one, did not. In the Commission's words, he "was seen primarily as another freelance terrorist, associated with Ramzi Yousef." His links to bin Laden and al Qaeda "were not recognized at the time."

6:56The Record Ten days later, the CIA told all its station chiefs about intelligence suggesting a possible al Qaeda suicide attack on an American target over the next few days. The State Department warned every embassy. The warnings were real, and they went everywhere. They still had no address.

7:19The Record Overseas, the government acted as if an attack were coming. On June twenty-first, near the height of the reporting, U.S. Central Command raised the force protection level for American troops in six countries to the highest possible level: Delta.

7:36The Record The U.S. Fifth Fleet moved out of its port in Bahrain. A Marine Corps exercise in Jordan was halted. American embassies in the Persian Gulf ran emergency security reviews, and the embassy in Yemen was closed. Emergency response teams stood ready to move on four hours' notice, on what the Commission calls a "rolling 24 hour basis."

7:59The Record On July fifth, Vice President Cheney contacted the Saudi crown prince, Abdullah. That same day, the CIA briefed Attorney General Ashcroft. He was told that a significant attack was imminent, that preparations for multiple attacks were in late stages or already complete, and that little additional warning could be expected. The briefing addressed only threats outside the United States.

8:24The Record Later that month, because of threats, Italy closed the airspace over Genoa and mounted antiaircraft batteries at the airport for the G-8 summit. The President was there.

8:36The Record And on July thirty-first, the FAA sent the aviation community a circular about "reports of possible near-term terrorist operations," particularly on the Arabian Peninsula and in Israel. It said the FAA had no credible evidence of specific plans to attack U.S. civil aviation. It also noted that some active terrorist groups were known to "plan and train for hijackings."

9:01The Record Warships moved. Embassies closed. Antiaircraft guns went up in Italy. Almost everything that summer pointed outward.

9:13The Record At home, the warnings went out too. On July second, the FBI's Counterterrorism Division sent a message to federal agencies and to state and local police. It summarized the threats from bin Laden, and it said this:

9:35The Record "The FBI has no information indicating a credible threat of terrorist attack in the United States." It added that an attack at home could not be discounted. It asked recipients to "exercise extreme vigilance" and "report suspicious activities." It did not, the Commission notes, suggest any specific actions to prevent an attack.

9:51The Record On July fifth, representatives of the domestic agencies came to the White House to meet Clarke: Immigration, the FAA, the Coast Guard, the Secret Service, Customs, the CIA and the FBI. The briefing focused on threats overseas. The attendees told the Commission they had been asked not to disseminate what they'd heard. They took that to mean they could brief their bosses, but not send advisories to the field. A White House official remembered that instruction differently. The Commission records both accounts.

10:24The Record On July ninth, as a result of that meeting, thirty-seven officials from twenty-seven agencies and organizations were briefed on the threat and told to "exercise extreme vigilance."

10:36The Record Here is the Commission's diagnosis of that summer, in its own words.

10:41The Record "The domestic agencies were waiting for evidence of a domestic threat from sleeper cells within the United States. No one was looking for a foreign threat to domestic targets. The threat that was coming was not from sleeper cells. It was foreign—but from foreigners who had infiltrated into the United States."

11:02The Record By then, those foreigners had been inside the country for months. One of them had been here more than a year.

11:12The Record The Federal Aviation Administration could order new security at checkpoints and on aircraft. It did issue a few directives that summer. The Commission found that none of them increased security at checkpoints or on board aircraft.

11:27The Record Its information circulars, the Commission says, mostly urged the airlines to "exercise prudence" and be alert.

11:35The Record Before September eleventh, the FAA had also given airlines and airports a presentation on a CD-ROM about the increased threat to civil aviation. It mentioned the possibility of suicide hijackings. And it said this: "fortunately, we have no indication that any group is currently thinking in that direction."

11:56The Record Between May first and September eleventh, the FAA gave twenty-seven special security briefings to individual airlines. Two discussed the threat of hijacking overseas. None discussed suicide hijackings, or aircraft used as weapons. No new security measures were put in place.

12:14The Record At the FBI, the head of counterterrorism told the Commission he had felt deeply that something was going to happen. But the threat information, he said, was "nebulous." He wished he had had "500 analysts looking at Usama Bin Ladin threat information instead of two."

12:35The Record On July tenth, an FBI agent in the Phoenix field office in Arizona sent a memo to headquarters, and to two agents on international terrorism squads in New York.

12:46Clerk Mail's going. Anything else for Washington? Okay.

12:50The Record The memo advised of what it called the "possibility of a coordinated effort by Usama Bin Ladin" to send students to the United States to attend civil aviation schools. The agent's theory rested on what he called an "inordinate number of individuals of investigative interest" at flight schools in Arizona.

13:09The Record He made four recommendations. Compile a list of civil aviation schools. Establish liaison with them. Discuss his theory with the intelligence community. And seek authority to obtain visa information on people applying to flight schools.

13:25The Record The Commission's account of what happened next is short. "His recommendations were not acted on." The managers of the two headquarters units it was addressed to did not see it until after September eleventh. The New York office took no action.

13:40The Record And then the Commission is fair to everyone, including the author. As he told investigators, the memo was not an alert about suicide pilots. His worry was closer to the bombing of Pan Am Flight one-oh-three: explosives placed on an aircraft. Its references to aviation training were broad, including aeronautical engineering.

14:02The Record An agent in Arizona had written down an idea about flight schools. It was the right category of worry. It pointed at no one in particular. And in July of two thousand one, that was the problem with everything.

14:19The Record In late July, because of the threats, Italy closed the airspace over Genoa and put anti-aircraft batteries at the airport for the summit of world leaders. The President attended. It passed.

14:34The Record The Director of Central Intelligence, George Tenet, gave the Commission a phrase for that summer, and the Commission used it as the title of the chapter you are hearing. In his world, Tenet told them, "the system was blinking red." By late July, he said, it could not "get any worse."

14:53The Record In mid-July, reporting began to suggest that bin Laden's plans had been delayed, perhaps by as long as two months, but not abandoned. On July nineteenth, the acting FBI director told his field chiefs on a conference call to have evidence teams ready to move at a moment's notice in case of an attack. The Commission notes that he did not ask the field offices to look for plots inside the United States.

15:19The Record On July twenty-seventh, Clarke told Rice and Hadley that the spike in reporting had stopped. He urged them to keep readiness high through the August vacation. Another report, he warned, suggested an attack had only been postponed for a few months, "but will still happen."

15:35The Record One senior official at the Counterterrorist Center told the Commission that he and a colleague had considered resigning that summer, in order to go public with their concerns.

15:47Analyst Overnight. Same. Same.

15:52The Record On August first, the FBI issued another advisory. Most of the reporting, it noted, pointed to attacks on American interests abroad, but an attack in the United States could not be discounted. On August third, the intelligence community concluded that the threat of impending al Qaeda attacks would likely continue indefinitely.

16:14The Record Then came the question in Crawford, the President's question to his briefers: did any of this point to the United States? The answer, on August sixth, had a title you already know. "Bin Ladin Determined To Strike in US."

16:30The Record The President later told the Commission that he saw the article as historical in nature. The Commission records that no meeting of Clarke's group, or of the National Security Council, was held to discuss the possibility of a strike in the United States as a result of it. And it adds a sentence of its own: "We have found no indication of any further discussion before September 11 among the President and his top advisers of the possibility of a threat of an al Qaeda attack in the United States."

17:05The Record On Monday, August thirteenth, a man began training at the Pan Am International Flight Academy in Eagan, Minnesota, outside Minneapolis. Pan Am trained airline crews on simulators of the Boeing seven-four-seven.

17:19The Record He had none of the usual qualifications. He said he did not intend to become a commercial pilot. He wanted the training, he said, as an "ego boosting thing." With little knowledge of flying, the Commission says, he wanted to learn to "take off and land" a Boeing seven-four-seven.

17:38The Record Two days later, on August fifteenth, a manager at the school picked up the phone and called the FBI's Minneapolis field office. By the Inspector General's account, he said that he and his co-workers were training a student they considered suspicious. The student had paid eight to nine thousand dollars for the course in cash. That same day, the Minneapolis office opened an intelligence investigation. The student's name was Zacarias Moussaoui. He was a French national, and he had overstayed his visa.

18:11The Record The agent on the case learned quickly that Moussaoui held jihadist beliefs. He had thirty-two thousand dollars in a bank account and no plausible explanation for it. He became agitated when he was asked about his travel and about his religion. The agent wrote that he believed Moussaoui was "an Islamic extremist preparing for some future act in furtherance of radical fundamentalist goals." He also believed the plan was related to the flight training.

18:39The Record The most important thing, the agent decided, was to stop him getting any more training. Because of the visa overstay, Moussaoui could be held at once. The immigration service took him into custody the next day, August sixteenth. A deportation order was signed on August seventeenth.

18:58The Record What Minneapolis wanted to do next, and what it could not get Washington to agree to, is the story of the last days of that summer. We'll come back to it. First, we have to go back much further, to a fuse that was lit more than half a century earlier, when a man from Egypt stepped off a ship in New York.

19:20The Record August fifteenth. Twenty-seven days.

Plain-text transcript · WebVTT · Chapters JSON · Download MP3