Lev Parnas Wants in on the Rudy Giuliani Warrant Bonanza

/4 Comments/in , , , /by

Lev Parnas just submitted a filing in his case — joined by the remaining defendants — asking for a discovery hearing where SDNY will tell them when they will get the evidence seized from Rudy Giuliani and Victoria Toensing that is helpful to their defense. It describes how, after inquiring how the searches on Rudy and Toensing affect them, on May 14, the government explained that Judge Paul Oetken has given the government multiple gags, covering the time through June 30, to delay disclosure.

And it sounds like the government seized material from more than just Rudy and Toensing. At least two sentences of this description of the searches likely doesn’t pertain to them.

Parnas explains that he expects those searches will include materials useful to his defense from:

  • Rudy
  • Toensing
  • “the former President”
  • Billy Barr
  • “high-level members of the Justice Department”
  • Jay Sekulow
  • Jane Raskin
  • Senator Lindsey Graham
  • Congressman Devin Nunes

He expects those materials will reveal “the timing of the arrest and indictment of the defendants as a means to prevent potential disclosures to Congress in the first impeachment inquiry of then-President” Trump. He says he’ll have exceptions to any “potentially applicable privilege.”

He also expects that there may be information that got deleted (the implication is, by him) about “how to address their prior relationships, and the unfolding investigation.”

Update: As a number of people have noted, that big redaction is one of the fake redactions that defense attorneys sometimes disclose sensitive information under. Copy and pasting shows that the following other people were also targeted.

In a chart, the Government identified that it had sought and seized a variety of undisclosed materials from multiple individuals, including: the iCloud and e-mail accounts of Rudolph Giuliani (11/04/19); the iCloud account of Victoria Toensing (11/04/19); an email account believed to belong to former Prosecutor General of Ukraine, Yuriy Lutsenko (11/6/19); an e-mail account believed to belong to the former head of the Ukrainian Fiscal Service, Roman Nasirov (12/10/19); the e-mail account of Victoria Toensing (12/13/19); the iPhone and iPad of pro-Trump Ukrainian businessman Alexander Levin (02/28/2020 and 3/02/2020); an iCloud account believed to belong to Roman Nasirov (03/03/2020); historical and prospective cell site information related to Rudolph Giuliani and Victoria Toensing (04/13/2021); electronic devices of Rudolph Giuliani and Giuliani Partners LLC (04/21/2021); and the iPhone of Victoria Toensing.

Several of these people were named in a July 2019 OCCRP story on Parnas and Fruman that the whistleblower included in his complaint against Trump. Which is to say, this is the investigation we would have gotten had DOJ not worked so hard to protect Rudy and, through him, Trump, back in 2019.

Fertile Ground: Lack of Broadband and Disinformation Proliferation

/118 Comments/in , , , , /by

Focusing on infrastructure this week, The Verge published an article Monday about broadband distribution in the U.S., providing a tidy map denoting which counties are not adequately served by high-speed internet.

Do you see what I see? Because it looks really familiar, kind of like this somewhat more granular map published in USAToday:

There are exceptions to my theory, but on the face of it there’s a correlation in most states between broadband access and so-called conservative voters.

Look at these two excerpts side by side:

There may be another corollary, at least in Michigan: the areas with crappy to nonexistent broadband are the ones which were hardest hit by the third wave COVID because there are more anti-mask, anti-lockdown, ‘COVID’s a hoax’ residents on average. Here’s NYT’s national map of COVID hot spots from April 9 (sorry, I didn’t get a zoomed-in image of WI-MI at that time):

Wisconsin is not as obvious a challenge in this map but the lack of broadband and red voters correlates to COVID hot spot region in north Texas.

This map, published by State of Michigan a few weeks earlier into Michigan’s third wave COVID cases, also shows the correlation:

While there are some exceptions like Marquette and Keweenaw Counties (both of which may have been affected by student and faculty populations in state universities) in the Upper Peninsula, the hot spots tracked from March into May the areas with low broadband and red voters.

Do note the one small outlier county near the middle of Wisconsin — that’s Menominee County, which voted blue but has crappy broadband. It’s the least populated of all counties in the state but its roughly 4550 residents are more than 87% Native American. Which means there’s not enough profit for broadband providers, and no ethics or adequate legislation at either state or federal level obligating coverage.

This week’s map of vaccination uptake in Michigan as published by Mlive shows the effect of anti-vaxx disinformation. In spite of horrific case counts, hospitalizations, and deaths in the low broadband Trump-voting areas, vaccine uptake has been slow.

Note the yellow county at the right of the map along Lake Huron; this is in MI-10, an area so pro-Trump that its previous congressional representative retired rather than run for re-election. Also not served adequately by broadband. (Also ripe for manipulation by outside parties like banking and real estate investors; it’s through this county that the new pipeline for water from Lake Huron to Flint was run at considerable expense and time, in spite of the proximity to Saginaw’s water system to the north and Detroit’s to the south.)

Another layer to this onion is the lack of print news media, shown on this Knight Foundation national map:

While that Trump-voting Michigan county of Sanilac on Lake Huron has print media, there’s a correlation between other counties without adequate broadband and low vaccine uptake.

I can’t find a decent map showing broadcast TV and radio coverage but some of the same problematic counties are underserved — most definitely in Michigan’s Upper Peninsula and the upper portion of Wisconsin. There are concerns about how much of the state is served by Sinclair-owned television stations; they’re not as bad as Fox, but Sinclair owns far too much opportunity to push right-wing friendly content over publicly-owned airwaves.

Granted, there are some additional factors which shape the ideology espoused by persons who are slow to accept vaccination and reject masks. Some of these counties are extremely non-diverse, by which I mean more than 96% non-Hispanic white. Some are more than 55% male.

At least one of the counties in Michigan’s UP leans the other way because its population is older. Ontonagon County’s median age is 52.7 years while Sanilac’s median age is 43.

All of this is to say that the lack of broadband infrastructure serving Americans uniformly leaves them prey to disinformation about existential matters. If they aren’t getting information from a variety of media served up by broadband, AND they don’t have ready access to print media, AND they are likely underserved by broadcasters, they are ripe for whatever media is easiest to access including Facebook and other social media platforms on their cell phones.

~ ~ ~

Now here’s where it gets personal.

I have a family member who lives in a broadband desert, in a Trump-voting rural county. I thought of them immediately when Marcy wrote Radicalized by Trump: A Tale of Two Assault Defendants last week. This family member has written some things my kids won’t share with me (I’m not on Facebook and they are) because what this person has shared is so Trumpy and Qultish.

One of the two defendants Marcy wrote about blamed “Foxitis” for their radicalization. This isn’t the case for this family member because they live in a broadband desert. They may get digital broadcast but this means they aren’t exposed to Fox programming on cable. They don’t have cable, DSL, or wireless internet, only the data they purchase with their cell phone service.

This family member isn’t getting the newspaper, either; they’re not stupid but they’ve never been much of a reader.

Whatever is rotting their brain is coming through their phone, and my kids already know Facebook is one of the social media outlets this family member uses.

Fortunately this same family member isn’t prone to activism and has enough demands on their personal time that they aren’t likely to take off and go to rallies with other Trumpers and Qultists.

But we’re still looking at someone who views any messaging from the state government under Governor Whitmer and the federal government under President Biden with great suspicion and skepticism, to the point where they may resist measures intended to protect them, their family, and their community. The only information they’re getting about either state or federal government is through the filter of their limited social media.

I’m afraid this person’s mind won’t change until they have access to a lot more information from a much broader range of sources. Until they have cheap and easily accessible broadband, they’re going to be lost to disinformation and at continued risk.

This is bad enough — a family member who lives a couple hours away who I’ll have to write off as inaccessible for the near term because they have been poisoned by disinfo.

But this disinfo poisoning managed to affect my household directly.

Friends who are in agriculture suggested purchasing a side of beef soon as they expect meat prices to go up over the next few months. They recommended a processor in one of the counties which was hit hard by the third wave — a processor from whom we haven’t purchased before.

I suggested to my spouse that we try a processor up north who we’ve used in the past. They live in a very rural county which has fared a little better, and we’ve always liked their service.

When my spouse looked into placing an order, he was told they’d just lost two personnel who died of COVID and orders were backlogged.

How the heck do people who process meat for a country store in a county of less than 15,000 people end up dead of COVID?

What else may be hurting, possibly killing these people for lack of adequate, rational information?

I can’t be certain of anything except for not buying my beef there any time soon, and that country store’s location in a county indicated by blue denoting a lack of broadband.

DOJ’s Failures to Follow Media Guidelines on the WaPo Seizure

/30 Comments/in , , /by

I wanted to add a few data points regarding the report that DOJ subpoenaed records from three WaPo journalists.

This post is premised on three pieces of well-justified speculation: that John Durham, after having been appointed Special Counsel, obtained these records, that Microsoft challenged a gag, and that Microsoft’s challenge was upheld in some way. I’m doing this post to lay out some questions that others should be asking about what happened.

An enterprise host (probably Microsoft) likely challenged a gag order

The report notes that DOJ did obtain the reporters’ phone records, and tried, but did not succeed, in obtaining their email records.

The Trump Justice Department secretly obtained Washington Post journalists’ phone records and tried to obtain their email records over reporting they did in the early months of the Trump administration on Russia’s role in the 2016 election, according to government letters and officials.

In three separate letters dated May 3 and addressed to Post reporters Ellen Nakashima and Greg Miller, and former Post reporter Adam Entous, the Justice Department wrote they were “hereby notified that pursuant to legal process the United States Department of Justice received toll records associated with the following telephone numbers for the period from April 15, 2017 to July 31, 2017.” The letters listed work, home or cellphone numbers covering that three-and-a-half-month period.

[snip]

The letters to the three reporters also noted that prosecutors got a court order to obtain “non content communication records” for the reporters’ work email accounts, but did not obtain such records. The email records sought would have indicated who emailed whom and when, but would not have included the contents of the emails. [my emphasis]

What likely happened is that DOJ tried to obtain a subpoena on Microsoft or Google (almost certainly the former, because the latter doesn’t care about privacy) as the enterprise host for the newspaper’s email service, and someone challenged or refused a request for a gag, which led DOJ to withdraw the request.

There’s important background to this.

Up until October 2017, when the government served a subpoena on a cloud company that hosts records for another, the cloud company was often gagged indefinitely from telling the companies whose email (or files) it hosted. By going to a cloud company, the government was effectively taking away businesses’ ability to challenge subpoenas themselves, which posed a problem for Microsoft’s ability to convince businesses to move everything to their cloud.

That’s actually how Robert Mueller obtained Michael Cohen’s Trump Organization emails — by first preserving, then obtaining them from Microsoft rather than asking Trump Organization (which was, at the same time, withholding the most damning materials when asked for the same materials by Congress). Given what we know about Trump Organization’s incomplete response to Congress, we can be certain that had Mueller gone to Trump Organization, he might never have learned about the Trump Tower Moscow deal.

In October 2017, in conjunction with a lawsuit settlement, Microsoft forced DOJ to adopt a new policy that gave it the right to inform customers when DOJ came to them for emails unless DOJ had a really good reason to prevent Microsoft from telling their enterprise customer.

Today marks another important step in ensuring that people’s privacy rights are protected when they store their personal information in the cloud. In response to concerns that Microsoft raised in a lawsuit we brought against the U.S. government in April 2016, and after months advocating for the United States Department of Justice to change its practices, the Department of Justice (DOJ) today established a new policy to address these issues. This new policy limits the overused practice of requiring providers to stay silent when the government accesses personal data stored in the cloud. It helps ensure that secrecy orders are used only when necessary and for defined periods of time. This is an important step for both privacy and free expression. It is an unequivocal win for our customers, and we’re pleased the DOJ has taken these steps to protect the constitutional rights of all Americans.

Until now, the government routinely sought and obtained orders requiring email providers to not tell our customers when the government takes their personal email or records. Sometimes these orders don’t include a fixed end date, effectively prohibiting us forever from telling our customers that the government has obtained their data.

[snip]

Until today, vague legal standards have allowed the government to get indefinite secrecy orders routinely, regardless of whether they were even based on the specifics of the investigation at hand. That will no longer be true. The binding policy issued today by the Deputy U.S. Attorney General should diminish the number of orders that have a secrecy order attached, end the practice of indefinite secrecy orders, and make sure that every application for a secrecy order is carefully and specifically tailored to the facts in the case.

Rod Rosenstein, then overseeing the Mueller investigation, approved the new policy on October 19, 2017.

The effect was clear. When various entities at DOJ wanted records from Trump Organization after that, DOJ did not approve the equivalent request approved just months earlier.

If DOJ withdrew a subpoena rather than have it disclosed, it was probably inconsistent with media guidelines

If I’m right that DOJ asked Microsoft for the reporters’ email records, but then withdrew the request rather than have Microsoft disclose the subpoena to WaPo, then the request itself likely violated DOJ’s media guidelines — at least as they were rewritten in 2015 after a series of similar incidents, including DOJ’s request for the phone records of 20 AP journalists in 2013.

DOJ’s media guidelines require the following:

  • Attorney General approval of any subpoena for call or email records
  • That the information be essential to the investigation
  • DOJ has taken reasonable attempts to obtain the information from alternate sources

Most importantly, DOJ’s media guidelines require notice and negotiation with the affected journalist, unless the Attorney General determines that doing so would “pose a clear and substantial threat to the integrity of the investigation.”

after negotiations with the affected member of the news media have been pursued and appropriate notice to the affected member of the news media has been provided, unless the Attorney General determines that, for compelling reasons, such negotiations or notice would pose a clear and substantial threat to the integrity of the investigation, risk grave harm to national security, or present an imminent risk of death or serious bodily harm.

But a judge can review the justifications for gags before issuing them (for all subpoenas, not just media ones).

Just as an example, the government obtained a gag on Twitter, Facebook, Instagram and Google when obtaining Reality Winner’s cloud-based communications a week after they had arrested her (at a time when she was in no position to delete her own content). After a few weeks, Twitter challenged the gag. A judge gave DOJ 180 days to sustain the gag, but in August 2017, DOJ lifted it.

That was a case where DOJ obtained the communications of an accused leaker, with possible unknown co-conspirators, so the gag at least made some sense.

Here, by contrast, the government would have been asking for records from journalists who were not alleged to have committed any crime. The ultimate subject of the investigation would have no ability to destroy WaPo’s records. The records — and the investigation — were over three years old. Whatever justification DOJ gave was likely obviously bullshit.

Hypothetical scenario: DOJ obtains cell phone records only to have a judge rule a gag inappropriate

Let me lay out how this might have worked to show why this might mean DOJ violated the media guidelines. Here’s one possible scenario for what could have happened:

  • In the wake of the election, John Durham subpoenaed the WaPo cell providers and Microsoft, asking for a gag
  • The cell provider turned over the records with no questions — neither AT&T nor Verizon care about their clients’ privacy
  • Microsoft challenged the gag and in response, a judge ruled against DOJ’s gag, meaning Microsoft would have been able to inform WaPo

That would mean that after DOJ, internally — Billy Barr and John Durham, in this speculative scenario — decided that warning journalists would create the same media stink we’re seeing today and make the records request untenable, a judge ruled that that a media stink over an investigation into a 3-year old leak wasn’t a good enough reason for a gag. If this happened, it would mean some judge ruled that Barr and Durham (if Durham is the one who made the request) invented a grave risk to the integrity of their investigation that a judge subsequently found implausible.

It would mean the request itself was dubious, to say nothing of the gag.

Once again, DOJ failed to meet its own notice requirements

And with respect to the gag, this request broke another one of the rules on obtaining records from reporters: that they get notice no later than 90 days after the subpoena. The Justice Manual says this about journalists whose records are seized:

  • Except as provided in 28 C.F.R. 50.10(e)(1), when the Attorney General has authorized the use of a subpoena, court order, or warrant to obtain from a third party communications records or business records of a member of the news media, the affected member of the news media shall be given reasonable and timely notice of the Attorney General’s determination before the use of the subpoena, court order, or warrant, unless the Attorney General determines that, for compelling reasons, such notice would pose a clear and substantial threat to the integrity of the investigation, risk grave harm to national security, or present an imminent risk of death or serious bodily harm. 28 C.F.R. 50.10(e)(2). The mere possibility that notice to the affected member of the news media, and potential judicial review, might delay the investigation is not, on its own, a compelling reason to delay notice. Id.
  • When the Attorney General has authorized the use of a subpoena, court order, or warrant to obtain communications records or business records of a member of the news media, and the affected member of the news media has not been given notice, pursuant to 28 C.F.R. 50.10(e)(2), of the Attorney General’s determination before the use of the subpoena, court order, or warrant, the United States Attorney or Assistant Attorney General responsible for the matter shall provide to the affected member of the news media notice of the subpoena, court order, or warrant as soon as it is determined that such notice will no longer pose a clear and substantial threat to the integrity of the investigation, risk grave harm to national security, or present an imminent risk of death or serious bodily harm. 28 C.F.R. 50.10(e)(3). In any event, such notice shall occur within 45 days of the government’s receipt of any return made pursuant to the subpoena, court order, or warrant, except that the Attorney General may authorize delay of notice for an additional 45 days if he or she determines that for compelling reasons, such notice would pose a clear and substantial threat to the integrity of the investigation, risk grave harm to national security, or present an imminent risk of death or serious bodily harm. Id. No further delays may be sought beyond the 90‐day period. Id. [emphasis original]

Journalists are supposed to get notice if their records are seized. They’re supposed to get notice no later than 90 days after the records were obtained. AT&T and Verizon would have provided records almost immediately and this happened in 2020, meaning the notice should have come by the end of March. But WaPo didn’t get notice until after Lisa Monaco was confirmed as Deputy Attorney General and, even then, it took several weeks.

DOJ’s silence about an Office of Public Affairs review

While it’s not required by guidelines, in general DOJ has involved the Office of Public Affairs in such matters, so someone who has to deal with the press can tell the Attorney General and the prosecutor that their balance of journalist equities is out of whack. At the time, this would have been Kerri Kupec, who was always instrumental in Billy Barr’s obstruction and politicization.

But it’s not clear whether that happened. I asked Acting Director of OPA Marc Raimondi (the guy who has defended what happened in the press; he was in National Security Division at the time of the request), twice, whether someone from OPA was involved. Both times he ignored my question.

The history of Special Counsels accessing sensitive records and testimony

There’s a history of DOJ obtaining things under Special Counsels they might not have obtained without the Special Counsel:

  • Pat Fitzgerald coerced multiple reporters’ testimony, going so far as to jail Judy Miller, in 2004
  • Robert Mueller obtained Michael Cohen’s records from Microsoft rather than Trump Organization
  • This case probably represents John Durham, having been made Special Counsel, obtaining records that DOJ did not obtain in 2017

There’s an irony here: Durham has long sought ways to incriminate Jim Comey, who is represented by Pat Fitzgerald and others. In 2004, as Acting Attorney General, Comey approved the subpoenas for Miller and others. That said, given the time frame on the records request, it is highly unlikely that he’s the target of this request.

Whoever sought these records, it is virtually certain that the prosecutor only obtained them after making decisions that DOJ chose not to make when these leaks were first investigated in 2017, after Jeff Sessions announced a war on media leaks in the wake of having his hidden meeting with Sergey Kislyak exposed.

That suggests that DOJ decided these records, and the investigation itself, were more important in 2020 than Jeff Sessions had considered them in 2017, when his behavior was probably one of the things disclosed in the leak.

The dubious claim that these records could have been necessary or uniquely valuable

Finally, consider one more detail of DOJ’s decision to obtain these records: their claims, necessary under the media policy, that 3-year old phone and email records were necessary to a leak investigation.

When these leaks were first investigated in 2017, DOJ undoubtedly identified everyone who had access to the Kislyak intercepts and used available means — including reviewing the government call records of the potential sources — to try to find the leakers. If they had a solid lead on someone who might be the leaker, the government would have obtained the person’s private communication records as well, as DOJ did do during the contemporaneous investigation into the leak of the Carter Page FISA warrant that ultimately led to SSCI security official James Wolfe’s prosecution.

Jeff Sessions had literally declared war within days of one of the likely leaks under investigation here, and would approve a long-term records request from Ali Watkins in the Wolfe investigation and a WhatsApp Pen Register implicating Jason Leopold in the Natalie Edwards case. After Bill Barr came in, he approved the use of a Title III wiretap to record calls involving journalists in the Henry Frese case.

For the two and a half years between the time Sessions first declared war on leaks and the time DOJ decided these records were critical to an investigation, DOJ had not previously considered them necessary, even at a time when Sessions was approving pretty aggressive tactics against leaks.

Worse still, DOJ would have had to claim they might be useful. These records, unlike the coerced testimony of Judy Miller, would not have revealed an actual source for the stories. These records, unlike the Michael Cohen records obtained via Microsoft would not be direct evidence of a crime.

All they would be would be leads — a list of all the phone numbers and email addresses these journalists communicated with via WaPo email or telephony calls or texts — for the period in question. It might return records of people (such as Andy McCabe) who could be sources but also had legal authority to communicate with journalists. It would probably return a bunch of records of inquiries the journalists made that were never returned. It would undoubtedly return records of people who were sources for other stories.

But it would return nothing for other means of communication, such as Signal texts or calls.

In other words, the most likely outcome from this request is that it would have a grave impact on the reporting equities of the journalists involved, with no certainty it would help in the investigation (and an equally high likelihood of returning a false positive, someone who was contacted but didn’t return the call).

And if it was Durham who made the request, he would have done so after having chased a series of claims — many of them outright conspiracy theories — around the globe, only to have all of those theories to come up empty. Given that after years of investigation Durham has literally found nothing new, there’s no reason to believe he had any new basis to think he could solve this leak investigation after DOJ had tried but failed in 2017. Likely, what made the difference is that his previous efforts to substantiate something had failed, and Barr needed to empower him to keep looking to placate Trump, and so Durham got to seize WaPo’s records.

Billy Barr has been hiding other legal process against journalists

Given the disclosure that Barr approved a request targeting the WaPo about five months ago and that under Barr DOJ used a Title III wiretap in a leak investigation (albeit targeting the known leaker), it’s worth noting one other piece of oversight that has lapsed under Barr.

In the wake of Jeff Sessions declaring war on leaks in 2017 (and, probably, the leak in question here), Ron Wyden asked Jeff Sessions whether the war on leaks reflected a change in the new media guidelines adopted in 2015.

Wyden asked Sessions to answer the following questions by November 10:

  1. For each of the past five years, how many times has DOJ used subpoenas, search warrants, national security letters, or any other form of legal process authorized by a court to target members of the news media in the United States and American journalists abroad to seek their (a) communications records, (b) geo-location information, or (c) the content of their communications? Please provide statistics for each form of legal process.
  2. Has DOJ revised the 2015 regulations, or made any other changes to internal procedures governing investigations of journalists since January 20, 2017? If yes, please provide me with a copy.

In response, DOJ started doing a summary of the use of legal process against journalists for each calendar year. For example, the 2016 report described the legal process used against Malheur propagandist Pete Santilli. The 2017 report shows that, in the year of my substantive interview with FBI, DOJ obtained approval for a voluntary interview with a journalist before the interview because they, “suspected the journalist may have committed an offense in the course of newsgathering activities” (while I have no idea if this is my interview, during the interview, the lead FBI agent also claimed to know the subject of a surveillance-related story I was working on that was unrelated to the subject of the interview, though neither he nor I disclosed what the story was about). The 2017 report also describes obtaining Ali Watkins’ phone records and DOJ’s belated notice to her. The 2018 report describes getting retroactive approval for the arrest of someone for harassing Ryan Zinke but who claimed to be media (I assume that precedent will be important for the many January 6 defendants who claimed to be media).

While I am virtually certain the reports — at least the 2018 one — are not comprehensive, the reports nevertheless are useful guidelines for the kinds of decision DOJ deems reasonable in a given year.

But as far as anyone knows, DOJ stopped issuing them under Barr. Indeed, when I asked Raimondi about them, he didn’t know they existed (he is checking if they were issued for 2019 and 2020).

So we don’t know what other investigative tactics Barr approved as Attorney General, even though we should.

Four Ways Billy Barr Obstructed the Investigation into Rudy Giuliani

/29 Comments/in , /by

Eventually, I want to do a post quantifying all the damage to national security Billy Barr did by thwarting an influence-peddling investigation into Rudy Giuliani in 2019. But first, I want to quantify four ways that Barr is known to have obstructed the investigation into Rudy, effectively stalling the investigation for over 500 days.

The effort is helped by Rudy lawyer Robert Costello’s public claim that DOJ obtained a search warrant on Rudy’s iCloud account sometime in late 2019. That indicates that the investigation into Rudy’s ties to Lev Parnas and Igor Fruman (whether Rudy was the primary target or their business, Fraud Guarantee) already showed probable cause that a crime had been committed before Barr took repeated steps to undermine the investigation.

Fail to recuse from an investigation implicating Barr personally

The MEMCON of Donald Trump’s call with Volodymyr Zelenskyy invoked Barr personally, twice, including in the very same response where the President said that Marie Yovanovich would “go through some things.”

Well, she’s going to go through some things. I will have Mr. Giuliani give you a call and I am also going to have.Attorney General Barr call and we will get to the bottom of it.

According to a September 2019 NYT article, National Security Division head John Demers (who remains at DOJ and who oversees the FARA unit that would have a role in this prosecution), Deputy Attorney General Jeffrey Rosen, and Brian Benczkowski learned about the concerns about the call, including that it named Barr, even before the formal whistleblower complaint came in. Barr learned about it via some unexplained means.

It’s not clear what happened in that first round of review, but ultimately prosecutors reviewed it once the formal whistleblower complaint was referred by Joseph Maguire later in August and “declined to open an investigation.”

Mr. Eisenberg and Ms. Elwood both spoke on Aug. 14 to John Demers, the head of the Justice Department’s national security division, according to three people familiar with the discussion. Ms. Elwood did not pass on the name of the C.I.A. officer, which she did not know because his concerns were submitted anonymously.

The next day, Mr. Demers went to the White House to read the transcript of the call and assess whether to alert other senior law enforcement officials. The deputy attorney general, Jeffrey A. Rosen, and Brian A. Benczkowski, the head of the department’s criminal division, were soon looped in, according to two administration officials.

Department officials began to discuss the accusations and whether and how to follow up, and Attorney General William P. Barr learned of the allegations around that time, according to a person familiar with the matter. Although Mr. Barr was briefed, he did not oversee the discussions about how to proceed, the person said.

[snip]

At the end of August, the office of the director of national intelligence referred the allegations to the Justice Department as a possible criminal matter. Law enforcement officials ultimately declined to open an investigation.

While it’s true that Barr outsourced some actions — such as determining what to do with the first report and the White House request that DOJ publicly exonerate him — there’s no indication Barr recused from the investigation and indeed he remained in the loop with the White House about it. His failure to recuse is particularly important because, as the table above notes, he got briefed on the investigation into Parnas and Fruman not long after he was confirmed in February 2019. For most of August and September 2019, Barr and Jeffrey Rosen would have been two of the only people at DOJ who would recognize the danger the whistleblower complaint posed to Rudy and, through him, to Trump himself.

Ensure Public Integrity reviews only the Trump transcript, not the entire whistleblower complaint

Mind you, Barr didn’t conduct the investigation of the whistleblower complaint. Public Integrity prosecutors in the Criminal Division did, overseen by Brian Benczkowski.

According to an October 2019 report, Benczkowski still did not know of the investigation into Parnas and Fruman when he took a meeting with Rudy in the fall to discuss a bribery case implicating the Venezuelan who was paying for some of the Ukraine dirt-digging.

Several weeks ago, Brian A. Benczkowski, the head of the Justice Department’s Criminal Division, and lawyers from the division’s Fraud Section met with Mr. Giuliani to discuss a bribery case in which he and other attorneys were representing the defendants.

That meeting took place before the United States attorney’s office in Manhattan publicly charged the two Giuliani associates, Lev Parnas and Igor Fruman, with breaking campaign finance laws and trying to unlawfully influence politicians, including former Representative Pete Sessions, Republican of Texas. Mr. Parnas and Mr. Fruman were part of Mr. Giuliani’s effort to push Ukraine for an inquiry into Democrats.

“When Mr. Benczkowski and fraud section lawyers met with Mr. Giuliani, they were not aware of any investigation of Mr. Giuliani’s associates in the Southern District of New York and would not have met with him had they known,” said Peter Carr, a department spokesman.

[snip]

Prosecutors in Manhattan informed Attorney General William P. Barr about the investigation of Mr. Parnas and Mr. Fruman soon after he was confirmed in February, according to a Justice Department official. They were required to do so under the department’s rule that requires prosecutors to notify the attorney general of any cases that could generate national news media or congressional attention.

When Mr. Giuliani and other lawyers requested the meeting with the Justice Department to discuss a foreign bribery case, Mr. Benczkowski and the lawyers in the Fraud Section had not been informed of the Manhattan case and agreed to meet.

That exonerates him for being stupid enough to take the meeting, but it reveals something about the review of the complaint: it could not have adhered to the most basic rules of “connect-the-dots” investigations put in place after 9/11 to protect national security.

That’s because the first thing you’re supposed to do when you get a tip that implicates national security is to search DOJ’s holdings to see if the tip connects with any known suspects or investigations. Had this tip been treated like DOJ had been drilling for almost 17 years by the time the tip was received, then investigators would have searched on the OCCRP profile of Parnas and Fruman cited repeatedly in the full complaint.

Had that happened, then the implications of it would have been clear, it would have been referred to SDNY, Benczkowski would have learned about it, and DOJ wouldn’t have been making public exonerations of Trump.

Get OLC to overclassify the Barr connection and delay informing Congress

One likely way DOJ managed to avoid connecting Trump’s quid pro quo with the existing investigation of Parnas and Fruman is by treating the call with Zelenskyy, falsely, as the entirety of the whistleblower complaint. There’s no reference to Parnas and Fruman in the call, and so searching on it would not ID the tie to the SDNY investigation.

That’s one of several things that Steve Engel’s OLC did to attempt to avoid — and succeed in delaying — informing Congress about the complaint.

Engel’s OLC memo (a reprise of the memo that Amy Berman Jackson ruled was just a PR stunt to justify lying to Congress) claimed that the whistleblower complaint pertained exclusively to the conduct of the President and as such did not pertain to the Intelligence Community and so didn’t need to be shared with Congress. The only way to reach this decision would be to ignore the parts of the whistleblower complaint that deal with abuse of classification and the withholding of funds.

The other thing OLC did was to — at first– treat mentions of Barr and Rudy, as well as Ukraine and Zelenskyy, as Top Secret, even though the White House had only deemed those references to be Secret.

This effort, both to avoid informing the Intelligence Committees and, once he did, to hide key details from them, ultimately failed. But it did delay the discovery of the call from August to September 2019.

Warn Rupert Murdoch

Bill Barr had a meeting at SDNY the day before Parnas and Fruman were arrested on October 9. He went from there to a meeting with Rupert Murdoch, at Murdoch’s home.

It’s unclear what happened at that meeting, but Sean Hannity didn’t get on his flight to Vienna to meet with Dmitro Firtash, thereby avoiding even closer legal involvement in yet another Trump scandal.

There’s no evidence I know of that Barr similarly warned Rudy — Rudy canceled his trip, too, but it probably only took the arrest of Parnas and Fruman to persuade him of the wisdom of doing that. So I don’t consider this an act of obstruction protecting Rudy — just an act of obstruction protecting Sean Hannity.

Parnas has alleged that he was only arrested as a way to keep him silent about all this. While there’s a lot of reason to believe that’s possible, I’m not aware of proof that it did. It is, notably, one thing he was dangling his cooperation on with SDNY before he got remarkably quiet as the investigation into Rudy kicked into active mode.

Attempt to replace Geoffrey Berman with a Barr flunky

As noted, if we can believe Costello, then at some point SDNY did manage to conduct a search on Rudy’s iCloud. One possibility is that DOJ justified a search on Rudy after learning that Parnas had deleted his own iCloud account.

We may get more details of how that occurred with the Special Master argument.

For a time, the impeachment investigation presumably stalled any investigation into Rudy.

But last summer, at a time between the time when Rudy would have been implicated in the President’s Ukraine-related impeachment but before the time Rudy was attempting to undermine the election in explicit service of the President, Barr fired Geoffrey Berman. As Berman described, Barr attempted to bypass succession rules to temporarily put his own flunky in charge of the office, much as he had put Timothy Shea in at DC USA to kill investigations into Roger Stone, Mike Flynn, and (probably) Erik Prince.

By refusing to go along with Barr’s false claims that he had quit, however, Berman succeeded in ensuring that Audry Strauss, his then-Deputy, would replace him, where she remains today.

In all of Berman’s communications about why he dug in, he emphasized that there were investigations he wanted to see to completion, presumably including but not limited to this Rudy investigation.

Again, this effort failed. But, given what happened in DC, it is almost certain that this was an attempt to protect Rudy (and Steve Bannon).

DOJ used the election to refuse to approve a warrant on Rudy. And (while I’m having difficulty finding it) they imposed a policy requiring higher approvals for obtaining warrants on attorney content.

Effectively, that provided a way to stall the search into Rudy until April 20, 2021, when Lisa Monaco was approved.

Bill Barr tried, repeatedly, to entirely kill the investigation into Rudy, like he killed prosecutions of Stone and Flynn. But ultimately, one after another DOJ professional thwarted his attempts, and his abundant efforts to protect Rudy only managed to delay the investigation from October 2019 to April 2021.

Update: William Ockham notes that the change in policy was imposed on December 30, 2020, after Barr had resigned and at a time when Acting Attorney General Jeffrey Rosen knew that Joe Biden would take over DOJ. The new policy required consultation with a designated attorney in Office of Deputy Attorney General.

Within OEO, the Policy and Statutory Enforcement Unit (PSEU) is the section that provides this consultation. See Office ofthe Deputy Attorney General Guidance on AttorneyClient Privilege andAttorney Work Product Filter Protocols/or Search Warrants (July 2020). In many cases – particularly those involving significant investigations and high-profile matters – proposed searches are separately reported in urgent reports to the Attorney General and the Deputy Attorney General. To ensure mo!”e uniform notification procedures going forward, PSEU should notify the Office of the Deputy Attorney General (ODAG) of proposed searches involving subject attorneys. ODAG will assign an attorney to handle this responsibility who has the requisite knowledge and experience to provide meaningful input to PSEU. That attorney will provide updates to the Deputy Attorney General as necessary. Absent exigent circumstances, the OEO/PSEU consultation in Section 9-13.420 shall not be concluded until after ODAG has been notified and provided with an opportunity to provide input.

While probably not the sole intent, this may be why the search on Rudy was not approved until Lisa Monaco was confirmed on April 20.

DOJ Got All the Proud Boy Telegram Texts from Ethan Nordean’s Phone

/31 Comments/in , /by

Judge Tim Kelly just wrapped up a status hearing with three of the four Leadership Proud Boy conspiracy defendants: Ethan Nordean, Joe Biggs, and Charles Donohoe (Zach Rehl’s attorney is still arranging her appearance before the DC court).

A really important detail came out about the Telegram texts that have been central to the conspiracy case against the defendants: According to Nordean’s attorney Nick Smith, they call came from Nordean’s phone.

He said that, in part, to anticipate some of the challenges he’ll make to the evidence. First, he’s going to claim the search was illegal and move to suppress it based off a ruling that the government has dropped that theory of crime (that won’t work under Fourth Amendment precedents, but you have to try).

More importantly, he said the government had gotten into the phone — rather than be forced to crack it, as they are doing with everyone else’s phone — because Nordean’s wife gave the FBI the passcode.

It had seemed like someone listed as Unindicted Co-Conspirator 1 may have shared them with the government. That person says some pretty damning things in the chats.

39. On after Chairman’s January 4, 2021, shortly after Proud Boys Chairman’s arrest pursuant to a warrant issued by D.C. Superior Court, DONOHOE expressed concern that encrypted communications that involved Proud Boys Chairman would be compromised when law enforcement examined Proud Boys Chairmans’ phone. DONOHOE then created a new channel on the encrypted messaging application, entitled, “New MOSD,” and took steps to destroy or “nuke” the earlier channel. After its creation, the “New MOSD” channel included NORDEAN, BIGGS, REHL, DONOHOE, and a handful of additional members.

40. On January 4, 2021, at 7:15 p.m., DONOHOE posted a message on various encrypted messaging channels, including New MOSD, which read, “Hey have been instructed and listen to me real good! There is no planning of any sorts. I need to be put into whatever new thing is created. Everything is compromised and we can be looking at Gang charges.” DONOHOE then wrote, “Stop everything immediately” and then “This comes from the top.”

41. On January 4, 2021, at 8:20 p.m., an unindicted co-conspirator (“UCC-1”) posted to New MOSD channel: “We had originally planned on breaking the guys into teams. Let’s start divying them up and getting baofeng channels picked out.”

42. On January 5, 2021, at 1:23 p.m., a new encrypted messaging channel entitled “Boots on the Ground” was created for communications by Proud Boys members in Washington, D.C. In total, over sixty users participated in the Boots on the Ground channel, including NORDEAN, BIGGS, REHL, DONOHOE, and UCC-1.

That, in turn, had led to speculation, and in no way just from me, that UCC1 had already flipped on his buddies and was cooperating.

What was said today appears to be inconsistent with that. Indeed, it seems all the talk of four informants from the Proud Boys working with the FBI mostly pertained to helping Attorney General Billy Barr gin up claims against Antifa, and not (yet, at least) informing on each other.

Rudy Giuliani’s Going To Go Through Some Things

/133 Comments/in , , /by

The NYT is breaking the news that Rudy Giuliani’s home was searched this morning and his devices seized.

Federal investigators in Manhattan executed a search warrant on Wednesday at the Upper East Side apartment of Rudolph W. Giuliani, the former New York City mayor who became President Donald J. Trump’s personal lawyer, stepping up a criminal investigation into Mr. Giuliani’s dealings in Ukraine, three people with knowledge of the matter said.

One of the people said the investigators had seized Mr. Giuliani’s electronic devices.

The story explains that this arises out of the investigation into Rudy’s foreign influence peddling with Ukraine.

The federal authorities have been largely focused on whether Mr. Giuliani illegally lobbied the Trump administration in 2019 on behalf of Ukrainian officials and oligarchs, who at the same time were helping Mr. Giuliani search for dirt on Mr. Trump’s political rivals, including President Biden, who was then a leading candidate for the Democratic presidential nomination.

The NYT doesn’t mention that several of these Ukrainians have since been sanctioned by Treasury as Russian agents.

But once they get Rudy’s phones, there’s the possibility they’ll find evidence of all Rudy’s other crimes. For example, in January, Rudy was in contact with James Sullivan, who is the brother of accused January 6 insurrectionist John Sullivan and who himself has ties to the Proud Boys.

This is a lot of information exchange (and a good degree of familiarity) with someone so closely tied to an attack on the Capitol.

So who knows? It might all coalesce: Rudy’s work for Russian Agents in Ukraine to undermine democracy, paving the way for a violent attack on the Capitol.

Update: They searched Victoria Toensing’s home too.

F.B.I. agents on Wednesday morning also executed a search warrant at the Washington-area home of Victoria Toensing, a lawyer close to Mr. Giuliani who had dealings with several Ukrainians involved in the effort to find damaging information about the Bidens, according to people with knowledge of that search. Ms. Toensing has represented Dmitry Firtash, a Ukrainian oligarch under indictment in the United States whose help Mr. Giuliani sought.

Update: Fixed the timing of the search. h/t JM.

Avril Haines Committed to Reviewing Past Redactions of Intelligence on Russia’s Support for Trump

/36 Comments/in , , /by

In the wake of the confirmation that Konstantin Kilimnik did, in fact, share campaign data with Russian Intelligence, some people are asking whether Trump withheld information confirming that fact from Mueller or SSCI.

There are other possible explanations. After all, DOJ stated publicly in 2019 they were still working on decrypting communications involving Manafort and Kilimnik. There are likely new sources of information that have become available to the government.

It’s also certain that the government did share some information with SSCI that was not publicly released in its report last year. Indeed, we’re still waiting on information in the SSCI Report that probably will be made public.

Ron Wyden complained about the overclassification of the report when it came out, and — in his typical fashion — provided bread crumbs of what we might learn with further declassification.

(U) The report includes new revelations directly related to the Trump campaign’s cooperation with Russian efforts to get Donald Trump elected. Yet significant information remains redacted. One example among many is the report’s findings with regard to the relationship between Trump campaign manager Paul Manafort and Russian intelligence officer Konstantin Kilimnik.

(U) The report includes significant information demonstrating that Paul Manafort’s support for Russia and pro-Russian factions in Ukraine was deeper than previously known. The report also details extremely troubling information about the extent and nature of Manafort’s connection with Kilimnik and Manafort’s passage of campaign polling data to Kilimnik. Most troubling of all are indications that Kilimnik, and Manafort himself, were connected to Russia’s hack-and-leak operations.

(U) Unfortunately, significant aspects of this story remain hidden from the American public. Information related to Manafort’s interactions with Kilimnik, particularly in April 2016, are the subject of extensive redactions. Evidence connecting Kilimnik to the GRU’s hack-and-leak operations are likewise redacted, as are indications of Manafort’s own connections to those operations. There are redactions to important new information with regard to Manafort’s meeting in Madrid with a representative of Oleg Deripaska. The report also includes extensive information on Deripaska, a proxy for Russian intelligence and an associate of Manafort. Unfortunately, much of that information is redacted as well.

(U) The report is of urgent concern to the American people, in part due to its relevance to the 2020 election and Russia’s ongoing influence activities. The public version of the report details how Kilimnik disseminated propaganda claiming Ukrainian interference in the 2016 election, beginning even before that election and continuing into late 2019. [one sentence redacted] And the report includes information on the role of other Russian government proxies and personas in spreading false narratives about Ukrainian interference in the U.S. election. This propaganda, pushed by a Russian intelligence officer and other Russian proxies, was the basis on which Donald Trump sought to extort the current government of Ukraine into providing assistance to his reelection efforts and was at the center of Trump’s impeachment and Senate trial. That is one of the reasons why the extensive redactions in this section of the report are so deeply problematic. Only when the American people are informed about the role of an adversary in concocting and disseminating disinformation can they make democratic choices free of foreign interference.

Redactions suggest there was more to an April exchange of information between Kilimnik and Manafort involving Oleg Deripaska than has been made public, describing something else that happened almost simultaneously with that exchange. SSCI learned about that even without obtaining information from Manafort’s email server, which Kilimnik was using long after he stopped working for Manafort and which they subpoenaed unsuccessfully, but Mueller did obtain it.

There’s also a very long redacted passage in the more general Additional Views from Democrats on the committee that laid out the significance of the SSCI findings for the 2020 election (ostensibly what yesterday’s sanctions addressed).

Also in typical Wyden fashion, he already took steps to liberate such information as could be released. In his Questions for the Record for both Avril Haines and William Burns, Wyden asked that this information be declassified. He also asked that more information behind Treasury’s sanctions imposed on Andrii Derkach last September be declassified. Haines committed to ordering a new declassification review of both.

QUESTION 150: If confirmed, will you review the Committee’s Report on Russian Active Measures Campaigns and Interference in the 2016 U.S. Election, in particular Volume 5, for additional declassification?

Yes, if confirmed, I will order a review of the Committee’s report to determine whether additional declassification is possible consistent with the need to protect national security.

QUESTION 151: If confirmed, will you review intelligence related to foreign interference in the 2020 U.S. election, including with regard to Russian agents referenced in the Treasury Department’s September 10, 2020, sanctions announcement, for additional declassification and public release?

Yes, if confirmed I will order a review of these materials to determine whether additional declassification is possible consistent with the need to protect national security.

So we should be getting a newly declassified version of the SSCI Report that will reveal what the Trump Administration did share, but buried under redactions.

Which will also reveal what Trump knew about Manafort’s affirmative ties to Russian intelligence when he pardoned Manafort to pay off Manafort’s silence about all that during the Mueller investigation.

Treasury States as Fact that Konstantin Kilimnik Shared Polling Data with Russian Intelligence

/81 Comments/in , , /by

Today, the Biden Administration rolled out a package of new sanctions against Russia. The package includes new authorities, including limitations on doing business with Russia’s Sovereign Debt. It sanctions some companies with ties to Russian intelligence, including for their role in the Solar Winds breach, which is the kind of precedent that may backfire against the US. As Russia expands its military presence in or just outside Ukraine, it imposes sanctions on Russians involved in Crimea. It expands sanctions for disinformation, targeting both Yevgeniy Prigozhin’s fronts and his money laundering vehicles as well as a GRU front.

A number of those measures will be controversial. And the imposition of sanctions on Prigozhin without an accompanying criminal complaint (as happened under Trump) may suggest a change of strategy.

But one of the bigger pieces of news is that the Treasury press release states as fact that Konstantin Kilimnik shared the polling data that Paul Manafort gave to him (or had Rick Gates pass on) with unnamed Russian intelligence.

Konstantin Kilimnik (Kilimnik) is a Russian and Ukrainian political consultant and known Russian Intelligence Services agent implementing influence operations on their behalf. During the 2016 U.S. presidential election campaign, Kilimnik provided the Russian Intelligence Services with sensitive information on polling and campaign strategy. Additionally, Kilimnik sought to promote the narrative that Ukraine, not Russia, had interfered in the 2016 U.S. presidential election. In 2018, Kilimnik was indicted on charges of obstruction of justice and conspiracy to obstruct justice regarding unregistered lobbying work. Kilimnik has also sought to assist designated former President of Ukraine Viktor Yanukovych. At Yanukovych’s direction, Kilimnik sought to institute a plan that would return Yanukovych to power in Ukraine.

Kilimnik was designated pursuant to E.O. 13848 for having engaged in foreign interference in the U.S. 2020 presidential election. Kilimnik was also designated pursuant to E.O. 13660 for acting for or on behalf of Yanukovych. Yanukovych, who is currently hiding in exile in Russia, was designated in 2014 pursuant to E.O. 13660 for his role in violating Ukrainian sovereignty. [my emphasis]

This comes just one month after the Intelligence Community associated Kilimnik with FSB rather than GRU, as had previously been alleged.

This announcement could be particularly interesting for pardoned Trump campaign manager Paul Manafort. As Andrew Weissmann pointed out at the time, Manafort’s pardon only includes the stuff he was convicted of, arguably leaving open the possibility of prosecution even for stuff he admitted but was not convicted of.

But Manafort’s role in feeding Russia information that was useful for their election operation in 2016 was only ever addressed in Manafort’s plea breach hearing. He was never charged for his lies to protect Kilimnik during the period he was supposed to be cooperating. Just as interesting, around the time (in June and August of last year) that FBI was offering $250,000 for information leading to Kilimnik’s arrest and adding him to their Most Wanted list, a lawsuit by media outlets for Manafort’s breach filings died out with no explanation. One possible explanation for that (it’s not the only one) is that DOJ weighed in and said those filings could not be released because of the ongoing investigation that would lead Treasury to have more confidence about what Kilimnik did with that information.

Yes, it’s interesting that the government now seems to have more clarity about what Russian agency Kilimnik worked for and what he did with Trump campaign information. But it may be acutely interesting for Paul Manafort.

Days after an Oath Keeper Event with Roger Stone, Kelly Meggs Described Having “Organized an Alliance” with the Proud Boys

/233 Comments/in , /by

I had been waiting for the moment when DOJ would unveil some of the Facebook content that Graydon Young attempted to delete when he shut down Facebook on January 7. I had similarly been waiting to see how DOJ rolled out Roger Stone as a key pivot between the Florida Oath Keepers (which Kelly Meggs led, and which Stone bodyguards Roberta Minuta and Joshua James were part of) and the Proud Boys (whose key leaders Enrique Tarrio and Joe Biggs live in Florida).

Overnight, in its response to Meggs’ attempt to get bail, the government did both. Ostensibly, they did so to show that Meggs’ interview with the FBI had not been entirely truthful about (among other things) being in DC to protect the cops and vetting Oath Keeper members.

On the first point, yes, Defendant Meggs made a statement to the FBI in the hours following his arrest. But that fact was known at the time of Defendant Meggs’s first detention hearing, and, regardless, simply speaking with law enforcement does not mean that a person is not a danger. This is especially so when some of the statements Defendant Meggs made to the FBI appear to be in conflict with the evidence.

[snip]

This sentiment appears in conflict with Defendant Meggs’s allegation in his motion (and what he stated to the FBI upon his arrest) that he was at the Capitol to help “protect” police officers. (ECF 82 at ¶ 15.)

[snip]

On the evening of January 3, 2021, co-defendant Steele sent an email to Defendant Meggs’s email account at Proton Mail,8 copying co-defendant Young. Steele attached her application and vetting form, and wrote: “My brother, Graydon Young told me to send the application to you so I can be verified for the Events this coming Tuesday and Wednesday.” Defendant Meggs appears to have provided instructions to co-defendant Steele, because the following day (January 4), Steele again sent her application and vetting form to another Oath Keepers email address at Proton Mail. On her email, she copied Defendant Meggs. In contrast to this evidence, Defendant Meggs inexplicably told the FBI that “the only person I’ve ever vetted” was a man six months earlier. Interview Tr. at 28-29.

In a filing that revealed details of Meggs’ Facebook, Signal, ProtonMail, and GoToMeeting use, it described Meggs writing on December 19 — five days after his wife and Young did “security” for Roger Stone at a Stop the Steal rally, evidence of which the government presented (the picture below) in their response to Meggs’ wife’s bid for bond — that he had “organized an alliance between the Oath Keepers, Florida 3%ers, and Proud Boys” to “shut this shit down.”

On December 26, Meggs called this insurrection (albeit in response to Trump’s order) explicitly.

On Christmas, Meggs specifically tied protection, almost certainly of Stone, and coordination with a Proud Boy, almost certainly Tarrio, in the same text.

DOJ included some (not all though: there was one called ““florida dc op planning chat” they don’t seem to have included) of the planning meetings on GoToMeeting.

A week ago, DOJ was content to prove that Connie Meggs’ claims that she didn’t know any of these people by introducing the picture where she and Graydon Young posed with Stone on December 14.

And Defendant Meggs obviously was acquainted with other members of the Oath Keepers group who stormed the Capitol with her on January 6; the photo below, which was shared on Facebook on December 15, 2020, shows Defendant Meggs (red oval) posing at a book signing with several other individuals, including co-defendant Graydon Young (green oval):

Yesterday, prosecutors in this case had to get chewed out because former Acting US Attorney Michael Sherwin blabbed his mouth (completely inappropriately) on 60 Minutes, discussing what at that point had been merely a suggestion, that DOJ’s conspiracy case would integrate three different militia groups.

And the bulk of those cases are federal criminal charges, and significant federal felony charges. Five, 10, 20-year penalties. Of those 400 cases, the majority of those, 80, 85%, maybe even 90, you have individuals, both inside and outside the Capitol, that breached the Capitol, trespassed. You also have individuals, roughly over 100, that we’ve charged with assaulting federal officers and local police officers. The 10% of the cases,  I’ll call the more complex conspiracy cases where we do have evidence, it’s in the public record where individual militia groups from different facets: Oath Keepers, Three Percenters, Proud Boys, did have a plan. We don’t know what the full plan is, to come to D.C., organize, and breach the Capitol in some manner.

By the end of the day (having had their secret blown), DOJ showed that not only had the guy in charge of the Stack been thinking in terms of “insurrection” for over a week, but was also thinking about coordinated action among the different militia.

There’s still a problem with this conspiracy, as constructed. The Oath Keepers had a plan — which DOJ has now presented evidence they coordinated with two other militia groups. But the plan wasn’t limited to preventing vote certification (in part, because when they traveled to DC, they still believed that Trump or Mike Pence might make such an action unnecessary). The plan was insurrection.

But that only makes it more likely DOJ will be forced to charge it as such.

The Three Key Details the Proud Boy Unindicted Co-Conspirator Likely Revealed to Prosecutors

/65 Comments/in , /by

By March 1, the government had three pieces of evidence that form a key part of a conspiracy indictment accusing Ethan Nordean, Joe Biggs, Zachary Rehl, and Charles Donohoe of conspiring to breach the Capitol and by doing so, delaying the certification of the vote:

  • The Proud Boys used Baofeng radios set to a specific channel (which channel prosecutors knew)
  • After Enrique Tarrio’s arrest, Ethan Nordean got put in charge of the January 6 operation
  • The gang had a plan to split up to optimize the chances of success

A detention motion for Nordean submitted on that day included all three of these details. It described how the Proud Boys distributed Baofeng radios to use in the operation.

Arrangements were made to program and distribute multiple Baofeng radios5 for use by Proud Boys members to communicate during the event. Baofeng is a Chinese communications equipment manufacturer. Baofeng radios can be programmed to communicate on more than 1,000 different frequencies, making them far more difficult to monitor or overhear than common “walkie talkie” type radios. Specific radio frequencies were communicated to the Proud Boys.

5 Law enforcement recovered a Baofeng radio from Defendant’s home during the execution of a search warrant—the Baofeng radio recovered from Defendant’s home was still tuned to frequency that had been communicated to the group.

[snip]

The group led by Defendant arrived at the east side of the Capitol before noon. Several of the men in the group were holding Baofeng radios. Others had them clipped to their belts or jackets.

It described how Nordean was put in charge after Tarrio’s arrest.

Moreover, following the arrest of the Proud Boys’ Chairman on January 4, 2021, Defendant was nominated from within to have “war powers” and to take ultimate leadership of the Proud Boys’ activities on January 6, 2021.

[snip]

On January 4, 2021, Henry “Enrique” Tarrio, the self-proclaimed “Chairman” of the Proud Boys was arrested shortly after arriving in Washington, D.C., pursuant to a warrant issued by D.C. Superior Court. In communications between Proud Boys members following Tarrio’s arrest, it was acknowledged that Defendant would be among those that led the Proud Boys on the ground on January 6, 2021.

And it described a decision to split people up in an effort to increase the likelihood of actually shutting down the certification of the vote.

As noted more fully below, Defendant—dressed all in black, wearing a tactical vest—led the Proud Boys through the use of encrypted communications and military-style equipment, and he led them with the specific plans to: split up into groups, attempt to break into the Capitol building from as many different points as possible, and prevent the Joint Session of Congress from Certifying the Electoral College results.

[snip]

In order to increase the odds that their plan would succeed, Defendant and those Proud Boys following him dressed “incognito” and spread out to many different locations from which they could force entry into the Capitol. Defendant and others responsible for the January 6 Proud Boys event likely knew from experience that their typical tactic of marching in “uniform,” and in unison, would draw a concentrated law enforcement response to their location. By blending in and spreading out, Defendant and those following him on January 6 made it more likely that either a Proud Boy—or a suitably-inspired “normie”—would be able to storm the Capitol and its ground in such a way that would interrupt the Certification of the Electoral College vote

Even after prosecutors shared these damning claims, their bid to keep Nordean in jail failed. Nordean’s wife filed a declaration stating in part that Nordean obtained the radio on January 7 and, to her knowledge, he did not possess such a radio before that date.

An indictment against Nordean obtained on March 3 to comply with the Speedy Trial Act (but not released publicly until after the detention hearing) mentioned none of that.

And at the March 3 detention hearing before Beryl Howell, according to Zoe Tillman, the government withdrew the claim that Nordean had the Proud Boys split into groups as a factor for that detention hearing. In what the WaPo described as, “a remarkable stumble for prosecutors,”Judge Howell released Nordean to home detention, saying there was little evidence that Nordean played that leadership role.

Nordean “was a leader of a march to the Capitol. But once he got there it is not clear what leadership role this individual took at all for the people who went inside,” Howell said. “Evidence that he directed other defendants to break into or enter the Capitol is weak, to say the least.”

Nordean’s release marked a stumble for prosecutors, who have cast him as a key figure based on what Howell agreed were “ominous” communications before Jan. 6 that they said indicated he and other Proud Boys were planning “violent action” to overwhelm police and force entry to the Capitol. The judge’s decision sets back for now the government’s efforts to establish that there was a wider plot to that end.

[snip]

“The government has backed down from saying that he directly told them to split into groups and that they had this strategic plan,” Howell remarked.

Howell said that although Nordean’s release was a “close call,” she agreed with the defense that “there’s no allegation that the defendant caused injury to any person, or that he even personally caused damage to any particular property.”

Prosecutors claimed they had this evidence on March 1. But after failing to present it at that March 3 hearing, Nordean got released.

On March 15, the judge assigned to the case after Nordean got indicted, Timothy Kelly, issued an order delaying the arraignment scheduled for the next day. He offered no explanation.

What didn’t become clear until this week is that, on March 10, the government obtained the superseding indictment against Nordean and others. And then, on March 12, the government asked Judge Kelly to delay Nordean’s arraignment on his original indictment because of the superseding indictment. Prosecutors explained that revealing the indictment ahead of time would risk alerting Rehl and Donohoe before they could be arrested and their houses searched.

On March 10, 2021, a federal grand jury sitting in the District of Columbia returned a Superseding Indictment charging Defendant, and three co-defendants (two of whom were not previously charged), with Conspiracy, in violation of 18 U.S.C. § 371; Obstruction of an Agency Proceeding, in violation of 18 U.S.C. §§ 1512(c)(2), and 2; Obstructing Law Enforcement During a Civil Disorder, in violation of 18 U.S.C. §§ 231(a)(3), and 2; 18 U.S.C. §§ 1361, and 2; Entering and Remaining in a Restricted Building or Grounds, in violation of 18 U.S.C. § 1752(a)(1); and Disorderly and Disruptive Conduct in a Restricted Building or Grounds, in violation of 18 U.S.C. § 1752(a)(2).

The Superseding Indictment is under seal, pending the arrest of newly charged defendants and the execution of search warrants. Law Enforcement anticipates executing the arrests and search warrants of the new defendants in a coordinated operation on Wednesday, March 17, 2021. Once the arrests are executed, the Superseding Indictment will be unsealed.

The evidence the superseding indictment provides to substantiate claims first made on March 1 may explain an even bigger reason why prosecutors didn’t provide their evidence for those three claims in time to keep Nordean in custody: They had an unindicted co-conspirator (presumably someone cooperating with prosecutors) who was, along with the four conspiracy defendants, on an encrypted channel created after Enrique Tarrio’s arrest on January 4 that Proud Boy leaders used to continue planning for January 6. That unindicted co-conspirator was personally involved in all three details included in that detention memo against Nordean. He helped divvy up the Proud Boys to be spread out during the January 6 operation.

39. On after Chairman’s January 4, 2021, shortly after Proud Boys Chairman’s arrest pursuant to a warrant issued by D.C. Superior Court, DONOHOE expressed concern that encrypted communications that involved Proud Boys Chairman would be compromised when law enforcement examined Proud Boys Chairmans’ phone. DONOHOE then created a new channel on the encrypted messaging application, entitled, “New MOSD,” and took steps to destroy or “nuke” the earlier channel. After its creation, the “New MOSD” channel included NORDEAN, BIGGS, REHL, DONOHOE, and a handful of additional members.

40. On January 2021, at 7:15 p.m., DONOHOE posted a message on various encrypted messaging channels, including New MOSD, which read, “Hey have been instructed and listen to me real good! There is no planning of any sorts. I need to be put into whatever new thing is created. Everything is compromised and we can be looking at Gang charges.” DONOHOE then wrote, “Stop everything immediately” and then “This comes from the top.”

41. On January 4, 2021, at 8:20 p.m., an unindicted co-conspirator (“UCC-1”) posted to New MOSD channel: “We had originally planned on breaking the guys into teams. Let’s start divying them up and getting baofeng channels picked out.”

Note: If “New MOSD” was a channel of State leaders of the Proud Boys, it would likely have included Nicholas Ochs, who heads the Hawaii chapter of the Proud Boys. Ochs was the first senior Proud Boy to be arrested, on January 7, at the airport when he arrived back in Hawaii (and therefore carrying anything he had with him at the insurrection, potentially including his cell phone and any radios he kept). Kathryn Rakoczy, who has since moved onto the team prosecuting the Oath Keepers, was the original prosecutor on Ochs’ case. But now Christopher Berridge, who is on all the other Proud Boy cases but not the Nordean and Biggs one, is prosecuting Ochs. Ochs is charged in a parallel conspiracy indictment, with the very same goal and many of the same means as the Nordean and Biggs one, but which for some reason was not identified as a related case to the other three Proud Boy ones and so was not assigned to Judge Kelly; Judge Howell is presiding over Ochs’ case. Ochs has a superb defense attorney, Edward McMahon. Many of these details, which make the curious treatment of the Ochs-DeCarlo conspiracy indictment clear, are in this post or this expanded table.

Whoever the unindicted co-conspirator is, he’s the one who set the channel of the Baofeng radios the night before the insurrection. And he’s the one who stated that Nordean was in charge.

46. At 9:03 p.m., REHL notified NORDEAN, BIGGS, DONOHOE and others that he had arrived in Washington, D.C. DONOHOE responded by requesting one of the radios that REHL had brought.

47.  At 9:09 p.m., UCC-1 broadcast a message to MOSD and Boots on the Ground channels that read: “Stand by for the shared baofeng channel and shared zello channel, no Colors, be decentralized and use good judgement until further orders” UCC-1 also wrote, Rufio is in charge, cops are the primary threat, don’t get caught by them or BLM, don’t get drunk until off the street.” UCC-1 then provided a specific radio frequency of 477.985.

It is highly likely that prosecutors learned the three details included in that detention motion — that Nordean had been put in charge, that the Proud Boys were using Baofeng radios set to frequency 477.985, and that part of the plan was to disperse the men to increase chances of success — from the unindicted co-conspirator and or devices seized from him when he was first arrested.

And it took them less than two months to learn those details of the plot.

Update: The government has moved to detain both Nordean and Biggs now. Those motions cite from the Telegram chats the Proud Boys used to organize the day before the attack, including (I’ve combined them from both motions):

On January 5, between 9:30 – 9:32am [Biggs] stated “What are the teams. I keep hearing team [sic] are picked already.” A few minutes later, [Biggs] stated “Who are we going to be with. I have guys with me in other chats saying teams are being put together.”

On January 5, at 9:32am, a member of a Proud Boys Telegram group stated “It seems like our plan has totally broken down and rufio has taken control as a singke [sic] point of contact.”

On January 5, between 5:22 – 5:25pm, [Biggs] stated “Woth [sic] [coconspirator Ethan Nordean] trying to get numbers so we can make a plan.” Defendant then stated “Just trying to get our numbers. So we can plan accordingly for tonight and go over tomorrow’s plan.”

On January 5, at 5:52pm, [Biggs] stated “We are trying to avoid getting into any shit tonight. Tomorrow’s the day” and “I’m here with [co-conspirator Nordean] and a good group[.]”

On January 5, at 9:07pm, co-conspirator Charles Donohoe asked “Hey who’s boots on ground with a plan RN [ … ] Guys are asking.” A participant in the encrypted chat stated “Supposed to be Rufio.”

Within minutes, an unindicted co-conspirator broadcast a message to those in the group chat, “Rufio is in charge, cops are the primary threat, don’t get caught by them or BLM, don’t get drunk until off the street.”

On January 5, between 9:17 and 9:20pm, [Biggs] stated “We just had a meeting woth [sic] a lot of guys. Info should be coming out” and then “I was able to rally everyone here together who came where I said” and then, “We have a plan. I’m with [co-conspirator Nordean].”

On January 5, at 9:34pm [Biggs] told co-conspirator Charles Donohoe to communicate to Proud Boys members a message stating that the group in Washington, D.C. would meet at the Washington Monument at 10am on January 6.

On the morning of January 6, Donohoe stated that he was on his way to the Washington Monument, and “I have the keys until Rufio and [co-conspirator Zachary Rehl] show up.”

Update: As I note in a footnote to this post, Nicholas Ochs can’t be the unindicted co-conspirator. That’s true for two reasons. First, because DOJ does not believe UCC-1 was at the Capitol on January 6 (though doesn’t say where he was). DOJ knows Ochs was inside the Capitol. Also, DOJ has now started treating all the Proud Boy conspiracies as the same conspiracy. So Ochs could not, then, be considered un-indicted in that conspiracy.