Two People Plead Guilty in Conspiracy to Transport Ashley Biden Diary

/25 Comments/in , /by

Aimee Harris and Robert Kurlander pled guilty today to a conspiracy to transfer personal items that Ashley Biden had stored in Florida to Project Veritas in New York.

Kurlander entered into a cooperation agreement.

Among other things, Harris stole Ms. Biden’s diary from a period when she was in rehab, one that ended up getting published around the same time the “Hunter Biden” “laptop” story broke. In addition, Harris stole a thumb drive with private pictures of the Biden family, and tax records. At one point during the negotiations with Project Veritas, Kurlander acknowledged what a shitty thing they were doing to Ms. Biden.

I’m expecting that they’re gonna pay up to $100,000 each maybe more . . . I made it so that the 10,000 is NOT your only payment as it was written and if this does turn into something good or blockbusting then I’ll get us more money. They of course come I across as the nicest people in the world but their job is to pay the least and they aren’t your or my best friends. They are in a sketchy business and here they are taking what’s literally a stolen diary and info . . . and trying to make a story that will ruin [the Victim’s] life and try and effect the election. [The Victim] can easily be thinking all her stuff is there and not concerned about it. .  . we have to tread even more carefully and that stuff needs to be gone through by us and if anything worthwhile it needs to be turned over and MUST be out of that house.

Given that this is a conspiracy and that the Special Master in this case was finalizing her report to share information from (among others) James O’Keefe’s phone in July, the people described as potential co-conspirators in the document — including two Executives of Project Veritas (probably their Office Manager, as well as O’Keefe) and one Employee who had been involved in moving the materials across state lines — may be in a good deal of trouble.

To the credit of Trump’s campaign, they told Kurlander and Harris to bring the materials to the FBI.

“[Candidate-2] campaign can’t use it. They want it to go to the FBI. There is NO WAY [Candidate-2] can use this. It has to be done a different way . . .”

emptywheel coverage of Project Veritas scandal

Parallel Tracks: Project Veritas Served on Their Subpoena Stance

Sting Ray: Project Veritas’ Schrodinger’s Proxy

In Their Bid for Special Master, Project Veritas Provided Evidence of Possible Extortion

Citing “Considerable Detail” in Affidavits, Judge Denies Bid to Unseal Project Veritas Warrants

Jeffrey Rosen Targeted Project Veritas’ Office Manager Long before Merrick Garland Targeted James O’Keefe

Tick Tock: SDNY Tells Project Veritas, Again, To Wait Until James O’Keefe Is Indicted to Complain

Bill Barr Performed the Corruption He Was Trying To Deny

/45 Comments/in , , /by

Perhaps I have a perverse sense of humor.

But between bouts of yelling about the Barr Memo, I’ve been laughing my ass off.

There are a number of reasons I’m laughing, some that I won’t share because I don’t want to spoil what I expect to be the punchline. But one reason I can’t stop laughing is that Robert Mueller managed to get Barr to perform — and put down in writing!! — precisely the corruption Mueller was trying to document: corrupt interference in a criminal prosecution.

I can’t imagine that Robert Mueller intended to elicit this response from Billy Barr and the lawyers who had been overseeing Mueller’s work for almost two years. But because they made the corrupt decision to override Mueller’s studied refusal to made a final conclusion about whether Trump committed obstruction (in my opinion, Mueller viewed Volume II of the Report as an impeachment referral and so did this for separation of powers reasons), they ended up putting together a shoddy memo justifying their decision.

One reason it worked out that way was because Barr and his flunkies were working quickly: a rushed effort over the course of the weekend to substantiate false claims to share with Congress.

According to Barr’s book, he remembers getting the Mueller Report around 1:30PM on March 22, 2019.

As Amy Berman Jackson laid out in a timeline accompanying her decision ordering the release of the memo, starting with a draft of the letter to Congress by Steven Engel at 8:36PM on March 22, 2019 and working through the weekend, five men including Engel (according to some emails quoted by ABJ, Barr was present as well) drafted both the letter to Congress and the declination memo in parallel.

As ABJ pointed out (this was a second basis on which she ruled that DOJ had to release the memo, one the DC Circuit said it didn’t need to consider given all the other reasons it had laid out to uphold her decision), the drafting of the letter to Congress — which she showed in the left column — actually preceded the memo — in the right column — advising Barr that because one goal under the Justice Manual is to,

promot[e] confidence on the part of the public and individual defendants that important prosecutorial decisions will be made rationally and objectively on the merits of each case,

Barr should,

examine the Report to determine whether prosecution would be appropriate given the evidence recounted in the Special Counsel’s Report, the underlying law, and traditional principles of federal prosecution.

The public record, then, shows Barr telling Congress about his prosecution declination before he decided to read the Report or even accept the recommendation of people who claimed to have read the Report. It was all completed over a weekend in which the people supposedly advising him were at the same time being directed by him, everyone together in the Attorney General’s conference room for the weekend.

The men finished their letter to Congress announcing that Trump had not committed any crime just after 4:30PM on Sunday and then finalized the declination memo first thing Monday morning.

These men weren’t reading the 400-page Report to figure out what it said (and there’s evidence that neither Rod Rosenstein nor Barr ever read it closely). They were instead trying to figure out how to debunk a Report they had skimmed over the course of seven hours.

And that haste showed up in several places in the memo.

There’s the admission that their recommendations were largely the part of earlier discussions, including from before Barr was hired (as Barr described it, one of the lawyers, Henry Whitaker got pulled in for the first time over the weekend), and therefore only partly about the Report itself.

Over the course of the Special Counsel’s investigation, we have previously discussed these issues within the Department among ourselves, with the Deputy Attorney General, and with you since your appointment, as well as with the Special Counsel and his staff. Our conclusions are the product of those discussions, as well as our review of the Report.

They repeat that admission to explain why they dedicate fully a third of the single page discussing legal precedents to a discussion that happened on July 3, 2018, before the evidence about the Stone interactions with Russia, Paul Manafort’s ties with Konstantin Kilimnik, and Michael Cohen’s interactions with the Kremlin were fully developed.

In our prior discussions, the Special Counsel has acknowledged that “we have not uncovered reported cases that involve precisely analogous conduct.” See Special Counsel’s Office Memorandum to the 600.4 File, Preliminary Assessment of Obstruction Evidence, at 12 (July 3, 2018).

And there’s the footnote explaining that they just weren’t going to cite any facts.

  1. Given the length and detail of the Special Counsel’s Report, we do not recount the relevant facts here. Our discussion and analysis assumes familiarity with the Report as well as much of the background surrounding the Special Counsel’s investigation.

The other reason this memo embodies corruption is that corruption lays at the core of the statute Mueller rested his obstruction analysis on: 18 USC 1512(c)(2) — the same statute DOJ is using in the January 6 prosecutions. So Barr’s 9-page memo had to find a way to claim those actions weren’t corrupt, without entirely parroting the analysis he did in the audition memo he used to get the job, and without acknowledging Barr’s three statements — made under oath during his confirmation hearing — that trading pardons for false testimony would be obstruction (the word “pardon” does not appear in this memo).

Predictably, that discussion was really shoddy. In a key passage, for example, they adopt just one possible measure of corrupt intent, personal embarrassment, something that is only mentioned four times in the Report, always in conjunction with a discussion of at least marginal criminal exposure. Then they use that as a straw man central to their dismissal of Mueller’s lengthy analysis and their decision not to actually engage with Mueller’s analysis.

The Report thus suggests that the President’s exercise of executive discretion for any improper reason, including the prevention of personal embarrassment, could constitute obstruction of justice if it impeded a pending investigation. As we have discussed with you, we do not subscribe to such a reading of the obstruction-of-justice statutes. No reported case comes close to upholding a conviction of such breadth, and a line of Supreme Court precedent, including Arthur Anderson, weighs heavily in favor of objectivity and certainty in the federal criminal law. In order to reach the conclusions in this memorandum, however, we do not believe it necessary to address this disagreement further, because in our view, Volume II of the Report does not establish offenses that would warrant prosecution, even under such a broad legal framework.

Much of their subsequent analysis, dismissing the ten possible examples of obstruction in the Report, was simply factually inaccurate (and in once case, conflicted with something Barr’s own DOJ said a year later). It was not just the then-ongoing Roger Stone conspiracy investigation that refuted the claims Barr had rubber-stamped in secret, and it was not just the ongoing Roger Stone investigation that Barr later took unprecedented steps to thwart so as to protect his basis for exonerating the President. They made claim after claim that wasn’t even an accurate representation of the Report. Just as one measure, as noted, the memo doesn’t use the word pardon at all; the Mueller Report uses it 67 times.

It was only the expectation that all this would remain secret that let Barr and his flunkies entertain the fantasy that any of this could, “promot[e] confidence on the part of the public and individual defendants that important prosecutorial decisions will be made rationally and objectively on the merits of each case.” So they had to keep it secret.

And so, after it was written, a snowball of additional corruption followed, with DOJ making false claims about what was in the memo, and DOJ making more false claims, and Barr taking extraordinary steps to try to ensure that later facts didn’t prove him wrong.

But you don’t have to go further than these nine pages to see that this intervention just dripped with the corruption they were trying to deny.

Christina Bobb, Custodian of Records and Coup Conspirator

/116 Comments/in , , , /by

According to Donald Trump’s whack-ass filing the other day, he personally has yet to receive a subpoena in the investigation of his  suspected theft of classified documents and obstruction of one or more investigations by hiding, ripping, or flushing documents. Instead, his hospitality company and Christina Bobb have.

DOJ sent the June 22 subpoena for surveillance footage at Mar-a-Lago to the Custodian of Records at the Trump Organization.

On June 22, 2022, the Government sent a subpoena to the Custodian of Records for the Trump Organization seeking footage from surveillance cameras at Mar-a-Lago. At President Trump’s direction, service of that subpoena was voluntarily accepted, and responsive video footage was provided to the Government.

The WaPo explained that it was sent to Trump Organization, not Trump, because that’s who actually owns Mar-a-Lago.

By the way, that means that Trump Organization could have, but thus far has not, intervened in the August 8 search as well as Donald. Indeed, that may have been what Magistrate Judge Bruce Reinhart, who has read the search warrant affidavit, was alluding to when he memorialized his order asking DOJ to provide more justification for its review. He noted that neither Trump nor any other “purported owner” of Mar-a-Lago had intervened.

Neither Former President Trump nor anyone else purporting to be the owner of the Premises has filed a pleading taking a position on the Intervenors’ Motions to Unseal.

In fact, when Trump intervened in the Michael Cohen search in 2018 — and did so after just four days — he did so in the persons of Trump Organization lawyer Alan Futerfas and Futerfas’ partner Ellen Resnick. Having Trump Organization ask for a Temporary Restraining Order would have been another way to intervene in more timely and competent way than Trump has done so far — but Trump Organization has been rather distracted preparing for depositions in Tish James’ investigation and the October trial testimony of their former CFO in a New York City trial.

In any case, it is totally normal for a grand jury to subpoena the “Custodian of Records” of a corporation from which it wants records. In the case of the surveillance video (and presumably a renewed subpoena after the search), that just happened to place the legal obligation to respond on an entity that has a whole heap of other legal problems right now.

In Trump’s whack filing, though, the hero of our story Donald J. Trump magnanimously instructed Trump Organization to accept service and provide the video (it appears that Eric or the failson would have been the ones legally to give that order), otherwise known as “complying with a subpoena.”

It’s the other subpoena I find more interesting.

On May 11, 2022, Movant voluntarily accepted service of a grand jury subpoena addressed to the custodian of records for the Office of Donald J. Trump, seeking documents bearing any classification markings. President Trump determined that a search for documents bearing classification markings should be conducted — even if the marked documents had been declassified — and his staff conducted a diligent search of the boxes that had been moved from the White House to Florida. On June 2, 2022, President Trump, through counsel, invited the FBI to come to Mar-a-Lago to retrieve responsive documents. [italics Trump’s, bold mine]

There’s a lot going on in this passage. Whereas the earlier passage described the government sending the subpoena, here Trump’s team only describes that service for it was accepted, “voluntarily,” it notes in italics, which is not a thing.

It’s a subpoena, you don’t get a choice.

The passage dates that acceptance to May 11 — the day after, we now know, that the Acting Archivist Debra Steidel Wall had informed Evan Corcoran, acting as Trump’s attorney, that she would not respect Trump’s “protective assertion of executive privilege.” The dates are almost certainly related, but we can’t be sure how, because we can’t be sure when DOJ subpoenaed Trump for the rest of the classified documents he was hoarding.

More interesting, to me, is the way this passage introduces a second role (and third) it will rely on heavily to describe what must be a core focus of the obstruction investigation, that Custodian of Records of the Office of Donald J. Trump. The Custodian of Records accepted the subpoena (and so would be on the legal hook for it), “his staff conducted a diligent search,” and then his counsel — Corcoran — “invited” Jay Bratt to come get the additional classified documents that would constitute proof Trump had violated the Espionage Act. Trump doesn’t reveal who did the search (though other reports have said Corcoran did it). But as presented, this process implicated three different roles, at least one role performed by a guy who signed this very whack filing that works so hard to obscure all this.

All that is set-up for the meeting on June 3, which will carry a great deal of legal import going forward, not least in an inevitable Fourth Amendment suppression motion. Here’s the tale the whack filing, written in part by Evan Corcoran, tells:

The next day, on June 3, 2022, Jay Bratt, Chief of the Counterintelligence and Export Control Section in the DOJ’s National Security Division, came to Mar-a-Lago, accompanied by three FBI agents. President Trump greeted them in the dining room at Mar-a-Lago. There were two other attendees: the person designated as the custodian of records for the Office of Donald J. Trump, and counsel for President Trump. Before leaving the group, President Trump’s last words to Mr. Bratt and the FBI agents were as follows: “Whatever you need, just let us know.”

Responsive documents were provided to the FBI agents. Mr. Bratt asked to inspect a storage room. Counsel for President Trump advised the group that President Trump had authorized him to take the group to that room. The group proceeded to the storage room, escorted by two Secret Service agents. The storage room contained boxes, many containing the clothing and personal items of President Trump and the First Lady. When their inspection was completed, the group left the area.

Once back in the dining room, one of the FBI agents said, “Thank you. You did not need to show us the storage room, but we appreciate it. Now it all makes sense.” Counsel for President Trump then closed the interaction and advised the Government officials that they should contact him with any further needs on the matter.

This passage is designed to portray Trump’s response as completely cooperative, which is set up for a claim the warrant was not necessary. As such, it describes an FBI comment undoubtedly designed, legally, to reiterate that a consensual search — of the storage room — was indeed consensual, as if it means something else, that the FBI had had all its questions answered. But when Trump eventually receives the affidavit that relies on this FBI agent’s first-hand observations during a consensual search to show probable cause for a warrant to come back and search the storage room further, Trump will have ceded the consensual nature of it and therefore his ability to suppress the August 8 search.

Evan Corcoran will one day be underbussed for agreeing (and in this filing, attesting) to this consensual search; given the way he’s portrayed in this WaPo story, the underbussing may have already begun. But for now, it is the stated version Trump wants to tell.

What I’m interested in, though, is that according to this version — a version that makes absolutely no mention of the declaration Jay Bratt required Trump’s team provide after that consensual search of the storage room — the roles that Corcoran and Christina Bobb played were different, and different in a way that holds legal weight. They don’t name names, but because Corcoran is known to have done the things attributed to “counsel” in this whack filing, he must be the counsel in the meeting and Bobb, by process of elimination, was the Custodian of Records. So Bobb was the person on the hook for the subpoena response.

As a reminder, here’s the most complete description of the declaration that Corcoran neglected to mention in the whack filing, from an NYT article that studiously avoids mentioning that obstruction is one of the crimes under investigation.

Mr. Bratt and the agents who joined him were given a sheaf of classified material, according to two people familiar with the meeting. Mr. Corcoran then drafted a statement, which Ms. Bobb, who is said to be the custodian of the documents, signed. It asserted that, to the best of her knowledge, all classified material that was there had been returned, according to two people familiar with the statement.

Bobb, performing the role as the Custodian of Records and so the person on the legal hook for the search, is the one who signed the declaration, based off a search that unnamed Trump “staff” members — described as a third role separate from that of Custodian of Records Christina Bobb and counsel Evan Corcoran — conducted.

Who knows whether Bobb really played the legal function of Custodian of Records at the Office of Donald J. Trump? I’ll come back to that in a bit.

Whatever Bobb really is, though, three pages later, Trump’s Custodian of Records gets a dizzying demotion to one of “three attorneys in the general area” who showed up to observe the search. That demotion may serve the legal function of justifying a claim, made another 11 pages later, that the search warrant receipts Bobb signed do not meet the standards required by Rule 41.

Among other actions taken after being notified of this unprecedented event, counsel for President Trump contacted three attorneys in the general area who agreed to go to Mar-a-Lago. Once they arrived, they requested the ability to enter the mansion in order to observe what the FBI agents were doing, which the Government declined to permit.

After approximately nine hours, the FBI concluded its search. An FBI agent provided one of the attorneys who had been waiting outside for nearly the full nine hours with a copy of the Search Warrant. TheFBI also provided a three-page Receipt for Property. Receipt for Property

[Case 9:22-mj-08332-BER, ECF 17 at 5-7 of 7]. That list provided almost no information that would allow a reader to understand what was seized or the precise location of the items.

[snip]

In addition, Movant requests that this Court direct the United States to prepare and provide a specific and detailed Receipt for Property. See Fed. R. Crim. P. 41(f). The “Receipt For Property” provided to Movant on August 8, 2022 is so vague and lacking in specificity that the reader does not know what was seized from Movant’s home.

[snip]

Movant submits the current Receipt for Property is legally deficient. Accordingly, the Government should be required to provide a more detailed and informative Receipt For Property, which states exactly what was seized, and where it was located when seized. In addition, Movant requests that the Court provide him with a copy of the inventory. This, along with inspection of the full Affidavit, is the only way to ensure the President can properly evaluate and avail himself of the important protections of Rule 41. [my emphasis]

Rolling Stone has a piece explaining that this whack filing is not actually the significant Fourth Amendment filing we were promised. That one, a bid to demand that Trump get these files back, is still coming.

[T]he former president’s legal team appears to be working to retrieve at least some of the papers seized during the Aug. 8 federal search. In recent days, the Trump team — led by former federal prosecutor Evan Corcoran — has been quietly prepping additional legal arguments and strategies to try to pry back material that the feds removed from the ex-president’s Florida abode and club, the sources say. Those measures include drafting a so-called “Rule 41(g) motion,” which allows  “a person aggrieved by an unlawful search and seizure of property” to “move for the property’s return,” according to the Federal Rules of Criminal Procedure.

This would be a follow-up measure to the lawsuit, filed Monday by Trump and his attorneys, calling for the appointment of a special master to review the Mar-a-Lago materials for potentially privileged materials. It is unclear when the ex-president’s lawyers plan to file a subsequent motion, which people close to Trump expect to be more narrowly tailored than what the former president apparently wants.

But this whack filing is meant to lay the groundwork for the future promised significant Fourth Amendment whack filing.

And the success of both depends on a claim that poor Christina Bobb, who in her role as the Custodian of Records is either a witness or suspect in the obstruction side of this investigation, was on the day of the search just a pretty little lawyer who happened to be walking her dog in the neighborhood, and who asked the nice FBI agents to let her watch the search but wasn’t allowed to, which is why she signed off on the receipt without asking for more details on the front end. This entire scheme will fail when the FBI points out that a suspected co-conspirator didn’t do the due diligence Trump is now claiming (falsely) is legally required according to the standards of Rule 41.

It would almost certainly fail anyway, but it will especially fail when DOJ points out that Bobb is not just some lady walking her dog in the neighborhood, but played the role of the Custodian of Records, and so had the competence to demand a more complete receipt on the day of the search, but did not. The Office of Donald J. Trump has effectively already waived the issue of the receipts.

But consider the import of the claim that Christina Bobb functioned at the Custodian of Records for the Office of Donald J. Trump, particularly given Paul Sperry’s claim (h/t Ron Filipkowski) that Trump withheld these documents because he knew that if he turned them over, the Archives would in turn provide them to the January 6 Committee (and now, DOJ’s January 6 investigation).

Christina Bobb is not only not just a lady walking her dog in the neighborhood of Mar-a-Lago, she also played a key role in the coup attempt.

She was the first author of the draft Executive Order attempting to seize the voting machines.

That document is nearly identical to a draft executive order the National Archives has shared with the Jan. 6 committee, and that POLITICO published last month. Metadata on the document says it was created by a user named Christina Bobb, and later updated by an unnamed person. A One America News anchor by that name was involved in Giuliani’s work for Trump, and previously worked in the Department of Homeland Security during the Trump administration.

The Washington Post reported that Bobb was on at least one conference call about setting up alternate slates of electors for the Jan. 6 certification vote, and that she was at the Willard hotel “command center” that Trump’s allies used as a home base to coordinate efforts to overturn the election. The emails did not cast light on Bobb’s ties to the draft executive order beyond her name’s appearance in the metadata, and she did not respond to requests for comment.

And as Seth Abramson first confirmed, after leaving the Cannon Office Building at 1PM on January 6, Bobb spent the rest of the day in the Willard right alongside Rudy.

While the Archives spent a year trying to get Trump to return identified documents, some reports say things came to a head in December.

WaPo reports that Trump personally oversaw the packing of boxes to be returned to the Archives, and they were retrieved on January 17.

What followed was a tortured standoff among Trump; some of his own advisers, who urged the return of documents; and the bureaucrats charged by the law with maintaining and protecting presidential records. Trump only agreed to return some of the documents after a National Archives official asked a Trump adviser for help, saying they may have to soon refer the matter to Congress or the Justice Department.

Nearly a year later, on Jan. 17, 2022, Trump returned 15 boxes of newspaper clips, presidential briefing papers, handwritten notes and assorted mementos to the National Archives. That was supposed to settle the issue.

[snip]

It could not be determined who was involved with packing the boxes at Mar-a-Lago or why some White House documents were not sent to the Archives, though people familiar with the episode said Trump oversaw the process himself — and did so with great secrecy, declining to show some items even to top aides. Philbin and another adviser who was contacted by the Archives in April have told others that they had not been involved with the process and were surprised by the discovery of classified records.

What’s clear is that effort to pack up boxes, an effort Trump personally oversaw, was happening during the same period when Trump was trying to prevent the Archives from handing over records to the January 6 Committee.

October 18, 2021: Trump sues to prevent the Archives from complying with January 6 Committee subpoena.

November 10, 2021: Judge Tanya Chutkan denies Trump’s motion for an injunction against NARA. (While it wouldn’t appear in the affidavit, in recent days Paul Sperry has claimed that Trump withheld documents to prevent NARA from turning them over to the January 6 Committee.)

December 9, 2021: DC Circuit upholds Judge Chutkan’s decision releasing Trump records to the January 6 Committee.

On January 17, 2022, NARA retrieved 15 boxes of Records from 1100 S. Ocean Blvd, Palm Beach, FL.

January 19, 2022: SCOTUS upholds Chutkan’s decision.

Any tampering with already packed boxes may have happened after the DC Circuit ruled in favor of the Committee, but in any case, in courts in DC, such tampering happened during a period when Trump was legally fighting to hide records that would implicate him … and Christina Bobb.

I’m still not convinced that the January 6 investigation(s) are the primary thing that Trump was trying to retain, though I think there’s a decent chance they’re included among the investigation(s) that Trump is suspected of obstructing by hiding, ripping, and flushing documents.

But to the extent that Trump was attempting to obstruct parallel investigations of his efforts to steal the 2020 election, Bobb’s role as both a co-conspirator in the coup plan and as Custodian of Records would raise additional concerns for the FBI.

A Roger Stone Pardon for MacronLeaks Isn’t As Crazy as It Sounds

/55 Comments/in , , , /by

In April 2020, DOJ released the warrants from the Roger Stone investigation. With six of those, DOJ redacted broad swaths of the justifications behind the warrants, none of which were shared with him as part of his obstruction prosecution.

September 26, 2018: Mystery Twitter Account

September 27, 2018: Mystery Facebook and Instagram Accounts

September 27, 2018: Mystery Microsoft include Skype

September 27, 2018: Mystery Google

September 27, 2018: Mystery Twitter Accounts 2

October 5, 2018: Mystery Multiple Googles

All six were obtained by Patrick Myers, an FBI agent located in Pittsburgh, whereas almost all the warrants obtained before that were signed by agents located in DC (in earlier weeks, Myers had also obtained a warrant targeting a second account used by the GRU persona, Guccifer 2.0).

In his order releasing the warrants, Judge Christopher Cooper explained that all the redacted information (and so the information justifying these warrants) was redacted to protect, “the private information of non-parties, financial information, and non-public information concerning other pending criminal investigations.”

One of those warrants explicitly said that the government requested a gag on the provider involved (in that case, Twitter) because Roger Stone seemed not to understand the full extent of the investigation into him.

It does not appear that Stone is currently aware of the full nature and scope of the ongoing FBI investigation. Disclosure of this warrant to Stone could lead him to destroy evidence or notify others who may delete information relevant to the investigation.

In addition to the crimes for which Mueller declined to charge Stone (foreign donations) or of which he was convicted (witness tampering and obstructing an investigation), the warrant sought evidence of conspiracy (18 USC 371), two foreign agent laws (18 USC 951 and 22 USC 611), and computer hacking (18 USC 1030).

These warrants strongly suggest that in April 2020, as Bill Barr was making unprecedented efforts to limit Stone’s punishment for the crimes of which he had been convicted, DOJ continued to investigate whether Stone conspired with foreign entities — and given that a Guccifer 2.0 warrant is among this series, Russia would be that foreign entity — to engage in computer hacking.

That’s important background to the seizure from Trump’s office of document reflecting Executive Clemency for Stone that appears to have a link to a French President, possibly Emmanuel Macron.

If Stone were involved with the MacronLeaks operation on which the GRU teamed up with alt-Right figures in Stone’s orbit, it’s conceivable Trump secretly pardoned him to prevent him from being included in the indictment covering that operation.

Based on the FOIA exemptions in various versions of the Mueller Report released, the Stone investigation that continued after Mueller closed up shop appears to have been closed between September 18, 2020 and November 2, 2020. On the latter date — literally the day before the 2020 election — DOJ provided Jason Leopold a version of the Mueller Report with newly-unsealed passages. It revealed for the first time that, on page 178, a footnote modified the discussion in the body of the Report about whether Stone could be prosecuted for conspiring with Russia on computer hacking by explaining that Mueller had referred the issue to DC US Attorney’s Office for further investigation.

The Office determined that it could not pursue a Section 1030 conspiracy charge against Stone for some of the same legal reasons. The most fundamental hurdles, though, are factual ones.1279

1279 Some of the factual uncertainties are the subject of ongoing investigations that have been referred by this Office to the D.C. U.S. Attorney’s Office.

A version of the report released to Leopold on June 3, 2019 redacted that footnote because of an ongoing investigation. And a spreadsheet justifying all continued redactions released on September 18, 2020 seems to have redacted it too. The unredacted publication of it on November 2, 2020 suggests whatever investigation in Stone DOJ had been pursuing had been closed.

Stone’s wasn’t the only investigation that got shut down in the months before Donald Trump would lose the presidency. In that period, previously redacted references to investigations into two of Paul Manafort’s businesses, and an investigation into a suspected $10 million cash infusion during the 2016 election from an Egyptian state-owned bank were unsealed — though both were unsealed by the time of that September filing. There was even reference to a warrant for Erik Prince’s phone, suggesting any investigation into him had similarly been shut down.

What made Stone’s case different, however, is that DOJ never told us what the investigation was about (indeed, two referrals that likely pertain to Stone were redacted in that November 2020 release, which they shouldn’t have been if the cases were really closed).

The most important referral from the Mueller investigation, then — the one that Billy Barr was hired to make go away — simply got deep-sixed sometime in the months when it looked like Trump would lose the election, with no explanation as to what the investigation even was. And, again, it appears to have happened between September 18 and November 2, 2020.

As it happens, DOJ rolled out an indictment against GRU on October 19, just 15 days before the election (and just 14 days before DOJ released the language pertaining to Stone). It covered six GRU attacks, though focused especially on the 2018 Olympic Destroyer attack on the Pyeongchang Olympics.

But it included, almost as a throwaway, GRU’s role in the 2017 MacronLeaks campaign. By description, it held just one of the charged individuals accountable for the spearphishing part of the MacronLeaks campaign: Anatoliy Kovalev, the one guy (as noted) also charged in the DNC hack.

Defendant ANATOLIY SERGEYEVICH KOVALEV was a Russian military intelligence officer assigned to Military Unit 74455. KOVALEV sent spearphishing emails targeting a wide variety of entities and individuals, including those associated with French local government entities, political parties, and campaigns; the 2018 Winter Olympics; the DSTL; and a Georgian media entity. KOVALEV also engaged in spearphishing campaigns for apparent personal profit, including campaigns targeting large Russian real estate companies, auto dealers, and cryptocurrency miners, as well as cryptocurrency exchanges located outside of Russia. KOVALEV is a charged defendant in federal indictment number 18-CR-215 in the District of Columbia. [my emphasis]

In the Mueller indictment of the GRU, Kovalev is described as the guy responsible for the hacking that targeted voting infrastructure — the kind of stuff that really could have affected the outcome, especially in North Carolina.

72. In or around July 2016, KOVALEV and his co-conspirators hacked the website of a state board of elections (“SBOE 1”) and stole information related to approximately 500,000 voters, including names, addresses, partial social security numbers, dates of birth, and driver’s license numbers.

[snip]

75. In or around October 2016, KOVALEV and his co-conspirators further targeted state and county offices responsible for administering the 2016 U.S. elections. For example, on or about October 28, 2016, KOVALEV and his co-conspirators visited the websites of certain counties in Georgia, Iowa, and Florida to identify vulnerabilities.

76. In or around November 2016 and prior to the 2016 U.S. presidential election, KOVALEV and his co-conspirators used an email account designed to look like a Vendor 1 email address to send over 100 spearphishing emails to organizations and personnel involved in administering elections in numerous Florida counties. The spearphishing emails contained malware that the Conspirators embedded into Word documents bearing Vendor 1’s logo.

The Olympic Destroyer indictment obtained weeks before the election held Kovalev (and the GRU) accountable for the spearphish and communications with some French participants.

27. From on or about April 3, 2017, through on or about May 3, 2017 (during the days leading up to the May 7, 201 7, presidential election in France), the Conspirators conducted seven spearphishing campaigns targeting more than 100 individuals who were members of now-President Macron’s “La Republique En Marche!” (“En Marche!”) political party, other French politicians and high-profile individuals, and several email addresses associated with local French governments. The topics of these campaigns included public security announcements regarding terrorist attacks, email account lockouts, software updates for voting machines, journalist scoops on political scandals, En Marche! press relationships, and En Marchel internal cybersecurity recommendations.

28. KOVALEV participated in some of these campaigns. For example, on or about April 21, 2017, KOVALEV developed and tested a technique for sending spearphishing emails themed around file sharing through Google Docs. KOVALEV then crafted a malware-laced document entitled “Qui_peut_parler_ aux journalists.docx” (which translates to “Who can talk to journalists”) that purported to list nine En Marche! staff members who could talk to journalists about the previous day’s terrorist attack on the Champs-Elysees in Paris. Later that day, the Conspirators used an email account that mimicked the name of then-candidate Macron’s press secretary to send a Google Docs-themed spearphishing email to approximately 30 En Marche! staff members or advisors, which purported to share this document.

29. From on or about April 12, 2017, until on or about April 26, 2017, a GRU-controlled social media account communicated with various French individuals offering to provide them with internal documents from En Marche! that the user(s) of the account claimed to possess.

But it professed utter and complete ignorance about how the stolen documents started to get leaked.

30. On or about May 3 and May 5, 2017, unidentified individuals began to leak documents purporting to be from the En Marche! campaign’s email accounts.

But they weren’t unidentified, at least not all of them! As a DFIR report released 15-months before this indictment laid out, while there was a Latvian IP address that hadn’t been publicly identified at that point (one the FBI surely had some ability to unpack), the American alt-right, including Stone associate Jack Posobiec, made the campaign go viral, all in conjunction with WikiLeaks.

First there was a rumor spread from that Latvian IP to 4Chan to William Craddick to Jack Posobiec.

Last but not least came the “#MacronGate” rumor. Two hours before the final televised debate between Macron and Le Pen, on Wednesday, May 3, at 7:00 p.m.,41 a user with a Latvian IP address posted two fake documents on 4chan. The documents suggested that Macron had a company registered in Nevis, a small Caribbean island, and a secret offshore bank account at the First Caribbean Bank, based in the Cayman Islands. Again, the rumor itself was not entirely new. Macron himself had seen it coming. More than two weeks earlier on TV he warned that this type of rumor was likely to appear: “This week, you will hear ‘Mr. Macron has a hidden account in a tax haven, he has money hidden at this or that place.’ This is totally false, I always paid all my taxes in France and I always had my accounts in France.”42 What was new this time, however, was the release of two documents supposedly proving this rumor. The user who posted the two documents on 4chan did it purposefully on the evening on the final televised debate to attract more attention, and even suggested a French hashtag: “If we can get #MacronCacheCash trending in France for the debates tonight, it might discourage French voters from voting Macron”43.

Then the rumor spread on Twitter. The 4chan link was first posted by Nathan Damigo, founder of the American neo-Nazi and white-supremacist group Identity Evropa, and was further circulated by William Craddick, founder of Disobedient Media and notorious for his contribution to the Pizzagate conspiracy theory that targeted the US Democratic Party during the 2016 American presidential campaign. The first real amplifier was Jack Posobiec—an American alt-right and pro-Trump activist with 111,000 followers at the time: his tweet was retweeted almost 3,000 times. Only after 10:00 p.m. did the rumor begin to spread in French, mostly through far-right accounts using the #MacronCacheCash hashtag. The first tweets in French seemed to have been automatically translated from English.44

[snip]

The same user with the Latvian IP address who posted the fake documents on Wednesday announced on Friday morning that more were coming, promising, “We will soon have swiftnet logs going back months and will eventually decode Macron’s web of corruption.”49 Those responsible for #MacronGate thereby provided evidence that they were the same people responsible for the #MacronLeaks that were released later that day.

Then there were the leaked files themselves, which followed the same pattern: an anonymous leak to Craddick to Posobiec to WikiLeaks.

The files were initially posted on Archive.org, an online library site, supposedly in the morning63 (the time of first release on the website cannot be determined, as these original threads have since been deleted). At 7:59 p.m., the links to the threads were posted on PasteBin, a file-sharing site, under the name “EMLEAKS.” At 8:35 p.m., they were shared on 4chan. Then came their appearance on Twitter: Craddick was again the first to share the link to the PasteBin dump at 8:47 p.m., quickly followed by Jack Posobiec at 8:49 p.m., who provided a link to the 4chan thread with, for the first time, the hashtag #MacronLeaks.64 Contrary to what would later become a widespread misconception, Posobiec was not the first to tweet, Craddick was. However, Posobiec was the first to use the hashtag that would lend its name to the entire operation, hence the confusion. Posobiec’s tweet and hashtag was retweeted eighty-seven times within five minutes. He later said he had been alerted to the incoming dump by the user with a Latvian IP address who had posted the #MacronGate fake documents two days prior: “The same poster of the financial documents said to stay tuned tomorrow for a bigger story–so I pretty much spent the next 24 hours hitting refresh on the site.”65

So far, this conversation was exclusively Anglophone. This makes it clear that the hashtag #MacronLeaks was launched and spread in the United States, by the American alt-right. It was WikiLeaks that internationalized the spread, at 9:31 p.m., by tweeting: “#MacronLeaks: A significant leak. It is not economically feasible to fabricate the whole. We are now checking parts,” with a link to the files on PasteBin. Only then came the first French amplifiers, who happened to be Le Pen supporters

MacronLeaks was, openly and proudly, a joint venture between the GRU, far right influencers in Stone’s immediate orbit, and WikiLeaks. It was an attempt to repeat the 2016 miracle that elected Donald Trump, by supporting the Russian-supporting Marine Le Pen by damaging Macron.

There’s something unusual about the indictment, too. Alone among the indictments obtained by the Pittsburgh US Attorney’s office that month (October 2020), it was the single one signed in wet blue ink by the US Attorney, Scott Brady. Both the copy released by DOJ and the one docketed in PACER also lacked a jury foreperson’s signature.

Admittedly, most of the indictments WDPA obtained that month were fairly podunk crimes that wouldn’t need heightened security: a fentanyl dealer, a cocaine dealer, two unhoused men charged with theft, an aggravated assault, manufacturing a controlled substance, Social Security fraud, VA benefit fraud, all were signed in black ink, at least some of them electronically. But a child sexual trafficking indictment and a CSAM possession indictment, both originally filed under seal, also bear the foreperson’s signature and that black ink signature. Even a ransomware indictment rolled out nationally on October 15 — which would have the same kind of international sensitivities and national coordination as the GRU indictment — had a normal jury foreperson’s signature.

While Brady was not a surprising choice for US Attorney in Pittsburgh (he had previously been an AUSA), he was perhaps the most politicized of Trump’s US Attorneys. He’s the guy whom Barr put in charge of ingesting the dirt on Hunter Biden that Rudy Giuliani was getting from suspected Russian agents.

To be clear: There’s no public allegation that Stone had anything to do with MacronLeaks, though HateWatch places him at a Milo Yiannopoulos party where MacronLeaks appears to have come up, after the leaks but before the French election. I’m not saying that Stone was involved in the MacronLeaks operation.

But the response to the Stone reference in the subpoena receipt has assumed that the Stone reference cannot be related to the French President reference, all assumptions made by journalists that never covered the ongoing aspects into whether Stone conspired with Russia on a hack. If Trump did issue his rat-fucker a secret pardon for follow-on cooperation with Russian hackers, though, it would explain a number of things about the aftermath of the Mueller investigation, including what happened to the investigation into whether Stone conspired with Russia on hacking campaigns.

For his part, Trump included a bit of a tirade about the Stone reference in his motion for a Special Master last night.

In addition, did the affiant to the warrant fairly disclose any pretextual “dual” purpose at work in obtaining the warrant? For example, the Receipt for Property largely fails to identify seized documents with particularity, but it does refer to the seizure of an item labelled “Executive Grant of Clemency re: Roger Jason Stone, Jr.” Aside from demonstrating that this was an unlawful general search, it also suggests that DOJ simply wanted the camel’s nose under the tent so they could rummage for either politically helpful documents or support other efforts to thwart President Trump from running again, such as the January 6 investigation.

This is legally and politically nonsensical. If the pardon is the known pardon, then it’s not politically damaging at all. If it’s a real pardon of any kind — as a pardon written on a cocktail napkin arguably would be — then it’s a Presidential Record and squarely within the scope of the warrant (which permits seizure of any Presidential record created during Trump’s term). If the information about the French President is part of the document and appears to be sensitive, then it would qualify as a likely classified document. If the pardon were found in Trump’s safe next to his leatherbound box of TS/SCI documents, then it would be covered by the proximal search protocol laid out in the warrant. The pardon was legally seized.

Trump’s claims are nonsensical. But they’re also the the kind of squealing that invites further attention to what the clemency document really is.

Demands for Sua Sponte Do-Overs and Billy Barr’s Thought Experiment about Trump’s Criminality

/75 Comments/in , , /by

In a post last year about what was then a still heavily-redacted Amy Berman Jackson opinion ordering DOJ to release a Barr memo covering up the Mueller investigation, I wrote that this might finally be the case where DOJ would be held accountable for bullshit claims made in service of protecting secrets in FOIA cases.

Will Amy Berman Jackson Finally Break the Spell of OLC Feeding Bullshit FOIA Claims to DC District Judges?

Yesterday, Judge Amy Berman Jackson ruled that the government must turn over a memo written — ostensibly by Office of Legal Counsel head Steve Engel — to justify Billy Barr’s decision not to file charges against Donald Trump for obstructing the Mueller Investigation. The Center for Responsibility and Ethics in Washington FOIAed the memo and sued for its release. The memo itself is worth reading. But I want to consider whether, by making a nested set of false claims to hide what OLC was really up to, this opinion may pierce past efforts to use OLC to rubber stamp problematic Executive Branch decisions.

A key part of ABJ’s decision pivoted on the claims made by Paul Colburn, who’s the lawyer from OLC whose job it is (in part) to tell courts that DOJ can’t release pre-decisional OLC memos because that would breach both deliberative and attorney-client process, Vanessa Brinkmann, whose job it is (in part) to tell courts that DOJ has appropriately applied one or another of the exemptions permitted under FOIA, and Senior Trial Attorney Julie Straus Harris, who was stuck arguing against release of this document relying on those declarations. ABJ ruled that all three had made misrepresentations (and in the case of Straus Harris, outright invention) to falsely claim the memo was predecisional and therefore appropriate to withhold under FOIA’s b5 exemption.

Yesterday, the DC Circuit decided that (unless DOJ appeals again) yes, this will be that case. It ordered DOJ to release the rest of the Barr memo and it did so for precisely the reasons ABJ laid out: DOJ had played games with its claims about what was in the memo.

The opinion, written by Sri Srinivasan and joined by Judith Rogers and David Tatel, agreed with ABJ that the Department’s Declarations evolved but yet never actually described the predecisional advice at hand — which ABJ and the Circuit agree pertained to what Barr should say to Congress about Mueller’s results.

The Department’s submissions during the course of this litigation have at various times suggested three decisional processes to which the March 2019 memorandum might have pertained. The first two, as the Department acknowledges, cannot support its reliance on the deliberative-process privilege. As for the third, although that one might well have justified the Department’s invocation of the privilege, the Department never relied on—or even mentioned—that decisional process in the district court until the Department had already noticed its appeal to this court. And the district court was not required to grant judgment to the Department on a theory the Department never presented before taking an appeal.

1.

The first of the three decisional processes suggested in the Department’s submissions to the district court concerned whether to charge President Trump with a crime. Although the Department has since clarified that it was never in fact considering a prosecution, the Department’s submissions to the district court appeared to indicate in various ways that the March 2019 memorandum made recommendations about an actual charging decision.

[snip]

2.

If the Department’s analysis of whether the evidence in the Mueller Report would support an obstruction-of-justice charge did not in fact relate to a decision about whether to initiate or decline a prosecution, then why engage in that analysis? The Department’s submissions to the district court perhaps could be interpreted to indicate that the memorandum’s analysis of that question, if not related to an actual charging decision, was instead part of an abstract thought experiment. On that conception, the memorandum formed part of an academic exercise to determine whether President Trump’s conduct met the statutory definition of obstruction, solely for Attorney General Barr’s information, without any connection to any ensuing action by Barr or the Department.

[snip]

3. Because there was never an actual charging decision to be made in this case, and because the Department does not rely on a mere thought experiment about whether the evidence would support a charge as the relevant decisional process, the question naturally arises: what is the decisional process that the Department believes justifies its withholding of the March 2019 memorandum? The Department’s answer, per its briefing in our court, is that the memorandum “was intended to assist the Attorney General in deciding what, if anything, to communicate to Congress and the public about whether the evidence recounted in the Special Counsel’s report was sufficient under the Principles of Federal Prosecution to support a prosecution.” Dep’t Br. 25–26. That is, the deliberations about whether the evidence in the Report amounted to a crime went to deciding whether to say something to the public on that issue, not deciding whether to initiate a prosecution (which was never on the table).

[snip]

And here, it is now apparent that the March 2019 memorandum recommended reaching a conclusion on the evidentiary viability of an obstruction-of-justice charge as a means of preempting a potential public reaction to the Mueller Report. In that light, if the Department’s submissions to the district court had connected the memorandum to a decision about making a public statement, then the district court might well have concluded that the memorandum was privileged. But that is not how the Department elected to justify its invocation of the privilege in the district court.

And because DOJ claimed that the memo pertained to one kind of predecisional advice (whether to charge a President who could not be charged) rather than the real predecisional advice (to tell Congress that he couldn’t have been charged based on the evidence), the Circuit holds, DOJ must release the full memo.

In short, while the decisional process on which the Department now relies involved a determination as to whether the Attorney General should make a public statement, none of the Department’s submissions to the district court suggested that the March 2019 memorandum related to such a decision. In its briefing to us, the Department expresses regret that its submissions to the district court could have left the misimpression that an actual charging decision was under consideration, and it assures us that any misimpression it may have caused to that effect was inadvertent and not the result of any bad faith. Still, the Department at no point indicated to the district court that the memorandum gave advice on the making of a public statement. The Department thus failed to carry its burden to establish the relevant decisional process.

This section of the opinion, if it is not appealed, would lay important new groundwork for FOIA litigation. It effectively holds that if the government provides bullshit excuses about the reasons it wants to protect something from FOIA release (as they did here), even if there was a different reason that would have been legal but embarrassing that they did not make, their failure to provide the real reason in their declarations effectively waives their opportunity to make it.

Holding an agency to its burden in that regard serves important purposes. “The significance of agency affidavits in a FOIA case cannot be underestimated.” King v. DOJ, 830 F.2d 210, 218 (D.C. Cir. 1987). In a standard FOIA case, the government agency knows the full contents of any withheld records, while the requester confronting black redaction boxes is (literally) left in the dark. The requester’s lack of knowledge “seriously distorts the traditional adversary nature of our legal system’s form of dispute resolution.” Vaughn v. Rosen, 484 F.2d 820, 824 (D.C. Cir. 1973). An agency’s declarations supporting its withholdings “must therefore strive to correct, however[] imperfectly, the asymmetrical distribution of knowledge that characterizes FOIA litigation.” King, 830 F.2d at 218.

This case is illustrative. In its district court briefs, CREW focused its arguments on why the Department could not have been considering obstruction charges against the sitting President. That was understandable, because CREW had no reason to suspect that the memorandum might have related to a distinct decisional process about making a public statement. We cannot sustain the withholding of the memorandum on a rationale that the Department never presented to the district court and that CREW therefore never had an opportunity to challenge.

The Department responds with an argument that would effectively shift the burden from the Department to the court. According to the Department, even if it failed to establish that the March 2019 memorandum related to a decision about making a public statement, the district court should have reached that conclusion of its own accord based on its in camera review of the memorandum. The Department thus now seeks to prevail based on the district court’s in camera review even though the Department had initially objected to that review. We cannot accept the Department’s argument.

In a FOIA case, the government bears the burden of showing that requested records are exempt from disclosure. The government is a party in every FOIA case, is well versed in the conduct of FOIA litigation, and is fully capable of protecting its own interests in that arena. A district court can rely on the government to do so and can assume that the government has reasons for its choices and an understanding of their implications. It would put too much on the district court—and would relieve the government of its summary judgment burden—to expect a judge reviewing records in camera to come up with unasserted legal theories for why a document might be exempt from disclosure. To hold otherwise would “seriously distort[] the traditional adversary nature of our legal system’s form of dispute resolution.” Vaughn, 484 F.2d at 824.

Here, the Department failed to satisfy its burden, and the district court, as the court itself explained, was “under no obligation to assess the applicability of a privilege on a ground the agency declined to assert.” CREW, 538 F. Supp. 3d at 140 n.11.

And the opinion rejects the government’s argument it should have gotten a do-over, because it did not ask for reconsideration.

The Department contends that, even if the district court was not required to grant judgment in its favor, the court at least should have given the Department an opportunity to make supplemental submissions. We are unpersuaded by the Department’s assertion that the district court needed to sua sponte grant it a do-over.

The Department was given a number of opportunities to justify its withholding of the March 2019 memorandum. After initially attaching two declarations to its motion for summary judgment, the Department attached an additional declaration to its reply brief. Those three declarations, coupled with the Department’s two briefs, gave ample opportunity to identify Attorney General Barr’s messaging to the public as the relevant decisional process. But the Department never did so. Nor did the Department ask for an additional chance to clarify its position after seeing the district court’s summary-judgment decision, which pointed out that the Department’s submissions up to that point had created a misimpression about the nature of the decisional process. The Department did not move for reconsideration, instead seeking only a stay pending appeal. We cannot fault the district court for not giving the Department another chance when the Department never requested one.

The government can appeal this decision.

And by my read, DOJ still (says it) disagrees with CREW and the judges about the predecisional advice was. In DOJ’s briefing, it maintains the decision was ultimately about the sufficiency of evidence against Trump — which the Circuit calls a thought experiment — not about a PR stunt. That is, it’s saying that its briefing was close to accurate, and ABJ should have understood that once she read the memo itself.

Perhaps whatever Steven Engel and Ed O’Callaghan had to say in the sealed part of the memo really is something DOJ will go to the mat to (or assume a Trump majority on SCOTUS will) hide. Perhaps that’ll incent DOJ to try again or go to Trump’s protectors at SCOTUS to keep this sealed.

But some of the other things DOJ did — such as not asking for reconsideration — may make this an uphill climb in any case.

In any case, the Circuit did — as ABJ did herself — sharply limit the application of this decision. This decision does not affect the hated b5 exemption.

Our decision is narrow. We do not call into question any of our precedents permitting agencies to withhold draft documents related to public messaging. Indeed, if the Department had identified the March 2019 memorandum’s connection to public messaging, the district court might well have sustained the Department’s reliance on the deliberativeprocess privilege. And of course nothing in our decision should be read to suggest that deliberative documents related to actual charging decisions fall outside the deliberativeprocess privilege. We hold only that, in the unique circumstances of this case, in which a charging decision concededly was off the table and the agency failed to invoke an alternative rationale that might well have justified its invocation of the privilege, the district court did not err in granting judgment against the agency.

It only affects the consequences of providing bullshit excuses for trying to keep something secret.

We won’t know for some days yet whether DOJ will appeal. For now, though, the Circuit is holding DOJ accountable for misrepresentations in service of Barr’s cover-up.

Related links

May 3, 2021: Initial redacted ABJ opinion

May 5, 2021: Will Amy Berman Jackson Finally Break the Spell of OLC Feeding Bullshit FOIA Claims to DC District Judges?

May 24, 2021: DOJ motion for a stay pending appeal

May 24, 2021: Unredacted ABJ opinion

May 24, 2021: Partly redacted memo

May 25, 2021: On the Barr Memo: Julie Straus Harris Says Julie Straus Harris’ Unexplained “Flourish” Wasn’t a Lie

May 25, 2021: Frankenstein’s OLC: DOJ Says DOJ Can’t Do What DOJ Did in the Barr Memo

May 26, 2021: Bill Barr Issued Prosecution Declinations for Three Crimes in Progress

June 5, 2021: Bill Barr Is Not Dick Cheney

June 14, 2021: ABJ order granting stay

The Known and Likely Content of Trump’s Search Warrant

/181 Comments/in , /by

Yesterday, Magistrate Judge Bruce Reinhart found that, “the Government has not met its burden of showing that the entire [Trump search warrant] affidavit should remain sealed.” He ordered DOJ to provide a sealed version of proposed redactions for the warrant affidavit for Trump’s search by August 25 at noon.

Two days after the search of Mar-a-Lago I did a post laying out the likely content of what’s in that search warrant (which pretty accurately predicted what we’ve seen since). Because a warrant affidavit is one of the best ways to show how DOJ and the FBI think of the events of the last 18 months, I wanted to do a second version including all the things we have learned since.

For comparison, here are the warrants for Reality Winner and Josh Schulte, both of which were also, at least in part, warrants for a 793 investigation. Here are warrants to search Roger Stone and Oath Keeper Jeremy Brown’s houses, both Federal searches in Florida related to investigations conducted in DC (the search of Brown’s house even found allegedly classified documents, albeit only at the Secret level). Stone’s showed probable cause for a different part of the obstruction statute. Here’s the warrant Robert Mueller’s team used to get Michael Cohen’s Trump Organization emails from Microsoft.

Cover Sheet to Warrant Application

[link]

This cover sheet shows that DOJ swore out the affidavit to Magistrate Judge Bruce Reinhart over WhatsApp, who signed it on August 5.

It describes applying for a warrant to search for evidence of crimes and for contraband (a reference to the illegally possessed Presidential records). It doesn’t permit the seizure of property used in the commission of a crime so, unsurprisingly, the FBI didn’t have authority to seize Mar-a-Lago.

The cover sheet describes the three crimes under investigation this way.

The Search Warrant

[link]

The search warrant notes the docket number 22-mj-8332 that the entire country has been watching for 10 days now.

The search warrant authorizes the FBI to conduct a search of 1100 S. Ocean Blvd., Palm Beach, FL.

It was signed by Reinhart, who was the Duty Magistrate, at 12:12PM on August 5.

The warrant gave the FBI two weeks, until August 19, to conduct the search and limited the search to daytime hours (defined as 6AM to 10PM, which Trumpsters often complain amounts to a pre-dawn raid).

Attachment A

[link]

Attachment A describes Mar-a-Lago as a “resort, club, and residence” with approximately 58 bedrooms and 33 bathrooms. The warrant permitted the FBI to search all parts of Mar-a-Lago accessible to Trump (whom they refer to as FPOTUS) and his staff, except those currently occupied (at the time of the search) by Members or guests. It mentioned the “45 Office” explicitly and storage rooms, but did not describe the storage room at the center of much reporting on the search.

Attachment B

[link]

Attachment B authorized the FBI to seize “documents and records constituting evidence, contraband, fruits of crime, or other items illegally possessed” in violation of 18 USC 793, 18 USC 2071, or 18 USC 1519.

This post describes the search protocol authorized in Attachment B, with nifty graphic.

Return

Search warrant forms have a return form (describing what was seized) included in them. But here, the FBI provided that list to Trump in the form of two receipts, one signed by a Supervisory Special Agent, and one signed by a Special Agent; I’ve dubbed the latter the “CLASS receipt,” because all the classified documents described are included on that one.

The receipt lists:

  • 27 boxes, one of which is described as leatherbound; 11 are described to contain documents marked classified
  • Executive grant of clemency for Roger Stone
  • Potential Presidential record
  • 2 binders of photos
  • Handwritten note
  • Other documents catalogued on the SSA receipt

See these two posts for more on the significance of the two different receipts.

Christina Bobb signed for both receipts at 6:19PM on August 8.

Affidavit

This would start with:

  • Several paragraphs describing the affiant’s background and training
  • An assertion that the affiant believed there was probable cause that the FBI would find evidence of violations of 18 USC 793, 18 USC 2071, and 18 USC 1519 at Mar-a-Lago.

Particularly given the novel legal issues implicating a search of the former President, I think there’s likely a section describing the statutes involved. It’s likely to include:

Note: If there’s a version of this statutory language, it may be among the things DOJ would acquiesce to releasing, particularly if it implied that Trump was under investigation for stealing nuclear documents. But they might be unwilling to do that if they’re not yet sure they’ve gotten all known nuclear documents back. 

Then there’d be a section describing who was involved (the Roger Stone warrant has such paragraphs). There will be a paragraph about Trump that looks like:

Donald J. Trump (Former President of the United States, FPOTUS) is a businessman who owns and resides at 1100 S. Ocean Blvd., Palm Beach, FL. From January 20, 2017 at 12:00PM until January 20, 2021 at 12:00PM, he was the President of the United States. He ceased exercising the constitutional authorities of the President at 12:00PM on January 20, 2021. On February 5, 2021, the current President of the United States, Joe Biden, discontinued classified briefings for FPOTUS.

In addition, there are likely descriptions of the National Archives and its statutory duties.

There may be descriptions of Patrick Philbin, Pat Cipollone, Mark Meadows (all of whom were involved in negotiations with NARA over retrieving the documents), anyone caught on surveillance video entering or exiting the storage closet, of Kash Patel and John Solomon (including past security concerns raised about both), and the Trump lawyers involved in the June meeting.

There may be a paragraph describing MAL in more depth. It might describe the SCIF used during Trump’s presidency and its apparent removal. It might describe the arrest and prosecution of Yujing Zhang, who breached MAL and might include other known foreign intelligence targeting of MAL. It might describe Trump’s refusal to use secure facilities at MAL, including a 2017 meeting with Shinzo Abe, though it would likely rely on public reports for this, not classified intelligence. It might describe the tunnels underneath and — and the public availability of historic diagrams of them. It might describe the known employees at MAL, including any foreign citizens. Finally, it might describe both the terms of membership and the ease with which others could access the golf club.

Timeline

The rest is probably a timeline of the investigation. The following known details are likely to appear.

On December 30, 2020, DOJ provided Trump a binder of material from the Russian investigation.

On January 8, 2021, Mike Ellis attempted to retain a compartmented NSA report for White House archives, initially refusing efforts to return it.

On January 14, 2021, the White House returned the compartmented NSA report to NSA.

On January 17, 2021, the FBI provided a list of continuing objections to Trump’s declassification of Crossfire Hurricane materials.

On January 19, 2021, via letter to Archivist of the United States David Ferriero, FPOTUS designated (among others) Pasquale (Pat) Cipollone and Patrick Philbin as his representatives with the NARA.

On January 19, 2021, FPOTUS wrote a letter authorizing the declassification of records pertaining to FBI’s investigation into Russian ties with FPOTUS’ campaign that had not yet been declassified. Patel later described the materials to include:

transcripts of intercepts made by the FBI of Trump aides, a declassified copy of the final FISA warrant approved by an intelligence court, and the tasking orders and debriefings of the two main confidential human sources, Christopher Steele and Stefan Halper, the bureau used to investigate whether Trump had colluded with Russia to steal the 2016 election.

Patel’s description appears to conflict with Trump’s order, which explicitly, “does not extend to materials that must be protected from disclosure pursuant to orders of the Foreign Intelligence Surveillance Court.”

On January 20, 2021, Meadows sent “The Attorney General” a memo, citing the January 19 order from FPOTUS, ordering “the Department must expeditiously conduct a Privacy Act review under the standards that the Department of Justice would normally apply, redact material appropriately, and release the remaining material with redactions applied.”

On January 20, 2021, FPOTUS ceased exercising the authorities of the President of the United States.

On January XX, records deemed to be the final production of Presidential Records arrived at NARA.

The affidavit would describe the inventorying process and then describe known documents that were not included.

  • Love letters from Kim Jong Un
  • Altered map of Hurricane Dorian

It would also include a description of evidence of document destruction, including any evidence those records pertained to a Congressional investigation, impeachment, or a criminal investigation.

Starting on May 6, 2021, NARA General Counsel Gary Stern communicated with Philbin regarding the missing records. [This will cite the date of each communication and quote anything that captures Trump’s refusal to return the documents.]

Having not secured identified records, starting in Fall 2021, Stern communicated with Trump attorney (probably Cipollone) to arrange turning over the records.

October 18, 2021: Trump sues to prevent the Archives from complying with January 6 Committee subpoena.

November 10, 2021: Judge Tanya Chutkan denies Trump’s motion for an injunction against NARA. (While it wouldn’t appear in the affidavit, in recent days Paul Sperry has claimed that Trump withheld documents to prevent NARA from turning them over to the January 6 Committee.)

On December XX, 2021, XX informed NARA certain missing records had been located.

December 9, 2021: DC Circuit upholds Judge Chutkan’s decision releasing Trump records to the January 6 Committee.

On January 17, 2022, NARA retrieved 15 boxes of Records from 1100 S. Ocean Blvd, Palm Beach, FL.

January 19, 2022: SCOTUS upholds Chutkan’s decision.

On January 31, 2022, NARA completed an initial inventory of the retrieved documents. It discovered over 100 documents with classification markings, comprising more than 700 pages. Some include the highest levels of classification, including Special Access Program (SAP) material.

On February xx (possibly February 8), 2022, NARA reported FPOTUS’ failures to comply with the Presidential Records Act to the Department of Justice and requested an investigation.

DOJ and FBI likely conducted interviews between February and May, which would be listed.

On April 11, 2022, Biden’s White House Counsel instructed NARA provide FBI access to the 15 boxes of materials returned from Mar-a-Lago.

On April 12, 2022, NARA instructed the Trump team of that decision, and informing him that the FBI would start to access the documents on April 18.

On April XX, Trump’s attorneys ask the White House counsel for more time before the review of the documents; Biden extends the date to April 29.

On May 5, 2022, Corcoran proposed reviewing the records at NARA.

On May 5, 2022, Kash Patel made public claims that the contents of materials returned to NARA had been declassified, describing that FPOTUS wanted to release,

information that Trump felt spoke to matters regarding everything from Russiagate to the Ukraine impeachment fiasco to major national security matters of great public importance — anything the president felt the American people had a right to know is in there and more.

FBI conducted early interviews during this period, likely including Philbin, Scott Gast, Derek Lyons, and Cipollone, and possibly Mark Meadows. Philbin and Cipollone would have described their own inspections of records, including their knowledge that identified missing records had been at MAL when they had conducted records searches.

FBI would include multiple interviews of people describing Trump saying the Presidential Records belonged to him.

On May 10, 2022, Acting Archivist informed Evan Corcoran the FBI would get access to the records on May 12.

On May 11, 2022, FBI subpoenaed Trump for documents remaining at Mar-a-Lago bearing classification marks.

On May 12, pursuant to a subpoena, FBI accessed the 15 boxes turned over in January.

From May 16-18, FBI conducted a preliminary review of. the documents and discovered:

  • 67 Confidential documents
  • 92 Secret documents
  • 25 Top Secret documents
  • Documents marked HCS, FISA, ORCON, NOFORN, and SI
  • Handwritten notes

On May XX, 2022, DOJ subpoenaed FPOTUS for any remaining documents bearing classification marks.

Surveillance video from this period, later obtained with a subpoena, showed people moving documents in and out of the storage room. The people and dates would be included.

On June 3, 2022, Jay Bratt and three investigators met with Evan Corcoran and Christina Bobb to collect the subpoenaed materials.

  • FPOTUS joined the meeting and acknowledged the effort to retrieve classified materials.
  • Bobb and Corcoran provided XX documents marked with classification marks.
  • One of the lawyers signed an attestation that all classified documents had been turned over.
  • Bratt informed Bobb and Corcoran all records covered by the Presidential and Federal Records Act were US government property.
  • Bratt informed Bobb and Corcoran about the regulations guiding storage of classified records.
  • Bratt and investigators inspect storage facility, find storage facility fails to meet required standards for storage.

On June 8, Bratt emailed Corcoran. He said, in part, that,

We ask that the room at Mar-a-Lago where the documents had been stored be secured and that all the boxes that were moved from the White House to Mar-a-Lago (along with any other items in that room) be preserved in that room in their current condition until further notice

It’s likely either at the meeting on June 3 or in the email, Bratt also informed Corcoran that the storage closet did not comply with CFR guidelines.

On June 9, Corcoran wrote saying only, “I write to acknowledge receipt of this letter.”

On June 19, FPOTUS sent a letter to NARA designating Patel and Solomon as representatives to access “Presidential records of my administration.”

NARA, possibly Gary Stern, likely informed DOJ of the designation of Patel and Solomon and (probably) Trump’s reference to “Presidential records,” generally, not records at NARA.

On June 22, DOJ subpoenaed surveillance video of the storage closet for a 60-day period. Analysis of the video showed uncleared people entering in and out of the storage closet.

DOJ likely had follow-up interviews after the Bratt meeting and the surveillance video return, in part to identify who had access to the storage closet and to identify documents believed to remain outstanding.

The affidavit would include a description of known documents that remain extant, including documents that were altered or mutilated (perhaps transcripts of Trump’s meetings with Russia) and known classified documents, including those pertaining to nuclear weapons. 

Finally, the affidavit would include a conclusion stating that all this amounts to probable cause that Trump was in possession of documents that were covered by the PRA, some subset of which were believed to be classified and some other subset of which had either been hidden or damaged in an effort to obstruct either this or other investigations.

emptywheel Trump Espionage coverage

Trump’s Timid (Non-Legal) Complaints about Attorney-Client Privilege

18 USC 793e in the Time of Shadow Brokers and Donald Trump

[from Rayne] Other Possible Classified Materials in Trump’s Safe

Trump’s Stolen Documents

John Solomon and Kash Patel May Be Implicated in the FBI’s Trump-Related Espionage Act Investigation

[from Peterr] Merrick Garland Preaches to an Overseas Audience

Three Ways Merrick Garland and DOJ Spoke of Trump as if He Might Be Indicted

The Legal and Political Significance of Nuclear Document[s] Trump Is Suspected to Have Stolen

Merrick Garland Calls Trump’s Bluff

Trump Keeps Using the Word “Cooperate.” I Do Not Think That Word Means What Trump Wants the Press To Think It Means

[from Rayne] Expected Response is Expected: Trump and Right-Wing DARVO

DOJ’s June Mar-a-Lago Trip Helps Prove 18 USC 793e

The Likely Content of a Trump Search Affidavit

All Republican Gang of Eight Members Condone Large-Scale Theft of Classified Information, Press Yawns

Some Likely Exacerbating Factors that Would Contribute to a Trump Search

FBI Executes a Search Warrant at 1100 S Ocean Blvd, Palm Beach, FL 33480

The ABCs (and Provisions e, f, and g) of the Espionage Act

Trump’s Latest Tirade Proves Any Temporary Restraining Order May Come Too Late

How Trump’s Search Worked, with Nifty Graphic

Pat Philbin Knows Why the Bodies Are Buried

Rule of Law: DOJ Obtained Trump’s Privilege-Waived Documents in May

The French President May Be Contained Inside the Roger Stone Clemency

Which of the Many Investigations Trump Has Obstructed Is DOJ Investigating?

The Known and Likely Content of Trump’s Search Warrant

Trump’s Timid (Non-Legal) Complaints about Attorney-Client Privilege

/165 Comments/in , /by

Yesterday, I observed that the FBI gave the former President two different receipts for the search on his golf resort.

There’s the one consisting of five boxes and a separate category, “Documents,” not associated with any boxes, signed by the Supervisory Special Agent. There are no classified documents described. I’ll refer to that as the SSA Receipt in this post.

Then there’s the one that consists of 27 items, mostly boxes, many with sub-items, which are often descriptions of the kinds of classified documents contained in the box or the leather case they were seized in. It was signed by a Special Agent. I’ll refer to that as the CLASS Receipt in this post.

I suggested that one explanation for providing Trump two separate receipts might be if the SSA receipt covered evidence showing Trump violated 18 USC 1519, destruction, alteration, or falsification of records in Federal investigations, and the CLASS receipt covered evidence showing Trump violated 18 USC 793, retaining national defense information under the Espionage Act. I argued the two receipts would cover evidence responsive to crimes that might be charged in different venues, DC for the obstruction charge and SDFL for the Espionage charge.

The third statute on Trump’s warrant, 18 USC 2071, removal of official records would cover everything covered by the Presidential Records Act and would generally backstop everything seized under the other two statutes. It covers both. Consider it an umbrella charge.

Today Trump, in the form of a post on Truth Social and related stories shared to Trump-friendly media, has confirmed I’m right that there’s significance to the two separate receipts.

Trump-friendly outlets have explained that “the former president’s team was informed” that the materials seized via what I’ve called the SSA receipt “contain information covered by attorney-client privilege” but that DOJ “opposed Trump lawyers’ request for the appointment of an independent, special master to review the records.”

The FBI seized boxes containing records covered by attorney-client privilege and potentially executive privilege during its raid of former President Trump’s Mar-a-Lago home, sources familiar with the investigation told Fox News, adding that the Justice Department opposed Trump lawyers’ request for the appointment of an independent, special master to review the records.

Sources familiar with the investigation told Fox News Saturday that the former president’s team was informed that boxes labeled A-14, A-26, A-43, A-13, A-33, and a set of documents—all seen on the final page of the FBI’s property receipt —contained information covered by attorney-client privilege.

[snip]

Sources told Fox News that some records could be covered by executive privilege, which gives the president of the United States and other officials within the executive branch the authority to withhold certain sensitive forms of advice and consultation between the president and senior advisers.

I believe there must be some truth to this because if Trump were making completely unsubstantiated claims, he would have made it more generally, claiming that all the boxes must include attorney-client privileged material. Furthermore, Trump’s claims to have watched the search via CCTV notwithstanding, it is highly unlikely Trump has CCTV coverage of his own office, bedroom, and a random storage closet such that he would know what’s in box A-14 (and so on the SSA receipt) versus what’s in box A-15 (which was on the CLASS receipt). Someone who knows the outcome of the search told Trump that one set, but not the other, has materials that are attorney-client privileged. That has to come from the government.

That doesn’t mean my larger hypothesis — that one receipt covered violations of the Espionage Act and the other covered obstruction — has been vindicated. On the contrary, DOJ may simply have chosen to put all records that include an attorney-client claim on a separate receipt so that, if Trump obtains a competent lawyer and demands the Special Master review he’s making a half-hearted request for now, DOJ can move forward with all the other evidence without a 9-month delay like the Special Master review of Rudy Giuliani’s phones necessitated. It would be a clever way of dealing with a very sensitive legal issue.

But I don’t think it’s as simple as that either. Bizarrely, Trump knows something about those boxes such that he’s trying to claim Executive Privilege, in addition to attorney-client privilege.

It’s a nonsense claim, legally. Probably every single box seized last Monday has materials covered by Executive Privilege in them, because every single box would include communications directly with Trump. But there is absolutely no basis for any EP claim for a single thing seized from Mar-a-Lago because the Presidential Records Act underlying the seizure is designed, specifically and especially, to make sure all the EP materials are preserved for history. It’s one of the reasons his refusal to turn over the materials that the Archives were asking for specifically is so insanely stupid, because it gave FBI no choice but to come seize this stuff. Trump’s not making an EP claim to try to delay DOJ’s access to the 27 items, which are mostly boxes, on the CLASS receipt. So he must have learned something about the materials itemized in the SSA receipt to which, in a frantic and transparently silly effort, he’s trying to delay DOJ’s access.

Trump’s announcement that the material on the SSA receipt seems to rule out another possible explanation for the SSA receipt I had been pondering, that it covered the materials that were particularly sensitive from a national security perspective, such as the information on nuclear weapons.

And it doesn’t rule out my hypothesis that that material was seized in the obstruction investigation. Indeed, in two ways, it might corroborate my hypothesis.

There are two theories of the 1519 charge. One, which NYU’s Ryan Goodman is championing, suspects it is about the investigation into Mar-a-Lago, criminalizing the effort in June to withhold materials. If that were the significance of the 1519 charge, separating out the communications between lawyers and NARA and DOJ might make sense, since those would be communications into this investigation. That said, there’d be no basis for an EP claim for any of that, since it all post-dated Trump’s ouster. And as soon as DOJ confirmed that some classified material had been knowingly withheld in June when his lawyers told DOJ that it was all turned over, there’d be a crime-fraud exception for those materials.

My theory of the 1519 charge — that it arose out of NARA’s discovery that Trump had attempted to destroy materials subpoenaed in past and present investigations — would similarly be likely to have attorney-client privileged documents. Take a few examples:

  • One thing Trump is likely to have withheld is the Perfect Transcript between him and Volodymyr Zelenskyy, which is something Congress was entitled to get during impeachment. That transcript was hidden from Congress by White House lawyer John Eisenberg, among other lawyers, thereby according the transcript a weak privilege claim, but one easily overcome by the obstructive nature of the choice to withhold it.
  • Another set of things we know were withheld from several investigations were documents showing sustained communications with Russia that should have been turned over by the Trump Organization. The most provable of those were the communications between Michael Cohen and Dmitri Peskov’s office in January 2016 (Mueller got his own copy via Microsoft). There’s probably correspondence regarding an invite Russian Deputy Prime Minister Sergei Prikhodko extended to Trump to attend Putin’s St. Petersburg Economic Forum in June 2016. The Trump Organization did not produce to SSCI the copy of Paul Manafort’s Securing the Victory email he sent to Rhona Graff. The subpoena response on all these issues was handled by Trump’s corporate lawyers, Alan Futerfas and Alan Garten, and so would be privileged — but also crime-fraud excepted — evidence that Trump obstructed various Russian investigations.
  • While one draft of Trump’s termination letter to Jim Comey was ultimately turned over to Mueller (after reports that the only extant copy was one preserved by DOJ lawyers), the Mueller Report narrative surrounding it makes it clear that Trump and Stephen Miller worked over several drafts before the one shared with others. Those earlier drafts were likely not turned over, in part because White House Counsel lawyers advised Trump that these drafts should “[n]ot [see the] light of day.” Again, that’s legal advice, but also proof of documents that were illegally withheld from the Mueller investigation.
  • I don’t want to even imagine what advice from Rudy Giuliani that Trump has withheld from various investigations, particularly pertaining to January 6. Most of that would be (shitty) legal advice. If it was also withheld from proper investigations, though, it’d also be proof of obstruction under 18 USC 1519.

In other words, aside from the documents Trump tried to rip up or eat or flush, many of Trump’s known violations of 18 USC 1519 would involve lawyers directly. Virtually every investigation into Trump was stymied by improper decisions by lawyers. And those withheld documents would once have been privileged, but they’d also be solid proof of obstruction.

And if Trump had reason to believe that DOJ, after predicating an investigation on all the evidence Trump had tried to rip up or eat or flush evidence, had sought and seized all the attorney-client protected materials that had insulated Trump from consequences for his past actions, it might explain one of the biggest puzzles from the last week. For some reason, Trump has worked far harder to obscure that this obstruction investigation exists than that he’s under investigation for a crime with the word “Espionage” in the title. For some reason, Trump is more afraid of the obstruction investigation than the Espionage Act investigation.

One possible explanation for that is that he fears the other secrets he’s been keeping more than proof that he stole a bunch of otherwise innocuous Top Secret documents.

Perhaps the most interesting thing about this latest complaint — first voiced on the 7th day after the search — is it shows that DOJ is in contact with someone presenting themself as Trump’s lawyer.

That’s not surprising. DOJ informed Trump of the search. Even for a simple criminal case into attempting to steal the election (assuming Trump could find someone who would confess to be his lawyer), DOJ would want to have discussions about how to proceed.

In this case, however, the crimes under investigation include, at a minimum, violations of the Espionage Act. DOJ always tries to find a way to resolve those from the get-go, because prosecutions about stolen classified information are always damaging to the equities you’re trying to protect. That’s all the more true in the unprecedented case where the suspect is the former President. At a minimum, DOJ likely has or will float Trump the offer of an offramp like an 18 USC 2701 guilty plea if he cooperates to tell the government about the whereabouts of all the classified documents he stole.

And if what Trump is trying to hide in the obstruction investigation is even more damning, as his behavior suggests it might be, DOJ might actually have enough leverage to make Donny to consider such an offer.

Still, the legal quiet has been making me nervous. I have been waiting all week for a docket to spring up with a Trump motion for a Temporary Restraining Order stalling any access to these files.

For comparison, the docket on a similar challenge from Michael Cohen in 2018 was created just 4 days after the search of his residences, and the discussions about the search began that same day.

On the same day as the seizures (April 9, 2018), the undersigned counsel requested in writing that the U.S. Attorney’s Office for the SDNY return all of the seized property and allow Mr. Cohen and his attorneys the opportunity to screen the materials for privilege, produce any relevant, non-privileged documents to the government, and provide a log of any documents withheld on privilege grounds. Id., ¶ 32, Ex. A. On Wednesday, April 11, 2018, the government responded by letter, rejecting defense counsel’s proposal and informing defense counsel that the government would begin to review the materials at noon on Friday, April 13, 2018. Id. ¶ 33, Ex. B. Accordingly, Mr. Cohen hereby moves for immediate injunctive and equitable relief seeking the opportunity to have his counsel review the seized documents in the first instance, before any review by any law enforcement personnel, for privilege and responsiveness, and, if the Court believes it necessary, for the appointment of a Special Master to supervise that review process.

Trump moved to intervene that same day, April 13, just four days after the seizures.

In the case of the search on Rudy’s phones, SDNY itself asked for a Special Master the next day (though Trump never intervened).

There have to be similar discussions going on now. There just have to be. Trump’s paucity of lawyers — and the conflict posed by the possibility that Evan Corcoran, his most competent current defense attorney, may be conflicted out by dint of having signed an affirmation that Trump turned over all his classified documents in June — cannot explain a full week delay.

But thus far, in spite of every media outlet and their mother filing motions to unseal the search affidavit itself, no one has started pushing to unseal an inevitable fight over access to the seized material. (Again, by comparison, the NYT filed to intervene the day the Cohen warrant docket was made public.)

So for whatever reasons, a full week has elapsed since a lawful search executed on the golf resort of the former President and the first we’re learning about legal discussions — aside from NYT’s revelation that Trump made a veiled threat against Merrick Garland on Thursday — is Trump’s complaint covering just the documents that don’t seem to implicate the Espionage Act.

Something has caused that discussion to remain sealed. And that, by itself, is remarkable.

Update: As klynn reminds in comments, another document that the Trump White House altered was the MemCon of the meeting between Trump and Sergey Lavrov in which he gave the Russians highly sensitive intelligence. I laid out what we know of that alteration, the fall-out, and Mueller’s investigation into it here. If my theory about the SSA receipt is right, that any remaining unaltered record of the meeting found at MAL would be on the SSA receipt. Except the alterations, in this case, are not yet known to involve an attorney, so would not be attorney-client privileged.

emptywheel Trump Espionage coverage

Trump’s Timid (Non-Legal) Complaints about Attorney-Client Privilege

18 USC 793e in the Time of Shadow Brokers and Donald Trump

[from Rayne] Other Possible Classified Materials in Trump’s Safe

Trump’s Stolen Documents

John Solomon and Kash Patel May Be Implicated in the FBI’s Trump-Related Espionage Act Investigation

[from Peterr] Merrick Garland Preaches to an Overseas Audience

Three Ways Merrick Garland and DOJ Spoke of Trump as if He Might Be Indicted

The Legal and Political Significance of Nuclear Document[s] Trump Is Suspected to Have Stolen

Merrick Garland Calls Trump’s Bluff

Trump Keeps Using the Word “Cooperate.” I Do Not Think That Word Means What Trump Wants the Press To Think It Means

[from Rayne] Expected Response is Expected: Trump and Right-Wing DARVO

DOJ’s June Mar-a-Lago Trip Helps Prove 18 USC 793e

The Likely Content of a Trump Search Affidavit

All Republican Gang of Eight Members Condone Large-Scale Theft of Classified Information, Press Yawns

Some Likely Exacerbating Factors that Would Contribute to a Trump Search

FBI Executes a Search Warrant at 1100 S Ocean Blvd, Palm Beach, FL 33480

[Photo: National Security Agency, Ft. Meade, MD via Wikimedia]

18 USC 793e in the Time of Shadow Brokers and Donald Trump

/112 Comments/in , , , /by

Late last year, a Foreign Affairs article by former Principal Deputy Director of National Intelligence Sue Gordon and former DOD Chief of Staff Eric Rosenbach asserted that the files leaked in 2016 and 2017 by Shadow Brokers came from two NSA officers who brought the files home from work.

In two separate incidents, employees of an NSA unit that was then known as the Office of Tailored Access Operations—an outfit that conducts the agency’s most sensitive cybersurveillance operations—removed extremely powerful tools from top-secret NSA networks and, incredibly, took them home. Eventually, the Shadow Brokers—a mysterious hacking group with ties to Russian intelligence services—got their hands on some of the NSA tools and released them on the Internet. As one former TAO employee told The Washington Post, these were “the keys to the kingdom”—digital tools that would “undermine the security of a lot of major government and corporate networks both here and abroad.”

One such tool, known as “EternalBlue,” got into the wrong hands and has been used to unleash a scourge of ransomware attacks—in which hackers paralyze computer systems until their demands are met—that will plague the world for years to come. Two of the most destructive cyberattacks in history made use of tools that were based on EternalBlue: the so-called WannaCry attack, launched by North Korea in 2017, which caused major disruptions at the British National Health Service for at least a week, and the NotPetya attack, carried out that same year by Russian-backed operatives, which resulted in more than $10 billion in damage to the global economy and caused weeks of delays at the world’s largest shipping company, Maersk. [my emphasis]

That statement certainly doesn’t amount to official confirmation that that’s where the files came from (and I’ve been told that the scope of the files released by Shadow Brokers would have required at least one more source). But the piece is as close as anyone with direct knowledge of the matter — as Gordon would have had from the aftermath — has come to confirming on the record what several strands of reporting had laid out in 2016 and 2017: that the NSA files that were leaked and then redeployed in two devastating global cyberattacks came from two guys who brought highly classified files home from the NSA.

The two men in question, Nghia Pho and Hal Martin, were prosecuted under 18 USC 793e, likely the same part of the Espionage Act under which the former President is being investigated. Pho (who was prosecuted by Thomas Windom, one of the prosecutors currently leading the fake elector investigation) pled guilty in 2017 and was sentenced to 66 months in prison; he is processing through re-entry for release next month. Martin pled guilty in 2019 and was sentenced to 108 months in prison.

The government never formally claimed that either man caused hostile powers to obtain these files, much less voluntarily gave them to foreign actors. Yet it used 793e to hold them accountable for the damage their negligence caused.

There has never been any explanation of how the files from Martin would have gotten to the still unidentified entity that released them.

But there is part of an explanation how files from Pho got stolen. WSJ reported in 2017 that the Kaspersky Anti-Virus software Pho was running on his home computer led the Russian security firm to discover that Pho had the NSA’s hacking tools on the machine. Somehow (the implication is that Kaspersky alerted the Russian government) that discovery led Russian hackers to subsequently target Pho’s computer and steal the files. In response to the WSJ report, Kaspersky issued their own report (here’s a summary from Kim Zetter). It acknowledged that Kaspersky AV had pulled in NSA tools after triggering on a known indicator of NSA compromise (the report claimed, and you can choose to believe that or not, that Kaspersky had deleted the most interesting parts of the files obtained). But it also revealed that in that same period, Pho had briefly disabled his Kaspersky AV and downloaded a pirated copy of Microsoft Office, which led to at least one backdoor being loaded onto his computer via which hostile actors would have been able to steal the NSA’s crown jewels.

Whichever version of the story you believe, both confirm that Kaspersky AV provided a way to identify a computer storing known NSA hacking tools, which then led Pho — someone of sufficient seniority to be profiled by foreign intelligence services — to be targeted for compromise. Pho didn’t have to give the files he brought home from work to Russia and other malicious foreign entities. Merely by loading them onto his inadequately protected computer and doing a couple of other irresponsible things, he made the files available to be stolen and then used in one of the most devastating information operations in history. Pho’s own inconsistent motives didn’t matter; what mattered was that actions he took made it easy for malicious actors to pull off the kind of spying coup that normally takes recruiting a high-placed spy like Robert Hanssen or Aldrich Ames.

In the aftermath of the Shadow Brokers investigation, the government’s counterintelligence investigators may have begun to place more weight on the gravity of merely bringing home sensitive files, independent of any decision to share them with journalists or spies.

Consider the case of Terry Albury, the FBI Agent who shared a number of files on the FBI’s targeting of Muslims with The Intercept. As part of a plea agreement, the government charged Albury with two counts of 793e, one for a document about FBI informants that was ultimately published by The Intercept, and another (about an online terrorist recruiting platform) that Albury merely brought home. The government’s sentencing memo described the import of files he brought home but did not share with The Intercept this way:

The charged retention document relates to the online recruitment efforts of a terrorist organization. The defense asserts that Albury photographed materials “to the extent they impacted domestic counter-terrorism policy.” (Defense Pos. at 37). This, however, ignores the fact that he also took documents relating to global counterintelligence threats and force protection, as well as many documents that implicated particularly sensitive Foreign Intelligence Surveillance Act collection. The retention of these materials is particularly egregious because Albury’s pattern of behavior indicates that had the FBI not disrupted Albury and the threat he posed to our country’s safety and national security, his actions would have placed those materials in the public domain for consumption by anyone, foreign or domestic.

And in a declaration accompanying Albury’s sentencing, Bill Priestap raised the concern that by loading some of the files onto an Internet-accessible computer, Albury could have made them available to entities he had no intention of sharing them with.

The defendant had placed certain of these materials on a personal computing device that connects to the Internet, which creates additional concerns that the information has been or will be transmitted or acquired by individuals or groups not entitled to receive it.

This is the scenario that, one year earlier, was publicly offered as an explanation for the theft of the files behind The Shadow Brokers; someone brought sensitive files home and, without intending to, made them potentially available to foreign hackers or spies.

Albury was sentenced to four years in prison for bringing home 58 documents, of which 35 were classified Secret, and sending 25 documents, of which 16 were classified Secret, to the Intercept.

Then there’s the case of Daniel Hale, another Intercept source. Two years after the Shadow Brokers leaks (and five years after his leaks), he was charged with five counts of taking and sharing classified documents, including two counts of 793e tied to 11 documents he took and shared with the Intercept. Three of the documents published by The Intercept were classified Top Secret.

Hale pled guilty last year, just short of trial. As part of his sentencing process, the government argued that the baseline for his punishment should start from the punishments meted to those convicted solely of retaining National Defense Information. It tied Hale’s case to those of Martin and Pho explicitly.

Missing from Hale’s analysis are § 793 cases in which defendants received a Guidelines sentence for merely retaining national defense information. See, e.g., United States v. Ford, 288 F. App’x 54, 61 (4th Cir. 2008) (affirming 72-month sentence for retention of materials classified as Top Secret); United States v. Martin, 1:17-cr-69-RDB) (D. Md. 2019) (nine-year sentence for unlawful retention of Top Secret information); United States v. Pho, 1:17-cr-00631 (D. Md. 2018) (66-month sentence for unlawful retention of materials classified as Top Secret). See also United States v. Marshall, 3:17-cr-1 (S.D. TX 2018) (41-month sentence for unlawful retention of materials classified at the Secret level); United States v. Mehalba, 03-cr-10343-DPW (D. Ma. 2005) (20-month sentence in connection with plea for unlawful retention – not transmission – in violation of 793(e) and two counts of violating 18 U.S.C. 1001; court departed downward due to mental health of defendant).

Hale is more culpable than these defendants because he did not simply retain the classified documents, but he provided them to the Reporter knowing and intending that the documents would be published and made available to the world. The potential harm associated with Hale’s conduct is far more serious than mere retention, and therefore calls for a more significant sentence. [my emphasis]

Even in spite of a moving explanation for his actions, Hale was sentenced to 44 months in prison. Hale still has almost two years left on his sentence in Marion prison.

That focus on other retention cases from the Hale filing was among the most prominent national references to yet another case of someone prosecuted during the Trump Administration for taking classified files home from work, that of Weldon Marshall. Over the course of years of service in the Navy and then as a contractor in Afghanistan, Marshall shipped hard drives of classified materials home.

From the early 2000s, Marshall unlawfully retained classified items he obtained while serving in the U.S. Navy and while working for a military contractor. Marshall served in the U.S. Navy from approximately January 1999 to January 2004, during which time he had access to highly sensitive classified material, including documents describing U.S. nuclear command, control and communications. Those classified documents, including other highly sensitive documents classified at the Secret level, were downloaded onto a compact disc labeled “My Secret TACAMO Stuff.” He later unlawfully stored the compact disc in a house he owned in Liverpool, Texas. After he left the Navy, until his arrest in January 2017, Marshall worked for various companies that had contracts with the U.S. Department of Defense. While employed with these companies, Marshall provided information technology services on military bases in Afghanistan where he also had access to classified material. During his employment overseas, and particularly while he was located in Afghanistan, Marshall shipped hard drives to his Liverpool home. The hard drives contained documents and writings classified at the Secret level about flight and ground operations in Afghanistan. Marshall has held a Top Secret security clearance since approximately 2003 and a Secret security clearance since approximately 2002.

He appears to have been discovered when he took five Cisco switches home. After entering into a cooperation agreement and pleading guilty to one count of 793e, Marshall was (as noted above) sentenced to 41 months in prison. Marshall was released last year.

Outside DOJ, pundits have suggested that Trump’s actions are comparable to those of Sandy Berger, who like Trump stole files that belong to the National Archives and after some years pled guilty to a crime that Trump since made into a felony, or David Petraeus, who like Trump took home and stored highly classified materials in unsecured locations in his home. Such comparisons reflect the kind of elitist bias that fosters a system in which high profile people believe they are above the laws that get enforced for less powerful people.

But the cases I’ve laid out above — particularly the lesson Pho and Martin offer about how catastrophic it can be when someone brings classified files home and stores them insecurely, no matter their motives — are the background against which career espionage prosecutors at DOJ will be looking at Trump’s actions.

And while Trump allegedly brought home paper documents, rather than the digital files that Russian hackers could steal while sitting in Moscow, that doesn’t make his actions any less negligent. Since he was elected President, Mar-a-Lago became a ripe spying target, resulting in at least one prosecution. And two of the people he is most likely to have granted access to those files, John Solomon and Kash Patel, each pose known security concerns. Trump has done the analog equivalent of what Pho did: bring the crown jewels to a location already targeted by foreign intelligence services and store them in a way that can be easily back-doored. Like Pho, it doesn’t matter what Trump’s motivation for doing so was. Having done it, he made it ridiculously easy for malicious actors to simply come and take the files.

Under Attorneys General Jeff Sessions and Bill Barr, DOJ put renewed focus on prosecuting people who simply bring home large caches of sensitive documents. They did so in the wake of a costly lesson showing that the compromise of insecurely stored files can do as much damage as a high level recruited spy.

It’s a matter of equal justice that Trump be treated with the same gravity with which Martin and Pho and Albury and Hale and Marshall were treated under the Trump Administration, for doing precisely what Donald Trump is alleged to have done (albeit with far fewer and far less sensitive documents). But as the example of Shadow Brokers offers, it’s also a matter of urgent national security.

Obstruction: The Two-Receipt Search of the Former President’s Golf Resort

/199 Comments/in , , , /by

There are two separate receipts for the search of Mar-a-Lago signed, in the same minute, by Trump lawyer Christina Bobb.

There’s the one consisting of five boxes and a separate category, “Documents,” not associated with any boxes, signed by the Supervisory Special Agent. There are no classified documents described. I’ll refer to that as the SSA Receipt in this post.

Then there’s the one that consists of 27 items, mostly boxes, many with sub-items, which are often descriptions of the kinds of classified documents contained in the box or the leather case they were seized in. It was signed by a Special Agent. I’ll refer to that as the CLASS Receipt in this post.

Bobb signed them both at 6:19PM, so unless she’s a shitty lawyer, these receipts were presented to her together as one running receipt.

Whatever else the FBI is, their searches are methodical. They come in, secure the location, serially take pictures of the rooms being searched (so the criminal suspects don’t claim evidence was planted, as criminal suspects are wont to do), label the things to be searched, start sorting through items according to a search protocol to see if they’re covered by the warrant, then inventory the things being seized. In this case, there would have been another part of the process to make sure no attorney-client privileged materials were seized.

In the search of Trump’s house, at least 73 boxes appear to have been labeled (based on the highest box label number), but just 26 boxes were seized.

By all appearances, these two receipts stem from the same methodical search. For example, the documents listed as item 4 on SSA receipt are in the same overall inventory as everything else, but appear out of sequence. They likely bear some proximal relation to low-item numbers in the CLASS receipt — things like the Roger Stone clemency and the binders of photos. Perhaps they were all found in Trump’s office or residence. But they are on the SSA receipt.

The series of box labels crosses both receipts. For example, it appears that boxes A-14 and A-13, which appear in the SSA receipt, were labeled in close proximity and time as boxes A-12 and A-15, which are among the lowest numbered boxes on the CLASS receipt. But they got listed on the SSA receipt, where all boxes appear together as the final five items on the combined inventory, items 29 through 33.

I’d like to talk more about the search, but first let me spoil the punchline: One likely (though not the only) explanation for the two receipts has to do with the venue in which Trump’s suspected crimes were committed and therefore the ultimate destination of the seized materials, with the SSA receipt materials being sent to DC as evidence of 18 USC 1519 and the CLASS receipt materials being kept in Miami as evidence of multiple violations of the Espionage Act that occurred at Mar-a-Lago.

But let’s go back.

I believe this warrant is the totality of the search on Trump’s mansion. While File411 suspects there’s another warrant (or two), I don’t believe those authorize a search of Trump’s house, not least because Judicial Watch has only asked to unseal one, and Trump’s people will have told them what they wanted unsealed. Merrick Garland referred to unsealing the documents relating to Trump’s house, and I’d be surprised if he played word games to hide further search materials when Trump would literally have receipts to call out any such obfuscation. That doesn’t rule out that the other warrants identified by File411 were related searches, perhaps of locations where Trump’s stolen documents may have been moved, but I believe we’re looking at the totality of the physical search at Mar-a-Lago. Update, August 15: DOJ has now confirmed that this is an entirely separate ongoing investigation. Remember that lots of January 6 suspects live in Florida, so it could be something like that or an entirely different type of crime.

The warrant authorizes the FBI to search Trump’s office (the narcissist appears to have renamed it the 45 Office but it has been referred to as the bridal suite), all storage rooms (the one that Trump’s lawyers showed Jay Bratt when he visited in June is not identified by name), and anywhere else Trump or his staff might have stashed boxes or documents. We know from reports that that included Trump’s personal residence, but the FBI didn’t call it out by name. Curiously, the FBI made clear that when it said the search did not include spaces occupied by guests or other residents, they mean “currently,” as if there’s a room someone recently vacated that is of interest.

Attachment B, which describes the items to be searched for, is one of the things that may explain the two receipts. It starts by listing three crimes: 18 USC 793 (Gathering, transmitting or losing defense information, which is part of the Espionage Act), 18 USC 2071 (Concealment, removal, or mutilation [of official records] generally), and 18 USC 1519 (Destruction, alteration, or falsification of records in Federal investigations).

Despite the fact that every single leak to the press about the scope of the warrant claimed that two crimes were listed, “mishandling classified information” and the Presidential Records Act, those leaks were all false. The former was a transparent attempt to avoid saying the word “Espionage” and the latter is not listed on the warrant as a crime being investigated at all (though I would bet a great deal of money that it features prominently in the affidavit). 18 USC 2071, in this context, may serve as a proxy, criminalizing the removal of records covered by PRA. And one of the four bullets describing materials that can be seized, bullet c,  stems from PRA: “Any government and/or Presidential Record created between January 20, 2017, and January 20, 2021.” Because it would cover items implicated in the two other crimes, National Defense Information and evidence from Federal investigations, that bullet point serves as a larger umbrella in this search. If Trump tries to claim he declassified the items seized in the Espionage Act investigation, for example, the government will be able to say they still seized them lawfully given that bullet point and the inclusion of 18 USC 2071, because to still be at Mar-a-Lago at this point, they would have had to have been removed improperly from government control.

There are two bullet points scoping out materials relating to the Espionage count. Bullet point b authorizes the seizure of information about the storage of NDI or classified information.

Information, including communications in any form, regarding the retrieval, storage, or transmission of national defense information or classified material.

If Trump or his flunkies are charged under the Espionage Act, DOJ will have to rebut the claims being floated by Kash Patel and John Solomon that Trump declassified this material. One way to do that is to show that Trump or his lawyers instructed staffers to treat certain materials as if it was classified. If, for example, Trump put up post-it notes on his storage room saying “Danger: Sekrits. Keep Out,” it would prove that he was telling others to treat the documents with care. I’m only partly joking. We know there were efforts to prevent uncleared staffers from looking at classified information. Obtaining written proof of such instructions is one of the ways DOJ would prove that Trump did know this stuff remained classified. Even if those efforts were only enforced by his lawyers — the same lawyers who failed to turn over these materials in response to subpoena — it will be powerful evidence that those documents were being treated as if they remained classified.

The other bullet point authorizing evidence covered by the Espionage Act reminds me of Borges’s writings on classification.

Any physical documents with classification markings, along with any containers/boxes (including any other contents) in which such documents are located, as well as any other containers/boxes that are collectively stored or found together with the aforementioned documents and containers/boxes.

Effectively, this allows the FBI to seize documents with classification markings and then work out from there, seizing the box containing the document marked as classified, as well as the contents of the closet that a box containing a classified document was in. It’s fairly easy to understand why the FBI wrote it this way (and it may be tailored to overcome the justifications Trump made over the course of 18 months to try to retain certain materials). The President looks at — and in many cases, generates — a whole slew of things that are considered highly classified, but in a form that wouldn’t have classification marks on it, especially if he never shared it with a staffer. If Trump took notes with his Sharpie on a cocktail napkin during a phone call directly with Mohammed bin Salman, for example, it would not include classification marks, but it might be highly classified. So this bullet point allows FBI to seize stuff being treated the same way as documents that do have formal classification markings, which government classification experts can then apply the appropriate classification to.

How this might have worked in practice appears on the CLASS receipt. The second-most interesting item on the list (after the Roger Stone clemency that seems to have some tie to the French President) is the leather box in which the only documents inventoried as TS/SCI were stored.

Not all of these documents are TS/SCI; the inventory even notes that some are just classified. But given the way the warrant is written, the FBI was permitted to seize the entire box, which appears to contain Donald’s precious treasures, even if some of the documents in there are not labeled as classified. It may be that witnesses told the FBI of the existence of this box so the FBI knew to look for it. By seizing the entire box, the FBI would get things that might be even more sensitive than the TS/SCI stuff, but that don’t bear markings, like that hypothetical cocktail napkin with notes of Trump’s secret calls with MbS.

The thing is, these categories overlap. There may have led to some triage onsite about how to classify seized documents. I suggested that item 4 — documents — may have been stored with items 1 through 7 in Trump’s office or residence. If so, they could have been seized by proximal location. But they’re inventoried on the other receipt for some reason, potentially even taken out of a box or that leather case and seized separately as individual documents.

Similarly, boxes A-13 and A-14 were likely stored in close proximity to box A-15, which includes at least some Secret Documents, and box A-16, which includes at least some Top Secret Documents. So they could have been seized under the logic of proximity. But like item 4, they’re on a different receipt.

Which brings me to the final bullet describing the scope of the search (and back to my working hypothesis for the two different receipts, that the SSA receipt covers evidence of obstructive acts committed in DC). It authorizes the seizure of evidence of the destruction of records.

Any evidence of the knowing alteration, destruction, or concealment of any government and/or Presidential Records, or of any documents with classification markings.

This language comes right out of the obstruction statute, though leaves out the reference to “investigation[s] or proper administration:”

Whoever knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry in any record, document, or tangible object with the intent to impede, obstruct, or influence the investigation or proper administration of any matter within the jurisdiction of any department or agency of the United States or any case filed under title 11, or in relation to or contemplation of any such matter or case, shall be fined under this title, imprisoned not more than 20 years, or both.

This part of the warrant, not the reference to the Espionage Act, was the biggest secret of the week. I was not surprised that anonymous sources from the Trump camp soft-pedaled the word “Espionage.” It’s why I was pushing for pressure on Trump to release the warrant. It’s what I believed Trump most wanted to hide.

But remarkably, Trump’s leakers were hiding this part of the warrant even more aggressively. In the entire week of post-search coverage, there was never a hint that obstruction was on the warrant, too. The “Expert Explainers” gaming out what crimes might be on the warrant completely missed obstruction. I did too.

We shouldn’t have. The coverage of the Archives’ referral of Trump to DOJ described his destruction of evidence even more prominently than it did his theft of classified documents.

The National Archives and Records Administration has asked the Justice Department to examine Donald Trump’s handling of White House records, sparking discussions among federal law enforcement officials about whether they should investigate the former president for a possible crime, according to two people familiar with the matter.

The referral from the National Archives came amid recent revelations that officials recovered 15 boxes of materials from the former president’s Mar-a-Lago residence in Florida that were not handed back in to the government as they should have been, and that Trump had turned over other White House records that had been torn up. Archives officials suspected Trump had possibly violated laws concerning the handling of government documents — including those that might be considered classified — and reached out to the Justice Department, the people familiar with the matter said.

[snip]

Trump’s years-long defiance of the Presidential Records Act, which requires the preservation of memos, letters, notes, emails, faxes and other written communications related to a president’s official duties, has long raised concerns among historians and legal observers. His penchant for ripping up official documents was first reported by Politico in 2018, but it has drawn new scrutiny in recent weeks because of a House select committee’s investigation of the Jan. 6, 2021, attack on the U.S. Capitol.

The Washington Post reported late last month that some of the White House records the National Archives turned over to the committee appeared to have been torn apart and then taped back together. The Post later found — and the Archives confirmed — that officials had recovered 15 boxes of presidential records from Mar-a-Lago.

As described, by the time of its criminal referral, the Archives had already found that documents that were responsive to the January 6 Committee’s investigation (and so, derivatively, DOJ’s investigation of Trump personally) had been “altered, destroyed, or mutilated.” DOJ would have started this investigation knowing that Trump had attempted to destroy evidence implicating him in January 6 (though we actually have evidence of him attempting to destroy or alter evidence pertinent to other criminal investigations, too).

By description, when Trump tried to destroy evidence, he did so immediately, in the heat of the moment, in the White House. For that reason, and because the known federal investigations — his attempted coup on January 6, but also his ties to Russia, his coercion of Ukraine, even his inauguration graft — were all predicated in DC, the investigation into Trump’s obstruction of those investigations would be in DC too. That’s why I hypothesize that FBI may have inventoried everything and then, when compiling a final inventory to share with Trump, they distinguished between the suspected crimes that would have been committed in Florida, by storing classified information improperly and refusing to return it to the Federal government, and the suspected crimes that would have been committed in DC when — on January 20 or before, including between January 6 and January 20 — Trump ripped up, flushed, burned, or tried to eat incriminating evidence.

Unless Trump were to waive venue (which he would never do), any prosecution of Trump under the Espionage Act would happen in SDFL, because that’s where he illegally retained classified information after the government asked him to give it back. But any prosecution of Trump for obstruction would happen where the investigations he obstructed were and where he ripped up evidence, in DC.

Item 4, documents, might just be documents that bore visible signs of destruction that had some identifiable tie to January 6 or some other known investigation. They could even be classified! The obstruction bullet point includes classified documents! But they would have been seized, first and foremost, because they were evidence that Trump was trying to impede an investigation or some other government function by destroying evidence.

That has one more big implication, which may be why Trump’s team tried so hard to hide that FBI was looking for evidence of obstruction. There were also leaks (including leaks from the government side) that nothing on this search warrant pertains to January 6. Technically that’s true. Obstruction of the vote certification and conspiracy to defraud the government, the most obvious crimes covering Trump’s conduct leading up to and on January 6, aren’t on the warrant. But as that coverage of the original referral we all forgot to read makes clear, January 6 is at least one of the investigations that Trump is being investigated for obstructing. If the evidence of obstruction is being boxed up and sent back to DC where such an investigation would be predicated, then the evidence would thereby become available to investigators, both for evidence of Trump’s obstruction of an investigation, but also for evidence of Trump’s conduct as well.

Oh. And if Trump were found to have obstructed an investigation into conspiracy by destroying evidence, it might extend the statute of limitations on that conspiracy.

I wrote a long thread yesterday about how Trump epically fucked up by giving DOJ grave reasons to come search his home. DOJ would never have searched Mar-a-Lago for materials Trump withheld in violation of the PRA. They probably would never have searched MAL for evidence he withheld regarding January 6. But Trump kept refusing to turn over classified information DOJ knew he had, some of it reportedly incredibly sensitive. Trump dared Merrick Garland to come get those classified documents. And in so doing, Donald J. Trump gave the FBI urgent reason to come into his home to seize — along with at least 11 boxes containing classified documents — the evidence about January 6 and other investigations that is so sensitive Trump tried to destroy it before refusing to turn it over to the Archives.

John Solomon and Kash Patel May Be Implicated in the FBI’s Trump-Related Espionage Act Investigation

/89 Comments/in , , /by

On June 22, Kash Patel announced that he had just been made a representative for Trump at the National Archives. (h/t to Suburban Gal for these links)

I can tell you now that I am now officially a representative for Donald Trump at the National Archives. And I’m going to march down there — I’ve never told anyone this, because it just happened, and I’m going to identify every single document that they blocked from being declassified at the National Archives.

The next day, Kash described that that letter, making him Trump’s representative to the Archives, “just came in, literally before I came on the show” the day before.

[Update, August 15] Trump had informed the Archives three days earlier, on June 19, that Kash and Solomon would be added to his list of representatives.

As it happens, June 22 is also the same day that the FBI sent a subpoena to Mar-a-Lago for surveillance footage.

On June 22, the Trump Organization, the name for Mr. Trump’s family business, received a subpoena for surveillance footage from cameras at Mar-a-Lago. That footage was turned over, according to an official.

According to a John Solomon column that was actually the first to report details of this purported cooperation in June, the subpoena specifically asked for surveillance videos covering the room where Trump had stashed his stolen documents.

Around the same time, the Trump Organization, which owns Mar-a-Lago, received a request for surveillance video footage covering the locker and volunteered the footage to federal authorities, sources disclosed.

On June 24, two days after DOJ sent a subpoena for the surveillance footage, Betsy Woodruff Swan reported that it wasn’t just Kash who had been given privileged access to Trump’s Archives. Solomon had also been made Trump’s representative at the Archives.

That seeming coincidence — that the FBI formally asked for surveillance videos showing who had accessed Trump’s stash of stolen records on the same day that Kash and Solomon were officially added to the list of those who represented Trump’s interests with the Archives — may raise the stakes of Trump’s legal exposure significantly.

That’s because if Trump deliberately allowed people not permitted access to classified documents or his negligence allowed people to remove such documents, it would trigger other parts of the Espionage Act than the one that prohibits someone from stealing classified documents and refusing to give them back (and all are covered by the warrant).

(d)Whoever, lawfully having possession of, access to, control over, or being entrusted with any document, writing, code book, signal book, sketch, photograph, photographic negative, blueprint, plan, map, model, instrument, appliance, or note relating to the national defense, or information relating to the national defense which information the possessor has reason to believe could be used to the injury of the United States or to the advantage of any foreign nation, willfully communicates, delivers, transmits or causes to be communicated, delivered, or transmitted or attempts to communicate, deliver, transmit or cause to be communicated, delivered or transmitted the same to any person not entitled to receive it, or willfully retains the same and fails to deliver it on demand to the officer or employee of the United States entitled to receive it; or

[snip]

(f)Whoever, being entrusted with or having lawful possession or control of any document, writing, code book, signal book, sketch, photograph, photographic negative, blueprint, plan, map, model, instrument, appliance, note, or information, relating to the national defense, (1) through gross negligence permits the same to be removed from its proper place of custody or delivered to anyone in violation of his trust, or to be lost, stolen, abstracted, or destroyed, or (2) having knowledge that the same has been illegally removed from its proper place of custody or delivered to anyone in violation of its trust, or lost, or stolen, abstracted, or destroyed, and fails to make prompt report of such loss, theft, abstraction, or destruction to his superior officer—
Shall be fined under this title or imprisoned not more than ten years, or both.

Neither of these men would have been authorized to access classified documents, if they did, after January 20, 2021.

Solomon, of course, has come under scrutiny for his role as a mouthpiece for Russian-backed attacks on Joe Biden. While DOJ was not known to have obtained a warrant on him by April 2021, much could have happened after that.

Kash Patel did have the top levels of clearance until Trump left office. But at least by April 2021, Kash was reported to be under investigation for leaking classified information.

Patel repeatedly pressed intelligence agencies to release secrets that, in his view, showed that the president was being persecuted unfairly by critics. Ironically, he is now facing Justice Department investigation for possible improper disclosure of classified information, according to two knowledgeable sources who requested anonymity because of the sensitivity of the probe. The sources said the investigation resulted from a complaint made this year by an intelligence agency, but wouldn’t provide additional details.

Once that investigation was predicated, Kash would have been stripped of clearance, if he hadn’t already been.

Which means both the men that Trump picked to dig through his documents would pose grave security concerns.

And Kash, at least, is the single witness claiming — belatedly, starting in May — that Trump declassified this information. Before much of this became public, Kash claimed Trump had declassified it all, but just not marked it as declassified.

“Trump declassified whole sets of materials in anticipation of leaving government that he thought the American public should have the right to read themselves,” Patel told Breitbart News in a phone interview.

“The White House counsel failed to generate the paperwork to change the classification markings, but that doesn’t mean the information wasn’t declassified,” Patel said. “I was there with President Trump when he said ‘We are declassifying this information.’”

“This story is just another disinformation campaign designed to break the public trust in a president that lived on transparency. It’s yet another way to attack Trump and say he took classified information when he did not,” he added.

At the point he made those claims, in May, Kash demonstrated extensive familiarity with the content of that first batch of stolen classified documents that had been stashed at Mar-a-Lago for a year.

Patel did not want to get into what the specific documents were, predicting claims from the left that he was disclosing “classified” material, but said, “It’s information that Trump felt spoke to matters regarding everything from Russiagate to the Ukraine impeachment fiasco to major national security matters of great public importance — anything the president felt the American people had a right to know is in there and more.”

If Kash knows that first-hand — if Kash knows that because Trump let him wade through Top Secret documents he was no longer cleared to access — then Trump may have additional criminal liability.

Update: After a week of bullshit excuses, Trump — via John Solomon — is now offering a new bullshit excuse: That Trump had a standing order that everything he back to the residence in the White House was declassified. The claim is mostly interesting because Solomon — who wasn’t even at the White House! — is feeding it up.

Update: Added link to June 19 request.