HSI surveillance of Minnesota 15 anti-ICE activists: Signal infiltration, Chicago Crimethinc event monitoring and data fusion
Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que a fonte trouxe em 29/10/2026 00:11; os links antigos trazem para cá.
Fontes: wired.com ×2 ↗
Court discovery in the federal prosecution of the Minnesota 15 shows that Homeland Security Investigations (HSI), an ICE component, ran a large domestic surveillance and undercover operation against anti-ICE activists in the Twin Cities and beyond. The latest reporting (wired.com, 28 October 2026) describes probes named Project Whipple Shield and Operation Puppet Master, authorized under NSPM 7 and funded through the undercover program Operation Keyhole. Court records show about 119 HSI agents worked the case, including at least 11 undercover operatives who infiltrated activist groups and Signal chats (wired.com). Earlier reporting (wired.com, 16 October 2026) showed that an HSI-led task force of eight HSI Chicago agents and six local officers surveilled an April 2 Crimethinc talk at the Co-Prosperity gallery in Chicago. The talk was part of a national tour discussing resistance to Operation Metro Surge, and an HSI report titled "Antifa Roadshow" documents the operation. Former law enforcement officials and defense attorneys say the case is probably part of a wider nationwide intelligence-gathering effort and compare it to COINTELPRO. The full scope remains unknown.
Detalhes técnicos
- Signal infiltration: undercover agents penetrated several activist Signal groups and relayed about 15 TB of chat content to HSI analysts. They also infiltrated the activists' vehicle-identification and dispatch network (wired.com).
- Physical and aerial surveillance: HSI photographed and ran the plates of vehicles at meeting locations. Conferences in Seattle, Michigan, Chicago and New York City were surveilled, and unarmed CBP Reaper drones recorded activists' movements (wired.com). Discovery also shows HSI monitored Crimethinc tour events in Ann Arbor, Michigan, and Seattle (wired.com).
- Chicago event, 2 April: the task force included the Chicago Police Department, Aurora PD, Downers Grove PD, Cook County and the Kane County Sheriff. It used two undercover agents, a live audio feed that dropped after about an hour, unspecified electronic surveillance and audio recordings (wired.com).
- Attendee identification: the team used license-plate-reader data and Chicago CCTV, logged 219 vehicles near the venue and ran the plates. A CPD detective requested footage from a CPD camera outside the venue, and it is unclear whether he received it (wired.com).
- Linking to other activity: the task force sought to tie attendees to other anti-ICE protests in Illinois and other states, including an anti-ICE Signal group called "ICE Cream Patrol" and March 2026 protests in Broadview, Illinois. Everything gathered was shared with HSI St. Paul/Minnesota, and remarks by defendant Callum Robinet at the event appear in the federal conspiracy indictment (wired.com).
- Infrastructure and data fusion: after an activist uploaded a license-plate search tool to Fly.io in an infiltrated Signal chat, agents reviewed DNS queries and Stripe data and bought commercial broker data. This gave them SSH session logs, outbound connection records, the account signup IP and a Stripe card fingerprint. They combined these with Minnesota DVS records and Thomson-Reuters CLEAR to obtain a driver's license number, SSN summary, address history, phone numbers, property records and registered vehicles (wired.com).
- Financial and legal workarounds: agents used Patriot Act Section 314(a) queries covering 29 "subjects" on 31 March 2026, and scrutinized wire transfers, PayPal and other payments. They also used administrative summonses reserved for customs and tax violations to obtain journalists' phone records, as first reported by The Guardian (wired.com).
- Funding: Operation Keyhole, a Certified Undercover Operation dating to December 2008, had funded at least 77 investigations. As of June 2026 it supported six active investigations (wired.com).
- Local-law questions: CPD says no First Amendment notifications were made and that the work was permitted because it concerned criminal rather than immigration enforcement. The findings raise questions about compliance with Illinois restrictions and Chicago's 2017 protest-surveillance order, and fuel criticism that HSI, rather than the FBI, leads politically charged investigations (wired.com).
Remediação
The sources give no technical remediation or defensive guidance. The ACLU of Illinois calls for local agencies to fully account for their role and reexamine their participation in federal task forces (wired.com). The reporting implies that activist groups and journalists are exposed through infiltrated group chats, commercial data brokers, and metadata from cloud and payment services (wired.com).
Linha do tempo
-
DHS/HSI runs large undercover and data-driven surveillance operation against Minnesota anti-ICE activists (Minnesota 15 case)
ler a análise desta fonte ocultar
Court discovery in the Minnesota 15 prosecution shows that Homeland Security Investigations (HSI), an ICE component, ran a large domestic surveillance and undercover operation against anti-ICE activists in the Twin Cities. Probes named Project Whipple Shield and Operation Puppet Master, authorized under NSPM 7, were funded through the long-running undercover program Operation Keyhole. Court records show about 119 HSI agents worked the case, including at least 11 undercover operatives who infiltrated activist groups and Signal chats. Former law enforcement officials and defense attorneys told WIRED the case is probably part of a wider nationwide intelligence-gathering effort, and they compare it to COINTELPRO. The full scope of the investigations remains unknown.
Technical Details
- Signal infiltration: undercover agents penetrated several activist Signal groups and relayed about 15 TB of chat content to HSI analysts. They also infiltrated the activists' vehicle-identification and dispatch network.
- Physical and aerial surveillance: HSI photographed and ran the license plates of vehicles at meeting locations, and conferences in Seattle, Michigan, Chicago and New York City were surveilled. Unarmed CBP Reaper drones recorded activists' movements.
- Infrastructure and data fusion: after an activist uploaded a license-plate search tool to Fly.io in an infiltrated Signal chat, agents reviewed DNS queries and Stripe data and bought commercial broker data. This gave them SSH session logs, outbound connection records, the account signup IP and a Stripe card fingerprint. They combined these with Minnesota DVS records and Thomson-Reuters CLEAR to obtain a driver's license number, SSN summary, address history, phone numbers, property records and registered vehicles.
- Financial and legal workarounds: agents used Patriot Act Section 314(a) queries covering 29 "subjects" on 31 March 2026, and wire transfer, PayPal and other payment scrutiny. They also used administrative summonses reserved for customs and tax violations to obtain phone records of journalists, as first reported by The Guardian.
- Funding: Operation Keyhole, a Certified Undercover Operation dating to December 2008, had funded at least 77 investigations. As of June 2026 it supported six active investigations.
Remediation
The article gives no defensive guidance. Its reporting implies that activist groups and journalists face exposure through infiltrated group chats, commercial data brokers and metadata from cloud and payment services.
-
HSI-led task force with Chicago-area police surveilled Crimethinc anti-ICE event in support of Minnesota 15 prosecution
ler a análise desta fonte ocultar
Documents released by the defense team in the federal case against the Minnesota 15 show that a joint task force of six local officers and eight HSI Chicago agents surveilled an April 2 talk at the Co-Prosperity gallery in Chicago. The talk was part of a Crimethinc national tour in which Twin Cities anarchists discussed resisting Operation Metro Surge. A four-page HSI report titled "Antifa Roadshow" details the operation. The task force included personnel from the Chicago Police Department, Aurora PD, Downers Grove PD, Cook County and the Kane County Sheriff. The findings fuel criticism that HSI, rather than the FBI, is acting as the lead agency for politically charged investigations, and they raise questions about local compliance with Illinois restrictions and Chicago's 2017 protest-surveillance order.
Technical Details
- The task force used two undercover agents, a live audio feed that dropped after about an hour, unspecified electronic surveillance and audio recordings.
- It also used license-plate-reader data and Chicago CCTV footage to identify attendees. The team logged 219 vehicles near the venue and ran plates to identify subjects.
- The task force sought to link attendees to other anti-ICE protests in Illinois and other states, including an anti-ICE Signal group called "ICE Cream Patrol" and March 2026 protests in Broadview, Illinois.
- A CPD detective filed a request for footage from a CPD camera outside the venue; it is unclear whether he received it.
- Recordings and all information gathered were shared with HSI St. Paul/Minnesota. Remarks by defendant Callum Robinet at the event appear in the federal conspiracy indictment.
- Defense discovery shows HSI agents also monitored Crimethinc tour events in Ann Arbor, Michigan, and Seattle, Washington.
- CPD says no First Amendment notifications were made and that the work was permitted because it concerned criminal rather than immigration enforcement.
Remediation
The article describes no technical remediation. The ACLU of Illinois calls for local agencies to fully account for their role and to reexamine their participation in federal task forces.