Hanssen Affidavit
Hanssen Affidavit
Alexandria Division
AFFIDAVIT IN SUPPORT OF
CRIMINAL COMPLAINT, ARREST WARRANT AND SEARCH WARRANTS
TABLE OF CONTENTS
Page
I. SUMMARY OF INVESTIGATION . . . . . . . . . . . . . . . 3
B. OATHS OF OFFICE . . . . . . . . . . . . . . . . 15
D. RESIDENCES . . . . . . . . . . . . . . . . . . 19
A. FORENSIC EVIDENCE . . . . . . . . . . . . . . . 79
E. PALM III . . . . . . . . . . . . . . . . . . . 83
H. BS OLD FRIEND . . . . . . . . . . . . . . 90
i
VII. LOCATION OF EVIDENCE, FRUITS, INSTRUMENTALITIES,
AND PROCEEDS . . . . . . . . . . . . . . . . . . . . 91
ii
IN THE UNITED STATES DISTRICT COURT FOR THE
Alexandria Division
AFFIDAVIT IN SUPPORT OF
CRIMINAL COMPLAINT, ARREST WARRANT AND SEARCH WARRANTS
follows:
following:
1
States Code, Sections 794(a) (Transmitting
National Defense Information) and 794(c)
(Conspiracy to Commit Espionage); and
2
I. SUMMARY OF INVESTIGATION
3
(classified TOP SECRET/SCI), the United States Double Agent
sensitivity.
4
FBI operational practices and activities targeted against the
operation that were secure from FBI surveillance and warned the
FBI surveillance.
led the KGB to warn Bloch that he was under investigation, and
been recent entries as to his own name, his home address, or the
signal site.
5
describes 33 packages the KGB/SVR left for HANSSEN at secret
(h) For his services to the KGB/SVR, HANSSEN was paid over
in the last two years, the KGB/SVR informed HANSSEN that the
former Soviet Union. The KGBs First Chief Directorate (FCD) was
6
Counterintelligence), Line N (Illegals Operations), Line PR
intelligence arm.
7
12. An illegal is an intelligence officer or a recruited
be the fact that a dead drop has been loaded and is ready to be
8
their use in the Northern Virginia area, in the Eastern District
of Virginia.
other entities.
9
20. Aldrich Hazen Ames is a former CIA officer who in 1994
the KGB in April 1985, and provided information to the KGB and
level may also be restricted through caveats such as: NOFORN (Not
10
Contractors or Contractor/Consultants), WNINTEL (Warning Notice:
Originator).
citizen.
11
Collar Crime squad at the Resident Agency in Gary, Indiana, until
August 1, 1978.
assigned to the FBI Field Office in New York, New York, initially
division.
level.
12
provided analytical support to senior FBI management and the
Intelligence Community.
33. From June 25, 1990, to June 30, 1991, HANSSEN was
13
35. From January 6, 1992, to April 11, 1994, HANSSEN served
Field Office).
Suites 106, 107 and 108 of Room 2510C of the State Department
14
of FBI Headquarters, 935 Pennsylvania Avenue, N.W., Washington,
D.C.
B. OATHS OF OFFICE
42. On January 12, 1976, HANSSEN also signed the FBI Pledge
follows:
15
principles; . . . I shall always be loyal to my duty,
my organization, and my country.
16
C. SECURITY CLEARANCES AND ACKNOWLEDGMENTS
clearance on January 12, 1976, and has held various SCI accesses
17
I make this agreement without any mental
reservation or purpose of evasion.
1982; September 9, 1983; April 10, 1985; and May 31, 1991.
18
recognize that nothing in this Agreement constitutes a
waiver by the United States of the right to prosecute
me for any statutory violation. . . .
D. RESIDENCES
47. From 1981 until 1985, HANSSEN owned a house and resided
a KGB/SVR officer;
devices;
19
E. Information provided by former KGB/SVR personnel;
passed to B;
I. Interviews;
K. Public records;
Inside the inner envelope was an unsigned typed letter from the
20
person whom the KGB came to call B. The letter read in part as
follows:
B added:
21
information collection technique described above was classified
the FBI and the CIA. Martynov was compromised to the KGB by Ames
22
convicted on espionage charges during the period of October-
carry.
23
typed message from B, in an envelope bearing a handwritten
DROP LOCATION
PACKAGE PREPARATION
SIGNAL LOCATION
SIGNALS
The message established a date and times for the signals and
package.
24
The KGB designated this dead drop site by the codename
25
Thank you for the 50,000.
I also appreciate your courage and perseverance in
the face of generically reported bureaucratic
obstacles. I would not have contacted you if it were
not reported that you were held in esteem within your
organization, an organization I have studied for years.
I did expect some communication plan in your response.
I viewed the postal delivery as a necessary risk and do
not wish to trust again that channel with valuable
material. I did this only because I had to so you
would take my offer seriously, that there be no
misunderstanding as to my long-term value, and to
obtain appropriate security for our relationship from
the start.
the next dead drop occur on September 9" which, according to the
letter, actually meant that the dead drop operation would take
B also wrote:
26
Referring to Yuzhin, Motorin, and Martynov, whom he had
recruitments, B wrote:
he described.
60. On March 3, 1986, the KGB loaded dead drop site PARK,
but B did not appear and the KGB removed its package from the
follows:
27
they somehow able to monitor funds, ie., to know that
Viktor Cherkashin received a large amount of money for
an agent? I am unaware of any such ability, but I
might not know that type of source reporting.
1986.
knew Cherkashin.
28
64. The number 703/451-9780 at that time belonged to a
number and gave the number 628-8047. The call was taken by
told B that the KGB had loaded the PARK dead drop site. The
KGB mistakenly placed the package under the wrong corner of the
from B stating that he had not found the package at the dead
August 18, 20, or 22. The KGB then retrieved its package from
B: Tomorrow morning?
FEFELOV: Uh, yeah, and the car is still available for you
and as we have agreed last time, I prepared all
the papers and I left them on the same table. You
didnt find them because I put them in another
corner of the table.
B: I see.
29
FEFELOV: You shouldnt worry, everything is okay. The
papers are with me now.
B: Good.
B: One three.
[pause]
B: [whispering] [UI]
[pause]
[pause]
B: Very good.
30
FEFELOV: You see. After you receive the papers, you will
send the letter confirming it and signing it, as
usual. Okay?
B: Excellent.
B: Do svidaniya.
FEFELOV: Bye-bye.
The KGB then loaded the PARK dead drop site with $10,000
in cash, as well as: proposals for two additional dead drop sites
drop.
31
68. Thereafter, Degtyar received an envelope at his
address: Ramon Garcia, 125 Main St, Falls Church VA. It was
Dear Friends:
No, I have decided. It must be on my
original terms or not at all. I will not
meet abroad or here. I will not maintain
lists of sites or modified equipment. I will
help you when I can, and in time we will
develop methods of efficient communication.
Unless a [sic] see an abort signal on our
post from you by 3/16, I will mail my contact
a valuable package timed to arrive on 3/18.
I will await your signal and package to be in
place before 1:00 pm on 3/22 or alternately
the following three weeks, same day and time.
If my terms are unacceptable then place no
signals and withdraw my contact. Excellent
work by him has ensured this channel is
secure for now. My regards to him and to the
32
professional way you have handled this
matter.
sincerely,
Ramon
16.
PARK dead drop site with $10,000 cash. The KGB also proposed
that B had cleared the PARK dead drop and removed the signal.
My Friends:
Thank you for the $10,000.
I am not a young man, and the commitments on my
time prevent using distant drops such as you suggest.
I know in this I am moving you out of your set modes of
33
doing business, but my experience tells me the [sic] we
can be actually more secure in easier modes.
V.
34
that he had an urgent package for the KGB, and asked the KGB to
35
by Vitaliy Yurchenko; and an official technical document
describing COINS-II.
the November 23, 1987, dead drop. The address was the residence
February 3, 1988.
36
detailed information concerning a Soviet defector, and advised
the KGB that he had arranged time to review the defectors file.
capabilities.
documents.
The KGB also asked B for more information about M and the
officer.
On the next day, February 9, 1988, the KGB observed that the
37
The envelope bore a return address of Jim Baker in Chicago
March 24, 1988. The KGB found no text on the diskette, which it
referred to as D-3".
86. On Monday, March 28, 1988, B and the KGB carried out
Orientation.
letter explaining why the KGB had not been able to check the
PARK/PRIME dead drop site on March 21. In the letter, the KGB
passed to the KGB. The KGB asked B for information about codes
38
and cryptograms, intelligence support for the Strategic Defense
The next day, the KGB observed that B had removed the
package.
39
specific Soviet FBI recruitments. B also explained why the KGB
had been unable to read his diskettes. B also asked the KGB
operation.
PARK/PRIME dead drop site at 9:03 pm, three minutes after the
officer saw a man who apparently removed the signal, got into his
WDC 200" on July 13, 1988. The zip codes for Washington, D.C.,
40
was tight to make this at all. Because of my work, I
had to synchronize explanations and flights while not
leaving a pattern of absence or travel that could later
be correlated with communication times. This is
difficult and expensive.
I will call the number you gave me on 2/24, 2/26
or 2/28 at 1:00 a.m., EDST. Please plan filled
signals. Empty sites bother me. I like to know before
I commit myself as Im sure you do also. Lets not use
the original site so early at least until the seasons
change. Some type of call-out signal to you when I
have a package or when I can receive one would be
useful. Also, please be specific about dates, e.g.,
2/24. Scheduling is not simple for me because of
frequent travel and wife. Any ambiguity multiplies the
problems.
My security concerns may seem excessive. I
believe experience has shown them to be necessary. I
am much safer if you know little about me. Neither of
us are children about these things. Over time, I can
cut your losses rather than become one.
Ramon
P.S. Your thank you was deeply appreciated.
92. On Monday, July 18, 1988, B and the KGB carried out
including:
41
Operations Against CIA, dated March 1988 and classified
to Foreign Nationals.
dead drop and related signal sites. One, named BOB, was under
42
a footbridge in Idylwood Park, between Vienna and Falls Church,
43
The package from B contained approximately 300 pages of
44
The package from B contained his tenth diskette (D-10)
document whose title the KGB noted as Soviet Armed Forces and
of the 1990s.
The next day, the KGB observed that the signal at the
KGBs package.
45
100. On Thursday, March 16, 1989, B marked a call-out
signal site that the KGB has issued to him, located at the Taft
101. On Monday, March 20, 1989, B and the KGB carried out
dated November 1988. The document bears the caveats NOFORN and
46
Warning Notice
Intelligence Sources or Methods Involved
(WNINTEL)
NATIONAL SECURITY INFORMATION
matters.
(B told the KGB that he would say the diamonds came from his
47
B for the information he provided on January 31, and asked him
On Tuesday, March 21, 1989, the KGB observed that the signal
102. On March 24, 1989, the KGB marked the V signal site
March 27, 1989, the KGB loaded the dead drop with the MASINT
coveted Order of the Red Banner, the Order of the Red Star, and
third diamonds the KGB had given to him and which B returned
48
classified information about a variety of technical and
operational matters.
The package that the KGB passed to B on May 22, 1989, did
the next time. The KGB also returned the MASINT Committee
it.
The next day, the KGB observed that the signal associated
with the BOB dead drop site had been removed, indicating that
telephone call between them on April 27, 1989. One day later,
14, 1989, and Brussels on May 28, 1989. In early June 1989,
suddenly left for Moscow. Early on the morning of June 22, 1989,
49
a recording of that call, Ferdinand Paul told Bloch that he was
investigation of Bloch.
drop site the KGB had proposed, codenamed DORIS, located under
50
The KGBs package to B contained $30,000 cash and a letter
The next day, the KGB observed that the signal associated
with the CHARLIE dead drop site had been removed, indicating
51
The package from the KGB to B contained $30,000 cash, a
letter, and, for the first time from the KGB, a computer
diskette.
The next day, the KGB observed that the signal associated
with the CHARLIE dead drop site had been removed, indicating
completely demagnetized.
diskette (D-16).
52
requested the KGB to load the ELLIS dead drop site at any time,
this dead drop, and on October 26 the KGB retrieved its package.
ELLIS dead drop site with a package containing the $55,000 cash
regards from the KGB Chairman and made extensive requests for
11, 1989, the KGB observed that the ELLIS signal site was
Prospects for the Next Two Years and dated November 1989. This
53
document was classified SECRET, bore the caveats NOFORN
referred to above.
within the KGB and other Soviet entities; and four defectors. He
payment for the October 16-23 period plus compensation for the
KGB officer, a Soviet illegal, and two KGB defectors, who were
54
operations; and the identification of a particular named NSA
The package from the KGB contained $40,000 cash and a KGB
disclosed.
55
The package from the KGB to B contained $35,000 cash and a
Dear Friend:
117. On Monday, May 21, 1990, the KGB loaded the ELLIS
dead drop site with a package containing two KGB diskettes, and
56
The KGB diskettes contained a letter that discussed in
in part:
Dear Friend:
57
places. The KGB also asked for information about a Soviet
defect.
matters. B instructed the KGB to load the FLO dead drop site
on September 3, 1990.
dead drop site with a package containing $40,000 cash, and a KGB
58
He disclosed to the KGB that the FBIs chief of
and a KGB diskette. The diskette established two new dead drop
Virginia.
59
Dear Friend:
60
The package from B to the KGB contained his twenty-third
not worry, because June has passed, they held me there longer.
weapons proliferation.
Dear friend:
61
aspect of Your case. Thats why we say Your security
goes first. . . .
Sincerely,
Your friends.
Union.
62
study of the period of Chicagos history when the city was
that the man was a military officer who had recently been told he
Dear friend:
63
But now back to where we belong. There have been many
important developments in our country lately. So many
that wed like to reassure You once again. Like we
said: weve done all in order that none of those events
ever affects Your security and our ability to maintain
the operation with You. And of course there can be no
doubt of our commitment to Your friendship and
cooperation which are too important to us to loose
[sic]. . . .
Sincerely,
Your friends.
operational, and analytical matters. The KGB also asked for the
commenting that: Its fun to read about the life in the Universe
64
Baker, Box 1101, Houston, TX and was postmarked Washington, D.C.
including:
WARNING NOTICE
This document should be disseminated only to
persons having both the requisite clearances
and a need to have access to its contents for
performance of their duties. No further distri-
bution or reproduction is authorized without
the approval of the Associate Deputy Director
for Operations for Counterintelligence, CIA.
and
65
(B) A current volume of the DCI Congressional Budget
missing from his earlier package, and advised that he had been
matters. He noted that a new mission for his new group had not
66
129. On or before October 6, 1999, B received the
67
Dear friend: welcome!
68
amphitheatre of Long-branch Nature Center (map of
N.Virginia, page 16, grid G8). The package should be
put under the FAR-LEFT corner of the podium (when
facing the podium). Entter [sic] Longbranch Nature
Center at the sign from Carlin Springs Road (near 6th
Road south) and after parking your car in the lot
follow the sign To Amphitheatre. LOCATION OF THE DD
SIGNAL: a wooden electricity utility pole at the north-
west corner of the intersection of 3d Street and Carlin
Springs Road neaqr [sic] the Metrobus stop (the same
map, grid F7). The signals are the same as in the
Foxstone Park DD. The white adhesive tape should be
placed on the NORTHERN side of the pole, so that it
could be noticed fro [sic] a car moving along Carlin
Springs Road in the southern direction from Route 50.
Your friends.
The initials V.K. are those of a known SVR Line KR senior
69
proven reality-based. Id say, pin your hopes on
insanely loyal and go for it. Only I can lose.
Ramon Garcia
Dear Friends:
Administrative Issues:
70
they can be quite effective, in juggernaut fashion,
that is to say thorough. . . .
New topics:
If you are wise, you will reign [sic] in the GRU. They
are causing no end of grief. But for the large number
of double-agents they run, there would be almost no
ability to cite activity warranting current foreign
counterintelligence outlays. Of course the Gusev
affair didnt help you any. If Id had better
communications I could have prevented that. I was
aware of the fact that microphones had been detected at
the State Department. (Such matters are why I need
rapid communications. It can save you much grief.)
Many such things are closely held, but that closeness
fails when the need for action comes. Then the
compartments grow of necessity. I had knowledge weeks
before of the existence of devices, but not the country
placing them. . . . I only found out the gruesome
details too late to warn you through available means
including the colored stick-pin call. (Which by the
way I doubted would work because of your ominous
silence.) Very frustrating. This is one reason I say
you waste me in the note. . . .
71
It offends me, but then you are easily forgiven. But
perhaps I shouldnt tease you. It just gets me in
trouble.
Ramon
Dear Ramon:
72
We hope that during future exchanges we shall
receive Your materials, which will deal with a [sic]
work of IC, the FBI and CIA in the first place, against
our representatives and officers. We do mean its
human, electronic and technical penetrations in our
residencies here and in other countries. We are very
interested in getting of the objective information on
the work of a special group which serches [sic] mole
in CIA and FBI. We need this information especially to
take necessary additional steps to ensure Your personal
security....
73
find with this letter descriptions of two new DD
LINDA and TOM. Hope to have Your opinion about
them.
Dear Friends:
74
Bear with me. It was I who sent the message trying to
use TOM to communicate material to you. On reflection,
I can understand why you did not respond. I see that I
failed to furnish you sufficient information for you to
recognize that the message you left for me in ELLIS did
not go astray. You do this often (communicate such
assurances through the mention of items like the old
date offset we used), and believe me, it is not lost on
me as a sign of professionalism. I say bear with me on
this because you must realize I do not have a staff
with whom to knock around all the potential
difficulties. (For me breaks in communications are
most difficult and stressful.) Recent changes in U.S.
law now attach the death penalty to my help to you as
you know, so I do take some risk. On the other hand, I
know far better than most what minefields are laid and
the risks. Generally speaking you overestimate the
FBIs capacity to interdict you, but on the other hand,
cocksure officers, (those with real guts and not as
much knowledge as they think) can, as we say, step in
an occasional cowpie. (Message to the translator: Got
a good word for cowpie in Russian?? Clue, dont
blindly walk behind cows.). . . .
75
On meeting out of the country, it simply is not
practical for me. I must answer too many questions
from family, friends, and government plus it is a
cardinal sign of a spy. You have made it that way
because of your policy. Policies are constraints,
constraints breed patterns. Patterns are noticed.
Meeting in this country is not really that hard to
manage, but I am loath to do so not because it is risky
but because it involves revealing my identity. That
insulation has been my best protection against betrayal
by someone like me working from whatever motivation, a
Bloch or a Philby. (Bloch was such a shnook. . . . I
almost hated protecting him, but then he was your
friend, and there was your illegal I wanted to protect.
If our guy sent to Paris had balls or brains both would
have been dead meat. Fortunately for you he had
neither. He was your good luck of the draw. He was
the kind who progressed by always checking with those
above and tying them to his mistakes. The French said,
Should we take them down? He went all wet. Hed
never made a decision before, why start then. It was
that close. His kindred spirits promoted him. Things
are the same the world over, eh?)
76
So good luck. Wish me luck. OK, on all sites detailed
to date, but TOMs signal is unstable. See you in
July as you say constant conditions.
yours truly,
Ramon
signal site associated with the ELLIS dead drop site, which was
signal site:
77
located near the sign, between the road and the sign. He
Records store.
away.
observed HANSSEN drive past the Foxstone Park signal site, and
drove past the Foxstone Park signal site, came to a rolling stop
near it, and then drove away. After 5:00 pm on Friday, January
26, 2001, HANSSEN drove past the Foxstone Park signal site,
78
Park signal site three times between approximately 5:37 pm and
the dead drop site. The package contained $50,000 in used $100
bills and a typed note reading: Next 10/31/01 TOM alt. 20,27".
These were wrapped in white paper, which was taped, and which in
HANSSEN.
A. FORENSIC EVIDENCE
would wrap with tape. The plastic bag would then be placed
inside a second garbage bag. The FBI has come into possession of
79
two latent fingerprints of comparison value. The examiner
HANSSEN.
(5) one computer floppy disk; (6) one 8MB Versa Card Flash Memory
the FBI searched HANSSENs Ford Taurus automobile, and found the
following:
80
(2) In one of four cardboard boxes in the trunk were seven
classified SECRET.
bags.
These items were not removed, although small samples were taken,
pieces of chalk was pink. These items were not removed, although
81
145. On August 18, 1986, KGB Officer Aleksander Fefelov
analysts, who have worked closely and routinely with HANSSEN for
drop site selected by B was Nottoway Park, which was less than
a five minute walk from Whitecedar Court. Between 1985 and 1989,
the Nottoway Park site was used for dead drops so frequently - 17
82
149. In August 1989, the KGB designated drop site ELLIS,
the KGB could use the ELLIS site at any time. In fact, the
E. PALM III
February 18, and the time 8:00. The term ELLIS is the KGB/SVR
codename for the dead drop site located in the area of Foxstone
both.
York City.
83
152. In May 1990, B told the KGB that, due to a
career path and requires frequent travel to FBI field offices for
with a message welcoming him back and noting that its great for
has not been fully defined and that I hope to adjust to that .
84
counterintelligence efforts on economic espionage. This new
him.
intelligence officer.
85
158. In his assignment to CI-3A, the FBIs Soviet
from November 1985 to June 1986, and August 1986 to August 1987,
HANSSEN was assigned to the FBIs Field Office in New York City.
86
G. HANSSENS USE OF THE FBI AUTOMATED CASE SUPPORT SYSTEM
87
known to or suspected by the FBI, and thus whether he was exposed
to danger.
88
April 12, 1999: ROBERT HANSSEN
TALISMAN
TALISMAN DRIVE
WHITE CEDAR
WHITECEDAR COURT
89
January 13, 2000: DEAD DROP[Dates=01/01/2000-01/13/2000
DEAD DROP[Dates=10/01/1999-12/31/1999
H. BS OLD FRIEND
90
VII. LOCATION OF EVIDENCE, FRUITS, INSTRUMENTALITIES, AND
PROCEEDS
91
paper, chemicals used to develop coded and secret messages,
classified information.
92
instructions, codes, telephone numbers, maps, photographs, other
vehicles, for ready access and to conceal such items from law
enforcement authorities.
93
identities, United States foreign currency, instructions, maps,
173. Both the location of the dead drop site ELLIS, and
the location of the signal site associated with the ELLIS dead
Vienna, Virginia.
computers (in addition to his Palm III device) and related disks,
94
VIII. SPECIAL NEEDS AND JUSTIFICATION TO SEIZE COMPUTERS AND
RELATED HARDWARE AND ELECTRONIC STORAGE DEVICES FOUND
AT HANSSENS RESIDENCE FOR OFF-SITE EXAMINATION
and from the KGB/SVR found on the computer memory card in his
for his computers that could erase vital evidence and files if
95
appropriate location by Computer Analysis Response Team (CART)
(including his server) from any remote location and through any
Affidavit.
96
IX. REQUEST FOR AUTHORITY TO EXECUTE SEARCH WARRANTS DURING
NIGHTTIME HOURS
destruction.
97
pose an immediate danger and threat to any searching or arresting
HANSSEN would have such an escape plan in place by 2001, and that
HANSSEN could well occur in the nighttime hours, and the searches
98
should be conducted immediately upon his arrest, authority is
99
XI. WARRANTS REQUESTED
for the arrest of ROBERT PHILIP HANSSEN, and search warrants for
this Affidavit.
XII. ATTESTATION
Stefan A. Pluta
Special Agent
Federal Bureau of Investigation
100