Karl had moved to her desk.
“You seeing these tweets?” Siegel asked.
Sitting at the workstation on Siegel’s right, Karl was nodding slowly. “I think we should report this to-” She suddenly interrupted herself. “Holy Mother of God, Dick. Look at the TA board!”
Her eyes had snapped up to a sixty-five-inch flat-panel angled downward from the top of the wall in front of her, where the national threat assessment level was on constant display. It had jumped straight from “guarded” to “severe,” bypassing the “high” alert advisory.
She looked at Siegel and he at her, but only for a moment. They had been here several years apiece and had never seen that kind of leap.
It took only seconds for reports of what was happening in Baltimore to flash across the lower third of their screens. These were identified by their sources: Fox News on top, CNN in the middle, MSNBC at the bottom. At the same time phones throughout the room started ringing, beeping, and singing, and there was a low hum of voices talking to sources, superiors, and one another. The room crackled with portent; this was why the unit had been formed, its reason for being, validation for all the stiff necks, sore backs, and strained eyes that went with monitoring Internet chatter day after day.
Siegel felt like he had as a boy of ten, a budding fisherman in a deep pool of water who’d suddenly, unexpectedly felt his boat rocked by something big and powerful. He knew, now as then, what he had to do, what his father had trained him for. But in an instant he was no longer navel-gazing in dreamy tranquility but was aware of the much bigger, much more active world around him.
For NOC cyber-snoops, the responsibilities and protocols of data collection during a crisis were well defined. Each action officer had a preassigned duty, and Siegel’s was to trawl the Twitter feed, capturing and sorting meta-tagged updates of interest while scanning subjects trending within Twitter’s own network. This was a simple matter, since trending topics were determined by commonly repeated terms that were either user hashtagged or detected by Twitter’s internal search bots. Twitter then listed these on a home-page sidebar that could be set to view either worldwide or localized trends.
Siegel had picked up on the tweets from Colwriter123 early in his search. Showing up on the network as frequent re-tweets-when one user copied and posted another user’s message to disseminate the information-they appeared to originate from the convention center. They had been floated to the top by the scan programs because there was an event taking place with a larger than normal number of dignitaries from the D.C. area. Now that he looked at the latest tweets, they seemed to give very precise information about what was going on inside the center, even indicating where a particular group of hostages had been segregated. Appeared and seemed being the operative words, because Siegel had to allow for the possibility that the tweets were part of a ghoulish hoax. His gut told him they weren’t, though, because a number of the abbreviations Colwriter123 had used were not standard and they came at irregular times, as though the tweeter were trying to impart information in a hurry. Fully 80 percent of faux tweets could be ruled out by those two criteria.
Added digging reinforced Siegel’s initial conviction. According to his user profile, Colwriter123’s real name was Colin Dearborn and he was a journalism major at the University of Virginia, a self-described “new media evangelist.” The profile page also bore a link to a column he wrote for the school newspaper, where a peek at his most recent piece revealed that he had been planning to tweet what he termed “live dispatches” from the career fair at the Baltimore Convention Center.
That essentially clinched the tweets’ authenticity as far as Siegel was concerned, but to add further confirmation, he went back in Colwriter123’s timeline to search through the updates he’d posted in the hour or so leading up to the attack. Colwriter123 had been a busy, prolific correspondent during that period, tweeting about everything from the degree of courtesy and helpfulness at individual booths to the high price of fast food at the concession stands. He had even included observations on security lapses, which Siegel himself found troubling, and had hashtagged his tweets with the term #BaltimoreCareerFair to make them easy to follow. From the event mark forward, Colwriter123 had been sending updates that read like combat reports from the front lines. The kid was impressive: not only did he have courage, but he was showing a composed, perceptive eye for what was important.
Running down Colwriter123’s post-event timeline, Siegel examined the replies to his tweets from other users. Each of these showed the respondent’s username after the @ symbol, enabling Siegel to click on his or her profile and see whether it offered anything of interest. Like criminals returning to the scene of a crime, terrorists were known to follow reactions to their sociopathic activities.
The tone of the responses ran the predictable gamut, ranging from deeply concerned to callously idiotic, but Siegel didn’t immediately see anything useful in them. Then he noticed repeated tweets from someone with the username AlDearborn. A relative, possibly the young man’s mother. The posts looked like direct communications with the kid from someone who was trying to help him, which was more than enough to grab Siegel’s eye on its own. But the most recent post made him stare at the screen with acute fascination, a long, low whistle escaping his lips.
“You got something?” Karl asked.
“Maybe.”
She was too involved in her own research to look over. Siegel read the tweet again. It had been sent just two minutes ago, according to the timeline, and it read:
Leave yr phone somewhere w/vol LOUD. In 5 min. it will ring, DO NOT answer. #BaltimoreConventionCenter // Stand by.
Siegel hastily clicked on the user’s account profile. It belonged to Baltimore psychologist Allison Dearborn-and she was CIA. But what was the purpose of those instructions she gave him about his phone? The hashtagged term had popped out at him, too. Baltimore Convention Center. Ms. Dearborn had clearly wanted her tweet to attract the attention of someone other than Colwriter123. Someone a CIA employee must have hoped would be monitoring Internet traffic for messages from the center.
Someone like himself.
He was not about to sit around guessing, nor did he intend to just flag the tweets and kick them upstairs. These looked much too critical.
“Clare, hold the fort. I’ll be back,” Siegel said, springing from his seat.
Karl looked at him inquisitively. “What is it?”
Siegel didn’t answer. He was already hustling up the aisle, feeling like a ticking clock thundercloud had just appeared over his little boat on the pond…
Word reached Max Carlson in a circuitous fashion, which was unbecoming for the secretary of Homeland Security.
With his cell phone deposited in the small lead-lined cabinet outside the woodshed-which was what Carlson and other old-timers called the Situation Room-he’d been out of touch with the Office of Operations Coordination’s acting director, Joseard Levy, who had oversight of the NOC and was responsible for keeping Carlson in the loop. Under most circumstances, Levy would have left Carlson a routine voice message. For a higher priority communication, Levy would have routed a call to the Situation Room, where a watch officer would have informed Carlson of its receipt; if the secretary felt the message warranted an immediate callback, he would excuse himself from the presidential huddle and return the call from one of the encrypted privacy phones that sat in soundproofed booths outside the conference room. But the information that had come out of the NOC was of such crucial importance that DHS protocol required it be conveyed directly to the president himself in the event that Carlson wasn’t immediately available.
That was precisely what occurred, even though Levy was always kept informed of Carlson’s whereabouts and had known he might be found not 10 feet apart from the president inside the Situation Room. So when a watch officer called to inform Brenneman that OOC director Levy was on the phone with urgent news, Carlson couldn’t have realized it was coming from his own department, least of all Joseard Levy, his right-hand man.