LEAKED Insider Threat Report: DOD employee and former CIA targeting officer Sarah Adams
Defense Counterintelligence Security Agency is on notice about Adams’ harmful propaganda targeting Americans. Will they take action?
Below is the text of the insider threat report I filed yesterday with the Defense Counterintelligence and Security Agency (DCSA) concerning U.S. Air Force Program Analyst Sarah Adams. This report has also been submitted to the DOD Inspector General and the FBI. It consists of public statements only and contains nothing classified. A pdf version may be viewed or downloaded here.
My first report to DCSA, filed February 5, 2025 shortly after President Trump took office, can be read here. It consists mostly of quoted material from Adams’ first three Shawn Ryan Show interviews (2023-2025) and other media appearances from early 2025, where she was positioned as a counterterrorism expert with insider access and exclusive HUMINT sources regarding Al Qaeda leadership, organizational structure, training details, and operational plans.
This new report documents a number of more recent instances of Adams’ public statements and social media posts that, in my view, deserve scrutiny for possible violations of federal laws including the Espionage Act, the Smith-Mundt Act and the Logan Act, as well as possible serious violations of DOD regulations.
As my readers on X have seen, I’ve taken “friendly fire” from Americans who view Adams as a patriot, doing her duty to warn us about the increased terror threat we currently face here in the United States.
Truth is, you don’t need experts to tell you that the U.S. is more vulnerable than ever to acts of sabotage and terrorism from foreign-trained operatives.
Biden’s Homeland Security Secretary Alejandro Mayorkas’ ultra vires actions and policies to create the “lawful pathways” and the incidental circumstances for vast numbers of unvetted illegal aliens to flood our borders directly contravened the statutory mission of DHS as defined in the Homeland Security Act: To make the U.S. less vulnerable to acts of foreign terrorism.
But Adams’ messaging does more than simply raise the alarm (and sell books) — she’s projecting a specific Al Qaeda narrative that appears intended to influence the U.S. public and members of Congress. In recent months her efforts to propel that narrative appear to have extended into unethical, possibly unlawful territory.
Reporting deliberate propaganda by a serving DOD employee and former CIA officer is not a personal take-down; it is a legal and ethical duty for anyone with knowledge of the activity.
I’m not challenging Adams’ credentials or questioning her patriotism.
I am only documenting facts.
I’m not publishing this report for personal attention, likes, clicks, book sales or subscribes (all of my socials are unmonetized). I’m not building a brand.
I am publishing it in an attempt to hold the DCSA and the DOD publicly accountable.
To: Unauthorized Disclosure Program Management Office (UDPMO)
From: KimWexlerMAJD@yahoo.com
Date: December 9, 2025
Re: Ongoing concerns regarding Sarah Adams
I am writing to report a series of very serious disinformation activities, potential OPSEC risks, and mishandling of sensitive information by Sarah Adams, who identifies herself as a current Program Analyst with the Air Force Intelligence Systems Support Office (ISSO) and former CIA targeting officer.
Adams has been reported previously via DoD insider threat reporting channels, and she stated publicly in May that she was the subject of an adversarial FBI investigation.1
Despite this, her recent behavior shows her activities are escalating — to include the dissemination of “black propaganda” falsely attributed to ISIS, as well as openly taunting and threatening the Taliban on social media.
The overarching theme to Adams’ media campaign is encapsulated in a recent LinkedIn comment: “a massive 9/11 is coming, it’s not chatter, they trained and deployed the terrorists here the last few years, the key is to prepare as no one is thwarting it at this point.”2 Adams claims Al Qaeda is now led by Hamza bin Laden, the organization regrouped after the 2021 U.S. withdrawal from Afghanistan, and they are now in the operational stage of a massive terror attack on the United States. She expounds on this theme in a report she published on September 11, 2025, titled “Hamza bin Laden: Know Thy Enemy.”3
As a self-identified DoD program analyst with over 360K followers on X, Adams’ actions risk undermining national security, eroding public trust in intelligence assessments, and potentially exposing U.S. operations to foreign adversaries, in violation of the Espionage Act.
The actions documented below meet multiple Insider Threat behaviors under DoD Directive 5205.16, including:
Attempting to manipulate public perception about the U.S. security posture toward Afghanistan using forged materials while leveraging official DoD affiliation
Deliberately disseminating false information that qualifies as “black propaganda” to manipulate public perception, potentially interfering with a U.S. election
Apparent unauthorized disclosure of sensitive personal data from what appear to be authentic passports of wives of Afghan officials
Given Adams’ active security clearance, continued access to intelligence systems, and public profile due to multiple appearances on the Shawn Ryan Show and other podcasts aimed at the military, veteran and SOF community, these incidents represent a continuing risk. The failure of the U.S. Air Force and DoD to take timely action gives rise to speculation that her activities have the approval of her USAF supervisors — adding to the public’s confusion.
The lack of consequences thus far appears to embolden Adams, as her publications are escalating in intensity and in recklessness.
The most recent widely-distributed incidents include:
December 4, 2025: “Leaks, Lies and Lessons: Taliban, This One’s for You”
This long post claps back at Taliban-connected social media accounts for what Adams characterizes as “a ridiculous social media campaign accusing me of being a Pakistani Inter-Services Intelligence (ISI) spy and by supporting other misinformation campaigns—a feeble attempt to distract from the fact that they still can’t figure out how I compromised their General Directorate of Intelligence (GDI) and their Ministries of Interior and Defense. As most people know, I’m not one to get mad. I’m one to get even….”
The post includes four short video clips. “On November 27, we monitored the movements of American-made Navistar 7000 military trucks loaded with light and heavy weapons and ammunition departing the central depots of the Taliban’s three principal military and intelligence institutions: the Ministry of Defense, the Ministry of Interior, and the GDI. Attached are videos so the Taliban understands that I am serious here.”
The identity of “we” (“we monitored the movements”) is unclear from the immediate post context. Readers might reasonably assume she’s referring to the U.S. Department of Defense, although Adams has often stated that her information comes from her own cultivated HUMINT sources in Afghanistan and elsewhere.
Adams claims these trucks “were ferrying weapons left behind by the United States, along with ammunition from Taliban-controlled depots in the Central and Eastern Zones, to newly constructed ‘classified’ (oops, classified no longer) storage sites in Kandahar, Uruzgan, and Helmand provinces….”)
Adams stated that the relocation was a reaction to recent air strikes from Pakistan. “The strikes rattled the Taliban’s leadership, and I enjoyed every second of the internal implosions, as they couldn’t find the source of the leak(s) that compromised their weapons depots. It finally hit them that their entire storage network was no longer safe or secure.”
Claiming the plan to redistribute the weapons was ordered by Taliban Supreme Leader Mullah Haibatullah on October 15, 2025, Adams goes on to provide a detailed account of the plan’s execution. “Along the route, observation posts were established about every 60 miles on mountaintops and high ridges to monitor the entire process…. And here is the part the Taliban will really hate: every one of these movements was tracked. Every handoff. Every convoy. Every tunnel entrance. If you think you buried those locations so deep that no one knows where you’re hiding your arsenal now, you are sorely mistaken.”
This December 4, 2025 X post is available here
https://x.com/tpasarah/status/1996633088189722848?s=61 (archived: https://archive.ph/PEizc)
December 1-2, 2025 — The Transatlantic Intelligence Consortium and the fabricated Hamza bin Laden video
Guido Blaauw (@cyberpionier or “Guido” on X) is a Dutch man who formed an organization he calls the Transatlantic Intelligence Consortium or TIC (@TransatlanticIC on X). Dutch media outlet Omroep Brabant has published exposés debunking Blaauw’s claims of prior work for the Dutch intelligence service AIVD and for the CIA, and exposing a fundraising scheme that led to a class action lawsuit against Blaauw in the Netherlands.4 Sarah Adams contributed to the book Al Qaeda 2.0: The Upcoming Attack on the United States and Europe Unveiled, published by TIC and released under the pseudonym “William Archer,” whose fabricated bio appears on the back of an early edition of the book.5 On the book’s Amazon page, TIC is described as:
a specialized think tank composed of former intelligence officers and counterterrorism experts from Europe, the United States, Canada and Australia. Focused exclusively on the fight against terrorism, TIC conducts cutting-edge research and analysis on terrorist networks, radicalization, and global counterterrorism strategies….6
Adams has an integral role within TIC. She is one of four people credited on the book’s Acknowledgements page, where she is thanked for her “expertise and meticulous attention to detail” that were “crucial in ensuring the accuracy and reliability of the information presented. [Adams’] hard work, dedication, and unwavering commitment to excellence have significantly enhanced the quality of this book.”7
Blaauw claims TIC will be releasing a second book soon, to be titled: The Triad of Terror: The Strategic Collaboration Between Al-Qaeda, the Taliban and the Haqqani Network.8
On December 1, Adams “quote-posted” an X post from Guido Blaauw’s X account, adding her own comment “been ready for this release 😎” referring to Blauuw’s tease of a “‘virtual bomb’ that will disrupt the narrative.” See Attachment A.
Later on December 1, Guido published a video on X that he claimed was “the first visual proof of Hamza bin Laden since 2011, leading Al-Qaeda alive and well from Afghanistan in 2025.” Adams quickly shared Guido’s post containing the fabricated video without adding any disclaimer or commentary of her own. See Attachment B.
Adams argued over the video’s authenticity with X users, including @Grok. See Attachment C.
On December 3, Dutch combat veteran Roy Grinwis (@RoyGrinwis on X) demonstrated how he created the “deepfake” Hamza video using AI software. Grinwis explains his motive: “I fed them fabricated intel to prove they are spreading dangerous disinformation.” The video itself, and the step-by-step process Grinwis followed to create the video and feed it to Guido, is exposed in Grinwis’ thread.9
November 28, 2025 – Fabricated Guardian Article
The “ISI Spy” allegations Adams complains of in her December 4 post came in response to Adams’ November 28 X post in which she published a photoshopped screenshot of a non-existent web page appearing to be from UK news outlet The Guardian with the headline “U.S. Locked into Key Targets in Afghanistan,” projecting an imminent-strike narrative.
The article shows a map of Afghanistan with three locations in the mountains near Kabul labeled with red crosshair target markers. The fabricated article leads: “In a swift and decisive response to yesterday’s unprecedented attack on the White House, U.S. military forces have reportedly ‘locked onto’ key targets in Afghanistan, officials confirmed Thursday. The strikes are part of an ongoing effort to neutralize terrorist networks suspected of orchestrating the assault on the nation’s capital.”
This fabrication was published less than 48 hours after the November 26 shooting that targeted National Guardsmen on duty in Washington DC, killing one and seriously wounding another. Suspect Rahmanullah Lakanwal, an Afghan national, was identified in a November 27 joint DOJ-FBI press conference.10
The Guardian article does not exist — The Guardian has no record of it. Adams included no disclaimer or label in her post, such as “satire” or “mock-up”.
The URL is https://x.com/TPASarah/status/1994404412937187384 and the post was still live and viewable on X as of December 9, 2025. The post has also been digitally archived: https://archive.ph/X97ZG. See Attachment D.
November 4, 2025 – “Operation ‘Manhattan Project’” ISIS Election-Day Hoax
At 9:26am ET on November 4, 2025, the day of the New York City mayoral election, Adams posted on her X account a fabricated ISIS/Amaq-style communiqué headed “Operation ‘Manhattan Project’” with her own header text claiming “ISIS is threatening New York City today.” The threat was amplified by other popular social media influencers who shared it to their readers, as well as by an article in PJ Media11 that afternoon, before New York City polls were closed.
The image reportedly originated on 4chan earlier that morning and was confirmed “100 percent fake” and “a joke” by Aaron Zelin of the Washington Institute for Near East Policy, who was quoted by AFP Fact Check.12 NewsGuard13 and France2414 also debunked the “Operation ‘Manhattan Project’” meme as a hoax.
On November 10, France24 misleadingly reported that “pro-Trump influencers” amplified the fabricated image AFTER Mamdani’s win, framing the faux ISIS communiqué as “commending the election result.”15 But in fact, the fabricated Islamic State message was published by Adams and amplified by others long BEFORE New York City polls were closed and results announced, racking up millions of views through reposts by other popular right-wing accounts (e.g. Alexander Duncan,16 Laura Loomer and Mossad Commentary17) while the polls were still open. Those reposts carried Adams’ original framing — that the message was an authentic statement from ISIS.
France24’s “jihadism expert” Wassim Nasr said the communiqué “bears no resemblance to what Amaq produces. The graphics are radically different. The text is in English, yet Amaq primarily communicates in Arabic…. For the Islamic State group, democracy contradicts divine laws. They would never endorse a candidate participating in the democratic process. Even the Muslim Brotherhood, which engages in democracy, is considered apostate by [Islamic State].”18
This publication, which Adams framed as an authentic threat from ISIS, meets the definition of “black propaganda” — i.e., false information, falsely attributed to an enemy in order to deceive. Adams’ X post has been deleted but is archived: https://archive.ph/Lyust. See Attachment E.
The communiqué was also posted on Instagram by askarimediagroup, an account associated with Sarah Adams. A screenshot taken at 1:29pm ET indicates the post was published “4 hours ago,” placing its publication at around the same time as the X post (embedded metadata suggests the Instagram post was published at 8:36am ET). It’s important to note that whether Adams created the fabricated message and image herself or not, her X and Instagram accounts appear to be the earliest vectors of its dissemination. See Attachment F.
“Housewives of the Taliban” Series (August 30 - September 1, 2025)
Between August 30 - September 1 Adams published approximately 19 unredacted Afghan passports — including photographs — of women she labels “Housewives of the Taliban.” No consent, redaction, or verification is provided. Afghan women’s rights advocates and multiple X users have flagged this as a serious privacy concern and potential exploitation of victims of Taliban coercion.
See Attachment G for a representative example of the unredacted passport images. Adams stated she obtained the images from “the passport database.”19
The unredacted “Housewives of the Taliban” X posts are still live as of December 9, 2025. If a passport database was accessed and information shared without authorization, these posts may be evidence of criminal activity. I have documented and archived the links below.
They are:
0 - “Introducing Housewives of the Taliban” (“If Afghan women are forbidden from having photographs on their national identity documents, then by the same standard, the wives of Taliban members should also be denied photographs on passports, marriage certificates and every official record. These women are not innocent bystanders; they are married to terrorists…. If the Taliban reverses their ban on women’s photographs, then we will stop releasing the photographs of their wives.”) https://x.com/TPASarah/status/1961894599699706271?s=20 (archived: https://archive.ph/hijWx)
[WITHHELD FOR PRIVACY]
I respectfully request that this matter be proactively monitored under a Continuous Vetting (CV) review process and referred to AFOSI, DCSA and FBI for formal investigation.
I cannot stress enough that this should be treated as high priority. The lack of action from the DoD on this ongoing threat is causing unnecessary confusion and distress to U.S. citizens and GWOT veterans, and it reflects poorly on the U.S. Air Force and Department of Defense.
Thank you for your attention to this matter.
Respectfully,
“Kim Wexler” MA JD
Sarah Adams (@TPASarah), comment on social media platform X. May 5, 2025 (“The FBI opened an adversarial investigation into me a few weeks back …”) https://x.com/TPASarah/status/1919542564853555566?s=20
Adams, comment on social media platform LinkedIn (reply to John Heaney). December 2025. https://archive.ph/cPUDm
Adams, “Hamza bin Laden: Know Thy Enemy.” Transatlantic Intelligence Consortium, September 11, 2025. https://trackingalqaeda.com/downloads/sarah/Hamza_bin_Laden_Know_Thy_Enemy.pdf
See Chris Baker, “‘Ex-spy’ raises 16,000 euros for a non-existent charity.” Omroep Brabant, June 20, 2023. https://www.omroepbrabant.nl/nieuws/4303739/ex-spion-haalt-16000-euro-op-voor-een-niet-bestaand-goed-doel; “Scammer or master spy? This is Guido Blaauw. Omroep Brabant, October 20, 2023. https://www.omroepbrabant.nl/nieuws/4355178/oplichter-of-meesterspion-dit-is-guido-blaauw; “‘Ex-spy’ accused of fraud after his book doesn’t come.” Omroep Brabant, October 20, 2023. https://www.omroepbrabant.nl/nieuws/4355174/ex-spion-beschuldigd-van-oplichting-nadat-zijn-boek-maar-niet-komt; “Anne gave money to ‘ex-spy’ Guido Blaauw, she didn’t get his promised book.” Omroep Brabant, October 20, 2023. https://www.omroepbrabant.nl/nieuws/4355183/anne-gaf-geld-aan-ex-spion-guido-blaauw-zijn-beloofde-boek-kreeg-ze-niet
William Archer, Al-Qaeda 2.0: The Upcoming Attack on the United States and Europe. Transatlantic Intelligence Consortium, 2024. (From back cover: “William Archer is a former intelligence officer with over 25 years of experience serving in the British Intelligence community. As an expert in counter-terrorism, William played a pivotal role in numerous covert operations across the globe, particularly in the fight against extremist organizations like Al-Qaeda and its affiliates. His work has earned him recognition within the intelligence community, though the details remain classified. Since retiring in 2023, William has become a respected consultant and chief editor for the Transatlantic Intelligence Consortium.”)
Archer, p. 95.
Guido Blaauw (@cyberpionier), “‘Al-Qaeda 2.0’ is now officially a Best Seller after selling 10,000+ copies globally.” X, February 24, 2025. https://x.com/cyberpionier/status/1894040977297256779?s=20
Roy Grinwis (@RoyGrinwis), “#BREAKING MAJOR EXPOSURE: The ‘exclusive’ video of Hamza Bin Laden circulating right now via @cyberpionier (Guido Blaauw), @TPASarah (Sarah Adams) and @TransatlanticIC (Guido and Sarah) is FAKE.” X, December 3, 2025. https://x.com/RoyGrinwis/status/1996126229938807009?s=20 (archived: https://threadreaderapp.com/thread/1996126229938807009.html)
Julia Harte and Lucia Mutikani, “What we know about Afghan national suspected of DC shooting.” Reuters, November 27, 2025. https://www.reuters.com/world/us/what-we-know-about-afghan-national-suspected-shooting-two-guardsmen-near-white-2025-11-27/
Robert Spencer, “ISIS Threatens to Make Tuesday a Day We’ll Never Forget.” PJ Media, November 4, 2025. https://pjmedia.com/robert-spencer/2025/11/04/isis-threatens-to-make-tuesday-a-day-well-never-forget-n4945601 (archived https://archive.ph/gG1AG)
Quoted in Bill McCarthy, “Fake Islamic State group statement targets Mamdani’s NYC mayoral election.” AFP Factcheck, November 10, 2025. https://factcheck.afp.com/doc.afp.com.83FD266
“Anti-Mamdani Accounts Falsely Tie NYC Mayor-Elect to ISIS.” NewsGuard’s Reality Check. November 6, 2025.
“US Influencers falsely associate Mamdani with extremist group.” France24, November 7, 2025. https://www.france24.com/en/live-news/20251107-us-influencers-falsely-associate-mamdani-with-extremist-group
Guillaume Maurice, “How a fake IS group statement on Mandani’s win went viral on X.” France24, November 10, 2025. https://www.france24.com/en/americas/20251110-fake-islamic-state-group-statement-mamdani-viral-social-media
Duncan’s X post was still live as of December 9, 2025. https://x.com/alexduncantx/status/1985739707591045420?s=61 (archived https://archive.ph/L1p3I)
The X post from the Mossad Commentary (@MOSSADil) X account was still live as of December 9. https://x.com/MOSSADil/status/1985799529786995023?s=20 (archived https://archive.ph/N0MjV).
Maurice.
Adams (@TPASarah), comment on social media platform X. August 31, 2025 (“Haha clearly the passport database”). https://x.com/tpasarah/status/1962251045322555759?s=61