Saudi infiltration of Twitter

Saudi infiltration of Twitter
Date	2014-2015
Cause	Alleged Saudi spies working inside Twitter
Target	Saudi dissidents' Twitter accounts
Outcome	Personal data of over 6,000 Twitter accounts was acquired on behalf of Saudi operatives
Arrests	1, as of July 1,2021

Last updated January 23, 2025

In 2014 and 2015, a team of Saudi agents allegedly stole proprietary and sensitive personal data from the American social media platform Twitter, in order to unmask anonymous dissidents of Saudi Arabia. Email addresses, phone numbers, internet IP addresses, dates of birth and a history of all the users' activity of Saudi dissidents, opponents and others, were among the stolen materials.^[1]

Human rights groups ANHRI and Prisoners of Conscience have observed that some anonymous Saudi political activists on Twitter were identified and detained after the infiltration, and suspect that it is related. A Saudi scholar in exile in the United States sued Twitter, alleging that dozens of anonymous political activists he was in contact with have died, were tortured, or remain behind bars as a result of being found to have a connection to him.

Background

With roughly 10 million Twitter users, Saudi Arabia is the service's top Arab market. Not requiring use of real names further made Twitter a leading platform for political dissent in the country.^[3]

Saud al-Qahtani, one of Saudi Crown Prince Mohammed Bin Salman's top confidants at the time, posted a warning against masked Twitter accounts using his own verified Twitter account in August 2017. Asserting that governments can know the true names of those using Twitter anonymously, he brought up "technical methods" for tracing a person's IP addresses, as well as a "secret I'm not going to reveal."^[4]^[5] Twitter permanently banned al-Qahtani's account in September 2019, claiming "violations of our platform manipulation policies."^[6]

Incident

Perpetrators

Ali Alzabarah, a Saudi national, and Ahmad Abouammo, a U.S. citizen, were the two former Twitter employees that funneled the data, the complaint asserts.^[2]

Another Saudi national, Ahmed Almutairi, also known as Ahmed Aljbreen, worked as a middleman between Alzabarah, Abouammo, and representatives of the Saudi Royal Family. Almutairi is known for co-founding SMAAT, a Riyadh social-marketing firm that is controlled by the royal family and had a history of running political and commercial influence operations.^[7]^[8]

Bader al-Asaker, a Saudi official who heads the private office of Prince Mohammed and is a board member of Misk Foundation, a philanthropic organization affiliated with MBS, was also involved in the conspiracy, according to the complaint.^[9]

Timeline

Ali Alzabarah joined Twitter as a site reliability engineer in August 2013. Being involved in keeping the site up, he was given broad access.^[10]

In November 2013, Abouammo, who joined the firm as a member of Twitter's global media team to head the Middle East partnerships, met Alzabarah there.^[11]

In 2014, Abouammo was asked to authenticate an account belonging to a Saudi news personality by a public relations agency representing the Saudi Embassy. This request for a blue checkmark was followed by a request from a US-Saudi business group in Virginia to visit Twitter's headquarters. Bader al-Asaker was to be part of the visit, which was nominally for entrepreneurs.^[11]

On June 13, 2014, al-Asaker traveled to San Francisco to meet Abouammo.^[12]

Months later, Abouammo met al-Asaker in 2014 in London, where he was given a $20,000 watch. A week after returning to Twitter's headquarters, Abouammo accessed the system he used to verify users and obtained information about at least two Saudi dissidents, later passing the data to al-Asaker. That system, according to insiders who have used it, retains information such as email addresses, phone numbers and the latest log-in time – personal information usable to track a user in real life.^[11]

In February 2015, Abouammo got his operators in touch with Alzabarah. Alzabarah's ambitions were straightforward: he wanted to work in a high-ranking job for a "charitable organization run by al-Asaker."^[11]

In May 2015, and within the first week of arriving in San Francisco from Washington, D.C. where he met with al-Asaker, Alzabarah "began to access without authorization private data of Twitter users en masse." Over 6,000 users were compromised in six months, according to the FBI. 33 of those users, the Saudi government has already requested Twitter to provide their personal information through emergency disclosure demands.^[13]

Later in 2015, Abouammo departed Twitter for a position at Amazon in Seattle. Over the next two years, well over $300,000 in bank transfers were made from al-Asaker to Abouammo's various bank accounts.^[14]

On December 2, 2015, Alzabarah reportedly acknowledged to his superiors that he examined user data out of curiosity. His work-owned laptop was taken, and he was removed from the office. He returned to Saudi Arabia the next day after communicating that night with al-Asaker and then Dr. Faisal Al Sudairi, the Saudi consul general in Los Angeles. Alzabarah has not been seen since, according to authorities.^[15]

After arrival in Saudi Arabia, Alzabarah became the CEO of the Misk Initiatives Center, a branch of Mohammed bin Salman's Misk Foundation, which he created in 2011 and whose secretary-general was al-Asaker.^[16]^[17]

On October 20, 2018, FBI agents in Seattle questioned Abouammo about his efforts on behalf of Saudi officials. In an attempt to hinder the inquiry, Abouammo purportedly lied to the investigators and supplied them with a forged invoice.^[13]

On November 5, 2019, as part of the complaint, federal warrants for both Ali Alzabarah and Almutairi were issued.^[15] Both were accused of operating as undeclared agents of a foreign government.^[18]^[19] On the same day, Abouammo was apprehended in Seattle, WA, and had his first federal court appearance in Seattle on November 6, 2019.^[2]

On February 24, 2021, a federal judge rejected a request to dismiss charges against Abouammo.^[20]

In August 2022, Abouammo was found guilty of acting as a foreign agent without notice to the Attorney General, conspiracy, wire fraud, international money laundering, and falsification of records in a federal investigation. On December 14, 2022 he was sentenced to three and a half years in prison.^[21]

Reaction

Twitter response

On the condition of anonymity, a business representative of Twitter told The Washington Post in 2019 that access to the instrument panel is now restricted to a small group of "trained and vetted" workers, citing worries about staff safety.^[22]

Criticism

According to former employees, Twitter did not have plans to handle situations in which a personnel with access to sensitive data built strong ties with foreign powers. A former colleague of Abouammo's said that US, UK, and Israeli security agencies all pressured members of Twitter's media team for private information.^[11]

The departure of Ali Alzabarah didn't cause a stir in Twitter. "One day the general counsel came to me and said there was this crazy thing that happened. They're out of the company," a former Twitter executive remarked. "You can never talk about it," "inside, it was a total nonthing. No one in the rank and file who had ever heard of it. It was a nonissue."^[11]

Omar Abdulaziz, a dissident who was connected to writer Jamal Khashoggi, feels that criticizing the Saudi Arabian regime on social media is now risky. "We were using Twitter ten years ago to expose our opinion on what was really going on there, and we felt safe," he added. "For us, it was a safe platform. That's no longer the case."^[11]

Aftermath

Known victims

Although Twitter has not revealed the identity of those who may have been unmasked as a result of the claimed attack, human rights groups, such as ANHRI, linked three Saudis detained since 2015 with using Twitter handles @sama7ti, @coluche_ar, and @mahwe13, all critical of the Saudi government. Another human rights organization, Prisoners of Conscience, reported an additional case of a Saudi male who posted critical comments on Twitter under the handle @albna5y and was imprisoned in September 2017.^[23]

Turki bin Abdulaziz al-Jasser (@coluche_ar)

Al-Jasser, a Saudi man suspected of running an anonymous Twitter account, was apprehended in early 2018. He was linked to @coluche_ar, one of the accounts obtained by the Twitter breach, according to ANHRI.

Though al-Jasser was reported to have died in jail after being tortured, Saudi officials notified a United Nations team monitoring enforced disappearances in February that he was being kept at Al Ha'ir Prison near Riyadh, according to MENA Rights Group.^[23]

Abdulrahman al-Sadhan (@sama7ti)

Following a March 2018 arrest and charges that he used a popular parody account to criticize the Saudi government, Abdulrahman al-Sadhan, a 37-year-old Red Crescent relief worker, was convicted by Saudi Arabia's specialized criminal court and sentenced to 20 years in prison followed by an additional 20-year travel restriction.^[24]

Lawsuits

Omar Abdulaziz's account was one of those breached. On February 17, 2016. A message from Twitter's security staff notified him that his and a limited number of other users' personal information had been compromised due to a "bug." "The email address and phone number linked to your account was viewed by another account," said the message. He later filed a lawsuit against the company for allegedly failing to disclose the event.^[25] The accusations are false, according to Twitter.^[26]

In June 2020, Ali al-Ahmed, a Saudi scholar living in exile in the United States, sued Twitter over the 2016 breach, alleging that the company's negligence resulted in the loss and torture of dissidents within Saudi Arabia. al-Ahmed claimed to have been in continuous contact with a number of anonymous Twitter accounts maintained by Saudi state employees and pro-democracy advocates in the period leading up to the breach. Exposing their phone numbers and email addresses, dozens of those who were in direct touch with Ali have died, were tortured or remain behind bars as a result of being found to have a connection to him, he claims.^[27]

Related Research Articles

Human rights in Saudi Arabia are a topic of concern and controversy. Known for its executions of political protesters and opponents, the government of the Kingdom of Saudi Arabia has been accused of and denounced by various international organizations and governments for violating human rights within the country. An absolute monarchy under the House of Saud, the government is consistently ranked among the "worst of the worst" in Freedom House's annual survey of political and civil rights and was in 2023 ranked as the world's most authoritarian regime.

Yasser Saeed Mosleh Abdulrahman Al-Qahtani is a Saudi Arabian former footballer who played as a forward for Al-Hilal FC in the Saudi Professional League. He was also captain of the Saudi Arabia national team.

Jamal Ahmad Hamza Khashoggi was a Saudi journalist, dissident, author, columnist for Middle East Eye and The Washington Post, and a general manager and editor-in-chief of Al-Arab News Channel who was assassinated at the Saudi consulate in Istanbul on 2 October 2018 by agents of the Saudi government at the behest of Crown Prince Mohammed bin Salman.

The General Directorate of Investigations, commonly known simply as the Mabahith, is the secret police agency of the Presidency of State Security in Saudi Arabia, and deals with domestic security and counter-intelligence.

Ali Abbas al-Ahmed (Arabic: علي عباس آل أحمد, Gulf pronunciation: ; born 1966, is a Saudi journalist and analyst focusing on the politics of the Persian Gulf region, including terrorism, Islamic movements, Wahhabi Islam, Saudi political history, Saudi Arabia–United States relations, and the history of the House of Saud family. He is the founder and director of the Institute for Gulf Affairs, formerly the Saudi Institute, an independent think tank in Washington, D.C., focused on providing analyses and disseminating information on political issues in the Persian Gulf region and particularly Saudi Arabia, and U.S.-Gulf relations. IGA also convenes conferences, conducts independent research and investigations, and works with the media and policymakers to foster a deeper understanding of Arab states of the Persian Gulf by providing them with up-to-date and exclusive information and connecting them with reliable analysts.

The National Society for Human Rights (NSHR) is a Saudi Arabian human rights organisation closely associated with and funded by the Saudi government. It was established on 10 March 2004 ; two years after the Human Rights First Society applied unsuccessfully for a licence. As of August 2018, the President of the NSHR was Mufleh bin Rabayan al-Qahtani.

The Saudi Civil and Political Rights Association (ACPRA) is a Saudi Arabian human rights non-governmental organisation created in 2009. On 9 March 2013, the Saudi court sentenced two of its prominent leaders to at least 10 years in prison for "offences that included sedition and giving inaccurate information to foreign media", while dissolving the group. The association is also known in Arabic by its acronym HASEM.

The following is a timeline of the 2011–2012 Saudi Arabian protests since July 2012. The 2011–2012 Saudi Arabian protests are a series of ongoing protests taking place in Saudi Arabia, which began in January 2011, influenced by concurrent protests in the region.

<span class="mw-page-title-main">Mohammad Fahad al-Qahtani</span> Saudi human rights activist (born c. 1965)

Mohammad Fahad Muflih al-Qahtani is a human rights activist, economics professor and political prisoner currently jailed at Al-Ha’ir Prison in Riyadh. Prior to his arbitrary 2012 arrest, he co-founded and later led the Saudi Arabia human rights organisation Saudi Civil and Political Rights Association. Alkarama described al-Qahtani as "one of [the Saudi Arabian judiciary's] most eloquent and fervent critics". On 9 March 2013, al-Qahtani was sentenced to ten years in prison followed by a ten-year travel ban, ostensibly for "co-founding an unlicensed civil association". He has carried out several hunger strikes to protest Saudi prison conditions endured during his politically motivated incarceration. As of 2022, he remains jailed and has been intermittently kept in solitary confinement since 2018.

Dissidents have been detained as political prisoners in Saudi Arabia during the 1990s, 2000s, 2010s, 2020s and earlier. Protests and sit-ins calling for political prisoners to be released took place during the 2011–2012 Saudi Arabian protests in many cities throughout Saudi Arabia, with security forces firing live bullets in the air on 19 August 2012 at a protest at al-Ha'ir Prison. As of 2012, recent estimates of the number of political prisoners in Mabahith prisons range from a denial of any political prisoners at all by the Ministry of Interior, to 30,000 by the UK-based Islamic Human Rights Commission and the BBC.

Abdullah Hamid Ali al-Hamid (1950-2020) or Abu Bilal was a Saudi poet, Arabic professor, human rights activist and a co-founder of the Saudi Civil and Political Rights Association (ACPRA). He was imprisoned several times for calling for the establishment of a constitutional monarchy in Saudi Arabia.

The Gulf Cooperation Council Athletics Championship is a biennial international athletics competition between athletes from nations within the Cooperation Council for the Arab States of the Gulf. It was first held in 1986.

Iman al-Qahtani ايمان القحطاني is a Saudi journalist and activist.

Qahtān to distinguish between the tribe and the Qahtanite peoples, is an Arab tribal confederation. Qahtan is composed of three main tribes: Sanhan, Junb, and Rufaida. Today, members of the tribe and its sub-tribes are based in Yemen, Saudi Arabia, Oman, Qatar, Bahrain, Kuwait, and the United Arab Emirates.

<span class="mw-page-title-main">2017–2019 Saudi Arabian purge</span> Mass arrests by Mohammed bin Salman regime

The 2017–2019 Saudi Arabian purge was the mass arrest of a number of prominent Saudi Arabian princes, government ministers, and business people in Saudi Arabia on 4 November 2017. It took place weeks after the creation of an anti-corruption committee led by Crown Prince Mohammed bin Salman.

Mujtahidd is the Twitter handle of a pseudonymous activist, described as a 'whistleblower' and a 'household name among Saudis who use social media', who publishes information alleging to expose corruption, inner state of affairs, and under the table workings of politics within the Saudi royal family. His Twitter account was created in 2011, and before 2015, he focused mostly on exposing corruption and the rise to power of Khaled al-Tuwaijri, previous King Abdullah's chief of court. In 2015, his Twitter account was suspended after he posted a series of documents regarding Princess Maha Al Sudairi.

On 2 October 2018, Jamal Khashoggi, a Saudi dissident journalist, was killed by agents of the Saudi government at the Saudi consulate in Istanbul, Turkey. Khashoggi was ambushed and strangled by a 15-member squad of Saudi operatives. His body was dismembered and disposed of in some way that was never publicly revealed. The consulate had been secretly bugged by the Turkish government and Khashoggi's final moments were captured in audio recordings, transcripts of which were subsequently made public.

Qahtan and Qahtani (Kahtani) or with the definite article al- as Al-Qahtani (Al-Kahtani) meaning coming from Qahtan may refer to:

Saud bin Abdullah al-Qahtani is a Saudi Arabian consultant and former royal court advisor. Prior to his dismissal in late 2018, he worked as an advisor to King Abdullah of Saudi Arabia and crown prince Mohammed bin Salman.

The Bees Army or Geish al-Nahl, also called the "Electronic Bees", refers to an opposition movement aimed at confronting what the movement describes as Saudi Arabian government propaganda. The movement consisted of 600 members as of 2018 and was supported by Jamal Khashoggi, who was assassinated by agents of the Saudi government. In May 2021, the Saudi Arabian authorities commenced an arrest campaign to detain the people whom were claimed to be the members of the movement.

References

↑ Benner, Katie; Mazzetti, Mark; Hubbard, Ben; Isaac, Mike (October 20, 2018). "Saudis' Image Makers: A Troll Army and a Twitter Insider". The New York Times. ISSN 0362-4331 . Retrieved July 3, 2021.
1 2 3 "Two Former Twitter Employees and a Saudi National Charged as Acting as Illegal Agents of Saudi Arabia". www.justice.gov. November 7, 2019. Retrieved July 3, 2021.
↑ Silverman, Jacob; Ashford, Emma; Ashford, Emma; Silverman, Jacob; Silverman, Jacob; Heer, Jeet; Heer, Jeet; Silverman, Jacob; Silverman, Jacob (April 9, 2021). "Twitter Is Enabling Saudi Arabia's Brutal Crackdown on Dissent". The New Republic. ISSN 0028-6583 . Retrieved July 5, 2021.
↑ "سعود القحطاني on Twitter". Twitter (in Turkish). Archived from the original on September 26, 2018. Retrieved July 5, 2021.
↑ "Lord Of The Flies: An Open-Source Investigation Into Saud Al-Qahtani". bellingcat. June 26, 2019. Retrieved July 5, 2021.
↑ "Twitter Bans Saudi Official Implicated in Khashoggi Murder, Hundreds of Other Pro-Saudi Accounts". Gizmodo. Retrieved July 4, 2021.
↑ Paul, Katie (December 21, 2019). "Twitter suspends accounts linked to Saudi spying case". Reuters. Retrieved July 5, 2021.
↑ "Twitter removes 90,000 accounts linked to Saudi influence operation". Los Angeles Times. December 20, 2019. Retrieved July 5, 2021.
↑ Paul, Diane Bartz, Katie (November 7, 2019). "U.S. accuses two former Twitter employees of spying for Saudi Arabia". Reuters. Retrieved July 6, 2021.{{cite news}}: CS1 maint: multiple names: authors list (link)
↑ "Former Twitter employees federally charged with working for Saudis". ABC News. Retrieved July 7, 2021.
1 2 3 4 5 6 7 "How Saudi Arabia Infiltrated Twitter". BuzzFeed News. Retrieved July 4, 2021.
↑ "A Saudi Prince's Attempt to Silence Critics on Twitter". Wired. ISSN 1059-1028 . Retrieved July 6, 2021.
1 2 "Ex-Twitter worker arrested in Seattle is charged with spying for Saudi Arabia". The Seattle Times. November 6, 2019. Retrieved July 7, 2021.
↑ "Twitter Insiders Allegedly Spied for Saudi Arabia". Wired. ISSN 1059-1028 . Retrieved July 7, 2021.
1 2 "Former Twitter employees charged with spying for Saudi Arabia". The Guardian. November 6, 2019. Retrieved July 3, 2021.
↑ "FaceOf: Bader Al-Asaker, secretary-general of Misk Foundation". Arab News. May 28, 2018. Retrieved July 5, 2021.
↑ "UNESCO Said It Has No Plans To Renew A Deal With An Alleged Saudi Spy At Twitter "At This Time"". BuzzFeed News. Retrieved July 6, 2021.
↑ "ALI HAMAD A ALZABARAH". Federal Bureau of Investigation. Retrieved July 5, 2021.
↑ "AHMED SAAD M ALMUTAIRI". Federal Bureau of Investigation. Retrieved July 5, 2021.
↑ "Judge Rejects Bid to Drop Charges Against Alleged Saudi Spying Accomplice". www.courthousenews.com. Retrieved July 7, 2021.
↑ "Former Twitter employee sentenced to more than three years in prison for spying for Saudi Arabia". NBC News. December 14, 2022. Retrieved January 22, 2025.
↑ "Former Twitter employees charged with spying for Saudi Arabia by digging into the accounts of kingdom critics". Washington Post. ISSN 0190-8286 . Retrieved July 7, 2021.
1 2 Gallagher, Ryan (August 18, 2020). "Spies in Silicon Valley: Twitter Breach Tied to Saudi Dissident Arrests". Bloomberg. Retrieved July 5, 2021.
↑ "Saudi Arabia jails alleged satirist 'identified in Twitter infiltration'". The Guardian. April 9, 2021. Retrieved July 5, 2021.
↑ "'A direct trail of blood drops' leads from a Twitter hack to Jamal Khashoggi's murder". news.yahoo.com. Retrieved July 5, 2021.
↑ Blumberg, Peter (December 17, 2019). "Twitter Denies It Failed to Warn Saudi Dissident of Account Hack". Bloomberg. Retrieved July 6, 2021.
↑ Bostock, Bill. "A Saudi dissident suing Twitter over a massive 2016 hack says the platform's incompetence got multiple whistleblowers killed". Business Insider. Retrieved July 3, 2021.