CIA’s Al-Qaeda Files Reveal Terrorism's Hidden Advantage

Newly declassified CIA records reveal that Osama Bin Laden not only built al-Qaeda as an intelligence-style network reliant on strategic partnerships and illicit financing, but that he also established a decentralized operational model that continues to shape modern terrorist threats today.

Photograph of Osama Bin Laden and  Ayman al-Zawahiri

The CIA has finally opened its vault on the pre-9/11 intelligence it collected on al-Qaeda, a quarter-century after the shock of those attacks still hangs over the United States. Last week, the agency released 71 President’s Daily Brief products, the classified memos delivered each morning to President Bill Clinton and then President George W. Bush, covering the period from 1998 through the day after the Twin Towers fell.

For most Americans, reading the collection is both familiar and unsettling. Read individually, the memos provide scattered pieces of intelligence, including warnings, judgements, and missed clues that now seem painfully clear, even though no single report captured the whole picture at the time. Taken together, however, the documents reveal the scale of the network Osama Bin Laden had built around al-Qaeda and the extent to which its strength came from relationships that stretched well beyond his organization.

Al-Qaeda was not simply a terrorist organization with a large and motivated following. Bin Laden had expertly built a vast, highly compartmented clandestine network held together by layers of intermediaries, fixers, reliable partnerships, multiple sources of cash, and tightly controlled information. In structure, if not purpose, al-Qaeda increasingly resembled a paramilitary intelligence service, almost a terrorist version of the very agency now releasing these files. 

More than anything, the overlapping partnerships Bin Laden developed across a motley group of militant factions were arguably as crucial as formal membership in al-Qaeda itself, which expanded his reach far beyond his own organization. One partner cell could operate without knowing what another was doing, while trusted liaisons carried information between armed factions that often did not know who else was involved. This allowed his broader network to keep functioning even when its individual pieces remained disconnected. 

That compartmentation made al-Qaeda’s activities harder to map while giving Bin Laden access to people around different partner organizations who could move fighters, weapons, and money. It also brought new expertise and access to al-Qaeda that no single group could provide on its own. The scale of that sprawling al-Qaeda enterprise is evident in the CIA memos. It stretched across continents, quietly assembling fighters and support long before the organization was treated as the threat it would become. The group recruited far beyond its traditional grounds, drawing fighters from "Pakistan, Turkey, the Arabian Peninsula, Chechnya," as well as across Africa and Europe, including the United Kingdom. This partnership model did not disappear with Bin Laden’s death, but instead evolved.

By 1999 and 2000, those arrangements had grown far larger than most intelligence agencies understood. Al-Qaeda had also established a community that included some US citizens, along with a support network inside the United States, stretching from Tampa and Boston to Michigan and California. Some of that support was reportedly channeled through American nonprofits. As early as December 1999, the group was already running an "Extremist Muslim Hackers Club," offering an early glimpse of the technology-enabled terrorism that would become a much greater challenge over the next two decades.

Bin Laden's less-discussed business interests may have been just as consequential. The documents trace his deep involvement in narcotics financing and shipping, showing how the drug trade served not only as a source of financing but also as a covert logistics network connecting people and suppliers. An October 1999 intelligence report described his “substantial investment in 57 narcotics laboratories” linked to then-Taliban leader Mullah Mohammad Omar. It also reported Bin Laden's recruitment of chemists to develop addictive drugs, including ecstasy and methamphetamine. 

But the narcotics business did more than provide al-Qaeda with cash. It directly tied al-Qaeda to elements of the Taliban regime and its broader network, providing access to local suppliers, labs, safe houses, documents, and safe passage. Although Taliban publicly denies involvement in the drug trade, its leaders have often privately rationalized it by arguing that the drugs were exported overseas and primarily harmed foreigners. 

A similar partnership logic guided Bin Laden in his pursuit of unconventional weapons. As early as February 1998, CIA reporting indicated that Bin Laden and fellow terrorists had agreed to procure unspecified chemical, biological, and nuclear substances from “open markets.” In doing so, he also drew on legitimate companies and businesses to help finance the effort. By May 1999, intelligence assessed that Bin Laden was pursuing various options for developing such weapons. A June 1999 brief reported that al-Qaeda trainees had tested dozens of toxic chemicals and biological toxins. Al-Qaeda operatives had also experimented with lacing explosives with radioactive material, a crude precursor to what is commonly known as a “dirty bomb.” While the memos provide no conclusive evidence that al-Qaeda had produced a finished weapon, they show an organization actively seeking mass-casualty capabilities years before Washington routinely paired such weapons with al-Qaeda’s name.

What’s more, Bin Laden’s intent to strike the United States was equally clear. A September 1998 memo assessed that his preferred option was to target the United States on its own soil, warning that al-Qaeda’s network "may fly an explosive-packed airplane into a U.S. city."  By August 6, 2001, the now-famous briefing titled "Bin Ladin Determined To Strike in US" noted roughly 70 open FBI investigations into possible al-Qaeda-linked activity inside the country. A situation report filed the day after the 9/11 attacks noted how “the existence of a probable operation was widely known among extremists in Afghanistan,” while quoting “a Kandahar-based Arab” saying that the “attacks were the result of two years’ planning.”

To be sure, these warnings are easier to read now with the benefit of hindsight, even though the fuller picture of what US intelligence was actually working with at the time remains less clear. Even so, an independent reading of these files alone suggests that the CIA’s own collection effort was often patchy at best. One can piece together a wide range of reliable and unreliable sources reflected in the memos, including individual walk-ins to US embassies, foreign liaison services, informants, detainees, and open-source media reports. Some pieces of information pointed in different directions, while others were either difficult to corroborate or assessed as highly questionable.

Some intelligence also came from unnamed Taliban figures, some of whom may still hold senior positions under the current Taliban regime. That detail matters because it underscores how much the broader CIA intelligence picture depended on relationships surrounding a terrorist organization that Washington was simultaneously trying to understand and pressure. Still, the harder challenge was the structure of the threat itself, with al-Qaeda network scattered across organizations, financial channels, and al-Qaeda's individual relationships with armed factions that often looked separate yet were linked in ways that were difficult to see.

That picture becomes especially complicated when the memos turn to the Taliban’s relationship with al-Qaeda. They paint a more complex picture of the relationship between Taliban’s then-leader Mullah Omar and Bin Laden than the otherwise familiar story of two ideologically inseparable organizations. Omar reportedly viewed the al-Qaeda leader as a "problem" and a “liability for the Taliban” who was becoming "too radical." That a movement as radical as the Taliban would describe al-Qaeda as a "Muslim Brotherhood-style organization" that "could threaten Taliban" reveals how uneasy the relationship had become, despite the permissive environment the regime provided to al-Qaeda. 

The reporting shows that the relationship was more tenuous than it appeared from the outside. For example, on January 3, 2000, Taliban-Bin Laden ties were described as "strong." Eleven days later, they were "strained." The two had clashed over al-Qaeda's determination to launch external attacks, with Bin Laden telling Omar directly that he "had operations in progress that would cause great damage to the US." The exchange, just weeks before 9/11, captures the relationship in miniature: a host who could not, or would not, get rid of a dangerous guest and a terrorist leader increasingly willing to act without his host's consent. Yet Omar rejected “official recommendations” from “more pragmatic” Taliban figures around him, including his Council of Ministers head, Mullah Mohammad Rabbani, who had advised expelling Bin Laden from Afghanistan. 

This likely suggests that the partnership was hardly a matter of ideological solidarity or mutual dependence alone. The CIA reporting shows a strong transactional element, centered on Omar’s political calculations and his fear that expelling Bin Laden could fracture the Taliban’s own ranks. During the 1990s, al-Qaeda fought for the Taliban as its own dedicated formation, Brigade 055, while many Taliban members supported or sympathized with al-Qaeda’s cause. According to the memos, Omar even used force against Taliban dissenters over the Bin Laden question, executing a Taliban commander and his men after they opposed the official Taliban policy of not expelling the terrorist leader. At the same time, Bin Laden's own efforts to influence Taliban ranks likely deepened the tension between the two sides. In one instance, he reportedly offered to “pay Taliban fighters $100 a month” in an attempt to “reduce their loyalty to Omar.” 

Understanding that tension and ambiguity still matter, in part because the Taliban’s senior ranks may view their ties with al-Qaeda less as a permanent alliance than as a negotiable partnership. If so, the Taliban’s approach to al-Qaeda could shift with personalities, external threats, the Taliban’s financial needs, and competing interests with the regime. Making sense of that fluidity remains critical to explaining both the current state of al-Qaeda-Taliban ties and the wider internal dynamics of jihadist politics across the region.

Still, the relationship shows that Bin Laden’s own influence did not necessarily depend on controlling every actor in his orbit. An independent reading of the memos would suggest that much of Bin Laden’s influence, and perhaps the real advantage of his brand of jihadist politics, likely came from his ability to convene, persuade, exchange favors, and open parallel channels of cooperation among separate militant groups, including factions within the Taliban. This web of connections allowed him to draw on capabilities that extended well beyond those under his direct command.

That al-Qaeda approach has survived to this day. Today, for example, the al-Qaeda-Taliban relationship operates through several overlapping tracks of ideological affinity, political accommodation, and operational cooperation, including through the Haqqani network, a governing partner in the Taliban regime whose ties to al-Qaeda predate the Taliban’s own relationship with the group. These relationships have outlived years of external military pressure and internal strains, including the 2022 US strike that killed Bin Laden's successor, Ayman al-Zawahiri, in downtown Kabul. While his killing was a major loss for al-Qaeda, it was also an embarrassment for the Taliban, which had allowed him to live under its protection. 

However, rather than al-Qaeda breaking the relationship, the two sides managed to contain the fallout and prevent an al-Qaeda overreaction directed at the Taliban. They did so by quietly carrying out retaliatory killings, taking hostages (including an Afghan-American dual national) and reshuffling al-Qaeda camps and personnel to tighten security. While Taliban publicly denies these actions, they remain an open secret on the ground.

The same network problem extends to Pakistan, where al-Qaeda was established in 1988. Much of the organization’s activity and senior leadership were concentrated in Pakistani cities, including Bin Laden himself until US forces killed him in Abbottabad. Over the past two decades, al-Qaeda has also maintained strong ties with the Pakistani Taliban and other Pakistani groups within the country’s deeply entrenched militant landscape. Yet the documents contain surprisingly little direct reporting on Pakistan’s role, especially considering how Pakistan's relationship with al-Qaeda predates its relationship with Taliban. Future declassifications that shed more light on that relationship could help explain this period more fully, particularly what Pakistan knew, enabled, or may have turned a blind eye to as al-Qaeda built and sustained its regional network.

The CIA reporting also traces Bin Laden's ties to older Afghan jihadist networks, specifically those operated by Afghan warlords Abdul Rab Rasul Sayyaf and Gulbuddin Hekmatyar. Those relationships helped incubate some of the alliances Bin Laden later built upon, though these files do not report how involved al-Qaeda remained with either group over the years that followed. Today, both men reside in Turkey and Malaysia, respectively, and remain relevant to the dirty history of the Afghan jihad.

Nevertheless, as in the past, al-Qaeda has continued to need two things from the Taliban since the US withdrawal from Afghanistan in 2021: sanctuary for its leadership and enough freedom to plan external operations. For now, Taliban appears to provide the first, which has prompted al-Qaeda to shift much of its operational activity toward its regional affiliate, al-Qaeda in the Indian Subcontinent (AQIS). AQIS itself works through a range of partners, including Pakistani Taliban (TTP), Pakistani Baloch groups, and Central Asian Uzbek and Uyghur militants. 

In this space, Bin Laden's old partnership model also extends through a newer layer of foreign fighters spread across the region, many of whom are not permanently tied to a single organization. These unaffiliated fighters can move between competing or rival groups depending on the opportunity. Some effectively act as subcontractors, brokering access to information, black markets, fertilizer, weapons, and money transfers. They are often educated, technologically savvy, commercially connected, and difficult to distinguish from the communities in which they operate. Many use Taliban-style noms de guerre such as al-Afghani, al-Emirati, Haqqani, al-Omari, and al-Mansoori, making them harder to identify and track.

In Afghanistan’s eastern Kunar province, local people often map militant presence by faction in their communities. Some districts, such as Shultan, are widely known for al-Qaeda activity. Others, stretching across Chapa Dara, Pech, Manogai, and Shegal into Wama in neighboring Nuristan, are associated with the Islamic State’s regional arm (ISIS-K). Areas around Marawara, Watapur, and parts of Shultan have a strong presence of the Pakistani Taliban, while areas along Shegal and the Kunar River are associated with Pakistani Lashkar-e-Taiba and Jaish-e-Mohammed groups. Many of these factions also increasingly share recruitment pipelines and operational knowledge. 

The Taliban, for its part, has chosen to absorb some groups like al-Qaeda rather than confront them directly. By bringing them into its broader apparatus of control, the regime retains a degree of leverage over them while giving them enough space to operate without openly challenging Taliban authority. In some instances, that has involved formally registering foreign fighters and issuing them weapons permits and travel documents. In others, members of armed factions have been assimilated into local security positions, including border police. On the commercial side, some joint cells reportedly run gold and other smuggling operations in Afghanistan while posing as local businessmen. 

The main outlier is ISIS-K, which uses Afghan and Pakistani territory to support lone-actor attacks well beyond the region, including in the United States and Europe. Even here, however, the lines of competition are not always clear. ISIS-K’s relationship with the Taliban is markedly different from its relationship with al-Qaeda, with ISIS-K treating the Taliban as an enemy and targeting its personnel and institutions. Still, the Taliban and al-Qaeda often play down the ISIS-K threat, likely recognizing that open feuding can be costly for everyone.

To an extent, such provisional arrangements have worked to the Taliban’s advantage while also creating a form of leverage over regional countries. By keeping terrorist groups under varying degrees of control, the regime can present itself as an interlocutor to governments that must weigh engagement against the risk of legitimizing or empowering it. Many countries have already taken the engagement route, including China, Russia, India, and nearly all Central Asian and Arab Gulf states. Al-Qaeda and other terrorist groups, meanwhile, benefit from the Taliban’s diplomatic isolation, yet the regime continues to find value in those relationships.

The old al-Qaeda would appreciate this partnership approach, though what has changed that model is technology. Cheap drones, encrypted messaging, digital payments, and artificial intelligence are lowering barriers to acquiring capabilities that once required the resources of large organizations. Anthropic’s recent disclosure that a Yemen-based Houthi operation used Claude to accelerate work on advanced missiles and rocket tests offers an alarming glimpse of what this shift could mean for other terrorist groups. 

This is where the CIA files become less a record of the past than a warning about the future. Technology is extending the partnership model Bin Laden pioneered in ways that now allow smaller networks to tap into new lethal capabilities. As lone actors and smaller cells take on new roles in this space, the decentralized risks they pose could become even harder to see. 

That is the deeper lesson buried in these CIA files. The next terrorist threat may not emerge from a single organization, but from the connections between them. For the CIA, the challenge is therefore not simply identifying the next terrorist group, but finding the relationships forming around it. That is where the next al-Qaeda may be hiding.