A 29-year-old Afghan national accused of ambushing two National Guard members near the White House had prior ties to U.S. government entities in Afghanistan, including work that involved the Central Intelligence Agency, John Ratcliffe said Wednesday. Ratcliffe served as director of national intelligence under President Donald Trump.
The suspect arrived in the United States in September 2021 under Operation Allies Welcome, the evacuation program that resettled people who aided U.S. forces after the fall of Kabul, according to local reports. The FBI is leading the investigation, and federal officials said they are treating the incident as a possible act of international terrorism.
The shooting has prompted questions about vetting and oversight for evacuees admitted after the Taliban takeover, and it has renewed focus on protection for service members and public officials in the capital. The case will be followed closely in our Crime Coverage of security and public safety in Washington.
Background
The attack occurred within blocks of the White House and left two West Virginia National Guard members in critical condition, the FBI confirmed. Local officials said a suspect was taken into custody at the scene.
- Suspect: a 29-year-old Afghan national who entered the United States in September 2021 under Operation Allies Welcome, according to officials.
- Alleged victims: two National Guard members on duty near the White House were shot and remain in critical condition.
- Custody: metropolitan and local law enforcement detained a suspect at the scene, D.C. Mayor Muriel Bowser said.
Officials and Records
John Ratcliffe said the accused had worked with U.S. government entities while serving with a partner force in Kandahar, Afghanistan, and that those ties informed the individual’s acceptance into the 2021 evacuation program. Ratcliffe is a former Trump administration official and is not the director of the CIA.
Federal investigators said the FBI has assumed lead responsibility for the probe, and are coordinating with the Justice Department and local law enforcement. Intelligence officials described the incident as a potential act of international terrorism while investigators work to establish motive and any links to extremist networks.
Authorities have not publicly released the suspect’s name or a formal list of charges. Prosecutors typically review evidence with investigators before filing charges in cases that may involve terrorism or attacks on military personnel, and charging decisions can involve both federal statutes that address attacks on service members and terrorism-related statutes.
Vetting, Resettlement and Policy Questions
Operation Allies Welcome was the broad U.S. effort to evacuate and resettle Afghans who assisted U.S. missions after the Kabul government collapsed in August 2021. The program involved multiple agencies, including the Department of Defense, the State Department and the Department of Homeland Security, and used a mix of security screenings, biometric checks and information provided by local partners.
Officials and lawmakers have said the evacuation environment was chaotic and that resettlement agencies faced time and resource limits. Critics have argued that those constraints can leave gaps in vetting, while defenders note that many people helped and that final security screenings continue after arrival. The case will likely deepen congressional interest in oversight of emergency evacuations and interagency information sharing.
Lawmakers from both parties have previously sought reforms to ensure faster, more complete intelligence sharing between agencies and clearer standards for resettlement screening. Any legislative response could involve funding for expanded vetting capacity, improved access to foreign records and enhanced cooperation with allied intelligence services.
Legal and Security Response
Federal investigations of potential terrorism offenses commonly involve the FBI’s joint terrorism task forces, which bring together federal, state and local partners to gather evidence, execute search warrants and pursue charging decisions. The Justice Department can bring federal charges for assaults on members of the armed forces or for terrorism-related acts, and cases are often prosecuted in federal court in the District of Columbia when attacks occur near federal buildings or officials.
In the short term, the shooting will prompt local security reviews for patrol patterns, screening for public events and protection of military and government personnel working near high-profile sites. D.C. law enforcement and the U.S. Secret Service routinely coordinate on security around the White House and foreign missions.
Reactions
President Donald Trump, speaking in an online address late Wednesday, called the assault a savage attack and described it as an act of terror. He said the nation stands with the victims and their families.
Mayor Bowser said investigators believe a single individual appeared to target the guardsmen and that the suspect had been taken into custody. She urged patience as the investigation proceeds and evidence is reviewed.
Federal officials said they would not provide a timetable for additional public disclosures or charging decisions, noting that investigative steps include forensic analysis, witness interviews and review of any digital evidence recovered at the scene.
Analysis
The case highlights competing priorities officials faced after the fall of Kabul: a humanitarian and security effort to evacuate people who aided U.S. operations, and the need to vet entrants for potential security risks. If investigators confirm the accused had formal ties to U.S. agencies while in Afghanistan, the episode will intensify scrutiny of how intelligence, visa screening and resettlement programs share and verify information during large-scale evacuations.
For governance and accountability, the key questions will be whether existing protocols were followed, where gaps emerged because of operational pressure, and what reforms can reduce future risks without undermining obligations to allies. For public safety, investigators must determine motive and whether the attack was an isolated crime or part of an organized threat.
Policymakers are likely to press for clearer oversight, faster information sharing and more resources for vetting in emergency settings. Those steps could improve long-term security but will require political will and funding to implement across agencies that routinely operate on different timelines and with different legal authorities.
