In the spring of 2004, Thomas Tamm—a Justice Department attorney assigned to the Office of Intelligence Policy and Review—realized the Bush administration was conducting surveillance that bypassed the Foreign Intelligence Surveillance Court. He walked to a pay phone near the Wheaton Metro station and called a New York Times reporter. That call set in motion a 13-month negotiation between the newspaper and the White House that ended with a Pulitzer Prize-winning exposé of the NSA's Stellar Wind program. Tamm's identity remained secret for four years. When it was revealed, the FBI had already raided his home.
Thomas Tamm's office was nine floors below ground in the Main Justice Building on Pennsylvania Avenue. The Office of Intelligence Policy and Review occupied secure space where attorneys with Top Secret/SCI clearances reviewed every application for electronic surveillance under the Foreign Intelligence Surveillance Act before it went to the secret FISA Court. Between 30 and 40 lawyers worked there, reading wiretap requests, examining probable cause statements, ensuring minimization procedures protected the privacy of U.S. persons. Tamm had been there since 1998. His father, Quinn Tamm, had been a career FBI official who served as assistant director under J. Edgar Hoover. The younger Tamm understood the culture of secrecy, the weight of classification, the unwritten rules about what could and could not be discussed.
In the spring of 2004, Tamm began noticing something odd. FISA applications crossing his desk referenced intelligence that appeared to have been gathered without the court approval FISA required. The references were vague—oblique mentions of collection that seemed to exist outside the normal warrant process. Tamm read the statute again. FISA was explicit: electronic surveillance of U.S. persons for foreign intelligence purposes required a court order. The law made exceptions only for communications entirely between foreign powers outside the United States and emergency situations that still required retroactive court approval within 72 hours.
What Tamm was seeing suggested the Bush administration had created a surveillance program that bypassed the FISA Court entirely. The implications were staggering. If the references meant what he thought they meant, the government was conducting warrantless surveillance in direct violation of federal law. Tamm was a Justice Department attorney—an officer of the court with an oath to uphold the Constitution. He consulted colleagues obliquely, without revealing what he knew. He researched the legislative history. The statute was unambiguous.
Tamm made his decision in the parking lot of a shopping center near the Wheaton Metro station in suburban Maryland. He used a pay phone—a deliberate choice in an age when cell phones were ubiquitous and their location data easily tracked. He called Eric Lichtblau, a New York Times reporter covering the Justice Department. The initial conversation was brief and guarded. Tamm did not identify himself. He provided enough detail to establish credibility but not enough to reveal the program's full architecture. He told Lichtblau the government was conducting surveillance without FISA warrants. He said it had been authorized at the highest levels. He said attorneys in his office were uncomfortable with what they were seeing but had been told to process the applications without raising questions.
Lichtblau and his colleague James Risen began working sources. The reporters had covered intelligence agencies for years and understood the protocols of verification. They needed multiple sources. They needed documents. They needed to understand the program's scope—how many Americans' communications were being intercepted, what legal theory the administration was relying on, whether Congressional leaders had been briefed. The reporting took months. Tamm made additional contacts, always from pay phones, always cautious. Other sources emerged—current and former intelligence officials disturbed by the program, Congressional staffers who had received limited briefings and had questions about what they'd been told.
"I thought this program was not being conducted consistently with the law. I thought it was an end run around the FISA statute."
Thomas Tamm — Newsweek, August 2008By summer 2004, Risen and Lichtblau had confirmed the program's existence and basic contours. The National Security Agency was intercepting communications without warrants when one party was inside the United States and the other was overseas. The legal authorization came not from the FISA Court but from presidential directives signed by George W. Bush and reauthorized approximately every 45 days. The program had been operational since October 2001—one month after the September 11 attacks. Fewer than a dozen officials in the executive branch knew its full scope. The intelligence committees in Congress had received only the most limited briefings, restricted to the so-called "Gang of Eight"—the majority and minority leaders of both chambers plus the chairs and ranking members of the intelligence committees.
The Times had the story by late summer 2004, three months before the presidential election. What happened next became one of the most controversial editorial decisions in modern American journalism. Publisher Arthur Sulzberger Jr. and Executive Editor Bill Keller decided not to publish. The reasons were complex. The administration had requested a meeting. NSA Director Michael Hayden came to the Times' offices. President Bush invited Sulzberger to the Oval Office. The message was consistent: publication would compromise national security, alert terrorists to surveillance methods, potentially cost American lives.
The Times continued reporting, seeking to understand whether the program had produced intelligence that prevented attacks, whether it had intercepted communications of Americans with no connection to terrorism, what the program's success rate was. Sources were difficult to cultivate—most officials with knowledge of the program were bound by classification agreements and special access protocols that restricted discussion even within the classified world. Some officials privately expressed concerns about the program's legality but declined to speak on the record or even on background. The institutional equities were enormous: the Times risked publishing a story that might harm national security; the administration was running a program of questionable legality without public debate or Congressional oversight.
The delay became a point of bitter criticism after publication. Some press freedom advocates argued the Times had allowed political considerations to override journalistic duty. If the story had run before November 2004, would voters have factored warrantless surveillance into their assessment of the Bush administration? The Times' editors denied political calculations played any role. Bill Keller later wrote that the delay reflected responsible caution—the need to be certain of the facts, to understand the security implications, to give the administration a fair hearing. Others saw self-censorship born of post-9/11 anxiety about being blamed if another attack occurred.
While the Times debated publication, a separate crisis was unfolding inside the Justice Department. In March 2004, Attorney General John Ashcroft was hospitalized with acute pancreatitis. Deputy Attorney General James Comey became acting Attorney General. In that capacity, he reviewed the legal authorization for the NSA's surveillance program, which required certification by the Attorney General every 45 days. Comey concluded aspects of the program could not be legally certified under existing statutory authority.
On the evening of March 10, 2004, White House Counsel Alberto Gonzales and Chief of Staff Andrew Card went to George Washington University Hospital, where Ashcroft lay sedated. They sought to obtain Ashcroft's signature on the reauthorization over Comey's objection. Comey, alerted by Ashcroft's wife, rushed to the hospital and arrived minutes before the White House officials. What followed was a confrontation that nearly produced mass resignations from Justice Department leadership. Ashcroft, though ill, told Gonzales and Card he agreed with Comey's legal assessment. The officials left without the signature.
"I was very upset. I was angry. I thought I just witnessed an effort to take advantage of a very sick man."
James Comey — Senate testimony, May 2007Comey prepared his resignation letter. FBI Director Robert Mueller prepared his. Other senior Justice officials indicated they would resign en masse if the program continued without modification. President Bush, facing the prospect of a constitutional crisis that would inevitably become public, agreed to changes that addressed the Justice Department's legal concerns. The program continued in modified form. The incident remained classified until Comey testified about it before Congress in May 2007—testimony that corroborated concerns about the program's legality from within the government itself.
The Times finally published on December 16, 2005. The story ran under the headline "Bush Lets U.S. Spy on Callers Without Courts." Risen and Lichtblau reported that the NSA had been eavesdropping on hundreds, perhaps thousands, of people inside the United States without warrants. The program targeted international communications—calls and emails where one party was in the U.S. and the other overseas—when the NSA believed one party might be connected to al-Qaeda or related terrorist organizations. The legal authorization came from classified presidential directives. The FISA Court, which had been created specifically to review such surveillance requests, had been bypassed entirely.
The timing was significant. The Senate was scheduled to vote the next day on reauthorizing the PATRIOT Act. The surveillance revelation changed the political calculus. Several senators who had been prepared to vote for reauthorization reconsidered. The Act's reauthorization was delayed while Congress debated what oversight mechanisms existed—or didn't exist—for intelligence collection programs operating outside statutory frameworks.
President Bush addressed the nation the next day in his weekly radio broadcast. He confirmed the program's existence and defended it as a "terrorist surveillance program" essential to national security. He argued the Authorization for Use of Military Force passed by Congress after 9/11 provided legal authority to conduct surveillance without FISA warrants. The legal theory was disputed. Most constitutional scholars and former Justice Department officials argued FISA explicitly prohibited such surveillance and that the AUMF—a general authorization for military action—did not override a specific statute governing electronic surveillance. The administration's position was that the President's Article II powers as Commander in Chief included inherent authority to conduct warrantless surveillance for national security purposes.
Thomas Tamm's life as an anonymous source ended at dawn on August 1, 2007. FBI agents executed a search warrant at his home in Potomac, Maryland. They seized computers, files, personal papers. Tamm's teenage son watched as agents went through his father's office. The warrant was based on suspicion of unauthorized disclosure of classified information under Title 18 USC 793—the Espionage Act statute that makes it a felony to transmit national defense information to unauthorized persons. Tamm was placed on administrative leave from the Justice Department. His security clearance was revoked. He hired a lawyer. He waited.
The investigation continued for over a year without charges being filed. Tamm remained in legal limbo—unable to work in his profession, facing potential prosecution that could result in years in federal prison, watching his savings drain to legal fees. Other potential sources faced similar investigations. The Justice Department subpoenaed James Risen, seeking to compel him to testify about his sources before a grand jury. Risen refused, citing reporter's privilege. The legal battle would continue for seven years, with Risen facing the prospect of imprisonment for contempt if he continued to refuse. In 2015, the Justice Department finally dropped its demand that Risen reveal his sources.
In August 2008, four years after his initial phone call to the Times and one year after the FBI raid, Thomas Tamm agreed to be identified publicly. Newsweek reporter Michael Isikoff wrote a detailed profile revealing Tamm's role and explaining his motivations. Tamm told Isikoff he believed the warrantless surveillance violated FISA and that his oath to uphold the Constitution compelled him to speak out. He described using pay phones because he knew his office communications were monitored. He acknowledged the personal cost—the raid, the investigation, the professional exile, the financial strain.
The decision to come forward was strategic. Tamm and his lawyers calculated that going public might actually reduce the likelihood of prosecution. A trial would require the government to present evidence about the surveillance program itself—evidence that remained classified. It would force prosecutors to explain why an attorney who believed he was reporting illegal activity should face criminal charges under the Espionage Act. It would raise uncomfortable questions about whether the government was prosecuting whistleblowers to suppress information about its own lawbreaking rather than to protect genuine national security secrets.
"I went to a reporter, somebody who could do something about it. I couldn't just ignore it."
Thomas Tamm — Newsweek, August 2008Legal experts were divided on whether Tamm had broken the law. Some argued any disclosure of classified information was criminal, regardless of motive. Others contended that whistleblower protections should apply when the disclosed information revealed government illegality. The Whistleblower Protection Act provided safeguards for federal employees who reported waste, fraud, and abuse, but courts had interpreted those protections narrowly when national security classification was involved. The Intelligence Community Whistleblower Protection Act established procedures for reporting concerns about intelligence activities, but those procedures required reporting through internal channels—the very channels Tamm believed were complicit in the illegal surveillance.
The Bush administration left office in January 2009 without bringing charges against Tamm. The Obama administration, which inherited the investigation, also declined to prosecute. The decision was never officially explained, but legal observers suggested several factors. The case was legally weak—proving that Tamm acted with intent to harm national security rather than to expose illegal activity would be difficult. A trial would require disclosure of still-classified aspects of the surveillance program. And prosecuting a whistleblower who revealed a program the government itself had acknowledged raised serious legal questions would be politically and constitutionally fraught.
Tamm returned to legal practice in the private sector. He has spoken occasionally about the experience, emphasizing that he acted out of conviction that the warrantless surveillance was illegal and that internal reporting channels were unavailable or compromised. He has expressed no regrets about the disclosure itself but acknowledged the personal toll of the investigation and the years of uncertainty about whether he would face prosecution.
The broader surveillance architecture Tamm helped expose continued to evolve. In 2008, Congress passed the FISA Amendments Act, which brought warrantless surveillance under statutory authority while granting retroactive immunity to telecommunications companies that had cooperated with the program. The law authorized collection of foreign intelligence from international communications without individualized warrants, provided that surveillance targeted non-U.S. persons reasonably believed to be outside the United States. Civil liberties organizations challenged the law as unconstitutional, but in 2013 the Supreme Court dismissed the challenge on standing grounds, ruling that plaintiffs could not prove their communications had been intercepted.
Edward Snowden's 2013 disclosures revealed that the surveillance programs Tamm had exposed in 2004 were one component of a much larger architecture. The documents Snowden leaked to journalists showed the NSA was collecting telephone metadata on all calls within the United States, intercepting internet communications through direct access to technology company servers, and conducting surveillance under authorities that went far beyond what Congress understood when it passed the FISA Amendments Act. The Stellar Wind program Tamm had reported was the seed of a global surveillance apparatus that operated largely outside public knowledge or democratic oversight.
Tamm's disclosure and the Times' publication opened a window into that architecture eight years before Snowden. The impact was significant but incomplete. The Bush administration acknowledged the program, defended its legality, and obtained Congressional authorization for modified versions through the 2008 FISA Amendments. But the full scope remained hidden. The metadata collection that Snowden revealed had never been publicly disclosed. The PRISM program that provided access to internet companies' data was unknown. The breadth of NSA collection under Executive Order 12333—which operated entirely outside FISA's framework for collection that occurred overseas—remained classified.
Comparing the two disclosures reveals the limits and necessity of incremental revelation. Tamm exposed one program, working within boundaries of what he could verify from his Justice Department position. The Times published what it could confirm and what it judged would not cause immediate harm. The result was public debate that led to statutory changes—but those changes were built on incomplete information about what the government was actually doing. Snowden's disclosures, eight years later, provided documents that showed the legislative response had failed to constrain collection in the ways Congress believed it had.
The 2009 Inspectors General Report on the President's Surveillance Program—declassified in 2015 with significant redactions—provided official confirmation of facts that had been disputed or unknown. The report confirmed President Bush authorized the program in October 2001 through a classified directive. It confirmed the program intercepted communications without warrants. It confirmed only a small number of executive branch officials knew the program's full scope. It confirmed the March 2004 hospital confrontation and the near-mass resignation at Justice. It confirmed that Congressional leaders received only limited briefings that did not explain the program's legal basis or technical capabilities.
The report also revealed significant disagreements within the intelligence community about the program's value. FBI officials told inspectors general that the surveillance produced few useful leads and that agents spent substantial time chasing NSA-generated tips that led nowhere. Intelligence analysts questioned whether the volume of collection was overwhelming their ability to identify genuine threats. These assessments contradicted public statements by Bush administration officials who claimed the program was essential to preventing terrorist attacks.
Court documents from subsequent litigation revealed additional details. In 2016, the Foreign Intelligence Surveillance Court released a heavily redacted 2011 opinion that found the NSA had violated the Fourth Amendment and misrepresented the scope of its collection to the court. The opinion described "systemic overcollection" of domestic communications—collection that continued years after the statutory reforms that were supposed to have brought surveillance under legal authority. The documents showed that even after Tamm's disclosure, even after Congressional action, the surveillance continued to expand in ways that violated the restrictions Congress believed it had imposed.
Thomas Tamm's case illustrates the impossible choices facing government employees who discover what they believe is lawbreaking. Internal reporting channels within the Justice Department were unavailable—Tamm's supervisors were facilitating the activity he believed was illegal. The Intelligence Community Whistleblower Protection Act required reporting to inspectors general who were appointed by and reported to the officials running the programs. Congressional oversight had failed—the limited briefings to the Gang of Eight had produced no meaningful check on executive branch activity. The FISA Court, which was supposed to provide judicial oversight, had been bypassed entirely.
Tamm concluded his only option was to contact journalists. That decision made him vulnerable to prosecution under the Espionage Act—a World War I-era statute that makes no distinction between spies selling secrets to foreign governments and whistleblowers providing information to newspapers about government programs they believe are illegal. The law contains no public interest defense, no requirement that prosecutors prove the disclosure caused harm, no exception for reporting violations of law. The calculus is stark: remain silent about illegality or risk years in federal prison.
The Obama administration prosecuted more leakers under the Espionage Act than all previous administrations combined—eight cases, compared to three under all previous presidents. The Trump administration continued aggressive leak investigations. The Biden administration initially continued the practice before announcing policy changes in 2021 that discouraged seeking journalists' communications in leak investigations. But the underlying statutory framework remains unchanged. Future whistleblowers face the same impossible choice Tamm confronted in 2004.
Twenty years after Tamm's phone call, the questions his disclosure raised remain unresolved. Congress has enacted reforms—the FISA Amendments Act, the USA FREEDOM Act—that brought some surveillance under statutory authority. But the fundamental architecture of collection persists. The NSA still conducts warrantless surveillance of international communications. Collection under Executive Order 12333 operates without FISA oversight. The FISA Court, which reviews warrant applications in secret, approves virtually every government request—in 2020, the court approved all 1,440 applications it received.
The broader question is whether democratic oversight of intelligence collection is possible when programs operate in secrecy, when Congressional briefings are limited to a handful of members who cannot discuss what they learn, when courts review surveillance in proceedings where only the government is represented, when whistleblowers who expose problems face prosecution. Tamm's disclosure created space for public debate that led to statutory changes. But those changes were built on incomplete information, and subsequent revelations showed collection continued beyond what Congress authorized.
The Times won a Pulitzer Prize. Tamm was never charged. The surveillance continues. That is the documented record—incomplete, contested, still unfolding.