CIA confirms suspect worked with CIA‑backed unit; report identifies NDS‑03 base at Camp Gecko
U.S. officials have confirmed the suspect, 29‑year‑old Afghan national Rahmanullah Lakanwal — evacuated to the U.S. under Operation Allies Welcome in 2021 and later granted asylum — previously worked with CIA‑backed Afghan partner forces, with reporting identifying the specific unit as NDS‑03 based at Camp Gecko. Lakanwal is accused of a daylight ambush near the White House that gravely injured two West Virginia National Guard members (one later reported dead); he was shot, taken into custody, and now faces federal assault charges as investigators probe his ties and motive.
D.C. National Guard Shooting
White House Security Incident
CIA
Donald Trump
Immigration Policy
Courts and Law Enforcement
Washington, D.C.
Washington, D.C. Public Safety
White House Communications
Law Enforcement and Security
Afghan Evacuees and Vetting
National security and law enforcement
Washington, D.C. shooting
National Guard
Homeland Security and Immigration
Immigration and Vetting
Washington D.C. Guard Shooting
Washington, D.C. Security
National Guard and Domestic Security
U.S. National Security
National Security
Afghan Resettlement
Domestic Security
National Guard and Public Safety
Crime and Public Safety
National Guard Shooting
U.S. Immigration and Refugees
D.C. National Guard shooting
Afghan Allies Resettlement
D.C. Guard Shooting
Crime and Law Enforcement
National Guard and Military
Immigration and Asylum
Intelligence and Afghan Allies
U.S. Immigration/Vetting
Washington, D.C. Shooting
National Guard Deployment
Law Enforcement
District of Columbia Shooting
Refugee Resettlement & Vetting
Media and Politics
Operation Allies Welcome
Immigration and National Security
District of Columbia Crime
Washington D.C. Shooting
📌 Key Facts
- Around 2:15 p.m. ET near the Farragut Square/Farragut West Metro area — about two blocks from the White House — a lone gunman ambushed National Guard troops, firing a .357 Smith & Wesson revolver; nearby Guardsmen and responding personnel subdued the suspect, who was shot and taken to a hospital with injuries not initially believed to be life‑threatening; one wounded Guardsman later died and another remained in critical condition.
- The wounded service members were identified as West Virginia National Guard members Specialist Sarah Beckstrom (20) and Staff Sgt. Andrew Wolfe (24); both had been deployed to D.C. since August and were reportedly sworn in or deputized for the mission less than 24 hours before the ambush.
- Authorities identified the suspect as 29‑year‑old Afghan national Rahmanullah Lakanwal, who had been living in Bellingham, Washington, with his wife and five children and — according to prosecutors — drove cross‑country to carry out the attack.
- U.S. officials, including the CIA, confirmed Lakanwal previously worked with U.S. government partner forces in Afghanistan; multiple outlets and sources named the CIA‑backed unit as NDS‑03, said to have operated from Camp Gecko in Kandahar, and said he was evacuated to the U.S. under Operation Allies Welcome in 2021 and was granted asylum in 2025.
- The FBI is leading a nationwide investigation — described by officials as probing a possible act of international terrorism — and prosecutors have charged the suspect with multiple counts including assault with intent to kill while armed and using a firearm during a crime of violence.
- The attack prompted immediate federal and political responses: the White House and intelligence officials briefed senior leaders; President Trump called it an “act of terror,” ordered additional National Guard forces to D.C., and administration officials pressed for reviews of vetting; USCIS announced an immediate pause on processing Afghan‑related immigration requests pending a vetting review.
- Local resettlement and advocacy groups and a case advocate had warned months earlier that Lakanwal showed social and functional deterioration after arrival — including periods of isolation, job instability, and abrupt travel — while DHS officials suggested possible post‑arrival radicalization; FBI officials said no ideological motive had been confirmed.
- Context: nearly 2,200 National Guard members were deployed in Washington, D.C., as part of a federal crime‑fighting mission, and the assailant targeted high‑visibility patrols established under that deployment.
📊 Relevant Data
Among Afghan refugees resettled in the United States, 40.3% screened positive on the RHS-15 indicating high risk for PTSD and major depressive disorder, compared to 3.6% PTSD and 8.3% MDD in the average American population.
Factors Influencing Mental Health of an Afghan Refugee Community in the US — European Psychiatry
In a study of Afghan refugees in the United States, the prevalence of ICD-11 PTSD was 10.5% and complex PTSD was 20.7%, with these rates attributed to high exposure to traumatic events prior to resettlement.
Afghan Refugee Populations' Mental Health — Taylor & Francis Online
As of 2025, at least six Afghan nationals who arrived in the United States since 2021 have been accused of security-related crimes, including attempted murder and assault.
US releases list of six Afghan nationals accused in security-related crimes — Amu TV
Of the 82,015 Afghan evacuees under Operation Allies Welcome, approximately 52% were male and 48% female, with 43% under the age of 18.
DHS Operation Allies Welcome Afghan Evacuee Report — Department of Homeland Security
Afghan immigrants in the United States numbered about 195,000 as of 2022, with a significant increase due to the 76,000 evacuees under Operation Allies Welcome in 2021.
Afghan Immigrants in the United States — Migration Policy Institute
📊 Analysis & Commentary (3)
Horror on Thanksgiving Eve
"The Playbook column comments on the D.C. Guard shooting (the suspect’s CIA‑linked Afghan background), warns that both parties are rushing to politicize the attack, and urges caution and evidence‑based responses rather than instant partisan exploitation."
The Ambush on the National Guard
"A Wall Street Journal editorial condemns the ambush of two National Guard members and uses the suspect’s status as an Afghan evacuee to criticize U.S. resettlement and vetting policies, urging a reassessment of security procedures."
The emerging MAGA fractures
"The Politico piece links the D.C. shooting and the suspect’s CIA‑partner background to an immediate hardline immigration push and uses POLITICO poll data to argue that such security‑driven policies risk exposing and deepening emerging fractures between MAGA loyalists and the broader 2024 Trump electorate."
📰 Sources (46)
Advocate warned Afghan evacuee was 'not functional as a person' months before National Guard shooting
New information:
- AP-reviewed emails show an advocate warned months earlier that Lakanwal had 'not been functional' since March of the prior year, citing quitting work, isolating in a dark room, and unresponsiveness to family.
- The advocate reported alternating 'periods of dark isolation and reckless travel,' including abrupt trips to Chicago, Arizona, and Washington, D.C., sometimes described as 'manic' episodes lasting 1–2 weeks.
- USCRI staff traveled to Bellingham in March 2024 after warnings but made no meaningful contact; the advocate believed Lakanwal declined help.
- Additional context that he abandoned English classes, cycled through short-term jobs, and his children at times arrived at school unbathed or in the same clothes for days.
- FBI continues to examine motive and has not confirmed any ideological influence; DHS Secretary Kristi Noem has suggested possible post-arrival radicalization.
National Guard suspect "radicalized since he's been here in this country," Noem claims
New information:
- DHS Secretary Kristi Noem said the suspect was 'radicalized since he's been here in this country' and suggested ties in his U.S. community/state, offering no further details.
- Noem alleged Biden-era vetting was limited and contrasted it with current biometric and social-media checks she says are now in place.
- Samantha Vinograd stated there is no indication the shooting was a vetting failure and explained the scope and limits of the vetting system.
Suspect in National Guard attack struggled with 'dark isolation' as community raised concerns
New information:
- Reiterates Lakanwal served in a CIA-backed Afghan 'Zero Unit' before entering the U.S. under Operation Allies Welcome in 2021.
- Provides new context on his post-arrival deterioration, including inability to hold a job and isolation patterns that prompted outreach to a refugee services nonprofit.
Trump says one of the two West Virginia National Guard members shot by Afghan national has died
New information:
- AP cites sources and AfghanEvac that suspect Rahmanullah Lakanwal worked in a CIA‑backed Afghan Army unit, aligning with prior confirmations.
- Trump’s remarks escalate the incident’s framing as a 'terrorist attack' and criticize Afghan resettlement policy.
- Prosecutor Jeanine Pirro detailed the weapon and present charges, saying motive remains unknown.
One of the National Guard troops shot in D.C. attack has died, Trump says
New information:
- Confirms the deceased victim’s identity: Army Spc. Sarah Beckstrom.
- Confirms the second victim’s status: Andrew Wolfe remains in critical condition.
- Places the casualty update on Thursday night following the Wednesday ambush.
Trump says one of the National Guard members shot in D.C. has died
New information:
- A victim in the Farragut Square-area ambush has died: West Virginia National Guard member Sarah Beckstrom, 20.
- Trump disclosed the death during a Thursday evening call with service members.
Investigations of National Guard shooting reveals suspect worked for CIA in Afghanistan
New information:
- Investigators say the suspect drove across the country to carry out the attack.
- Prosecutors plan to charge the Afghan national with three counts of assault with intent to kill.
- The two National Guard members remain in critical condition.
Trump administration orders green card "reexamination" from "countries of concern"
New information:
- Victims identified as Army Spc. Sarah Beckstrom, 20, and Air Force Staff Sgt. Andrew Wolfe, 24; both remain in critical condition.
- U.S. Attorney Jeanine Pirro announced charges: three counts of assault with intent to kill while armed, plus a firearm during a crime of violence.
- Officials reiterate the suspect, Rahmanullah Lakanwal, arrived in 2021 under Operation Allies Welcome and was granted asylum earlier this year; a Guard member shot him to end the attack.
Trump criticizes the program that brought Afghan refugees to the U.S. who fought the Taliban
New information:
- CIA Director John Ratcliffe issued a statement blaming Biden-era Operation Allies Welcome vetting, saying the suspect "and so many others" should not have been allowed to come to the U.S.
- Article reiterates that Rahmanullah Lakanwal worked with a CIA partner force in Kandahar and adds that he was granted asylum in April under the Trump administration, according to #AfghanEvac.
- New personal detail: a former landlord says Lakanwal lived in Bellingham, Washington, with his wife and five children.
- #AfghanEvac outlined asylum vetting steps (fingerprinting, iris scans, background check, interview, risk assessment) that would have applied to Lakanwal.
- Scale/context update: about 76,000 Afghans were brought to the U.S. under Operation Allies Welcome, with initial processing at U.S. military bases (JB McGuire‑Dix‑Lakehurst, Fort McCoy, Fort Bliss).
Details emerge on CIA unit alleged National Guard shooter served with in Afghanistan
New information:
- Fox identifies the specific CIA‑backed 'Zero Unit' as NDS‑03 and says it operated from Camp Gecko (Mullah Omar’s former compound) across Kandahar, Helmand and Uruzgan.
- Afghan Evac says Lakanwal entered the U.S. in 2021 under Operation Allies Welcome and was granted asylum in April 2025 under the Trump administration.
- A senior U.S. official says CIA vetting would have checked NCTC databases and kept identities confidential; notes Afghans sometimes forged birth dates to meet age requirements.
- U.S. Attorney Jeanine Pirro and FBI Director Kash Patel publicly criticized vetting at a Nov. 27 press conference.
- Timeline detail: Lakanwal reportedly began working with the CIA around 2011, likely as a minor.
Trump celebrating Thanksgiving at Mar-a-Lago
New information:
- Identifies the two wounded West Virginia National Guard members by name and age: Spc. Sarah Beckstrom, 20, and Pfc. Andrew Wolfe, 24; both remain in critical condition.
- States both Guardsmen had been stationed in D.C. since August and were deputized less than 24 hours before the attack to conduct presence patrols.
- Reports suspect Rahmanullah Lakanwal drove from Washington state to carry out the attack and was shot by another Guard member before being taken into custody.
- Includes Trump’s video statement labeling the shooting an 'act of terror' and pledging to 'reexamine every single alien' who entered from Afghanistan under Operation Allies Welcome.
- Notes Defense Secretary Pete Hegseth’s announcement of 500 additional National Guard troops to D.C. (contextual to the incident).
D.C. Shooting: What We Know About the National Guard Victims
New information:
- Officials identified the two wounded Guard members as USAF Staff Sgt. Andrew Wolfe, 24, of Martinsburg, W.Va., and U.S. Army Specialist Sarah Beckstrom, 20, of Summersville, W.Va.
- Wolfe is assigned to the Force Support Squadron, 167th Airlift Wing, West Virginia Air National Guard; Beckstrom is assigned to the 863rd Military Police Company, 111th Engineer Brigade, West Virginia Army National Guard.
- Service entry dates: Wolfe entered service Feb. 5, 2019; Beckstrom on June 6, 2023.
- Medical status update: both remain in critical condition; Beckstrom’s father says she has a 'mortal wound' and is unlikely to recover.
- Both had been deployed to Washington, D.C., since August as part of the Trump administration’s crime‑crackdown deployment.
National Guard shooting suspect served in CIA counterterrorism unit, group says
New information:
- AfghanEvac identifies the specific Afghan unit as NDS-03, described as operating at the CIA’s direction.
- CIA Director John Ratcliffe said the suspect was admitted to the U.S. due to his prior work with the U.S. government, including the CIA.
- Timeline details: evacuated to the U.S. in Aug. 2021 under humanitarian parole; asylum was granted in April 2025.
- Immigration status details: the suspect had SIV chief of mission approval but had not yet obtained lawful permanent residence.
- FBI Director Kash Patel said the suspect’s relationship with partner forces in Afghanistan will be a central focus of the probe and alleged vetting failures by the prior administration.
- AfghanEvac emphasized extensive vetting for this population and cautioned against broad-brush judgments; founder Shawn VanDiver’s on‑record quote included.
Trump reacts to National Guard shooting in D.C. as details emerge about Afghan suspect
New information:
- CBS reports President Trump publicly weighed in on the D.C. National Guard shooting.
- CBS says the suspect, Rahmanullah Lakanwal, previously worked with the U.S. government, including the CIA.
- CBS reiterates the suspect entered the U.S. in 2021.
2 National Guard members in critical condition after "ambush" attack linked to Afghan national
New information:
- Officials say the suspect, 29-year-old Rahmanullah Lakanwal, now faces several D.C. charges of assault with intent to kill while armed.
- Authorities characterized the incident as an 'ambush' attack.
- Two National Guard members remain in critical condition, per the latest update.
What we do and don’t know about the shooting of 2 National Guard members in DC
New information:
- Victims identified: Specialist Sarah Beckstrom, 20, and Staff Sgt. Andrew Wolfe, 24; both remain in critical condition.
- U.S. Attorney Jeanine Pirro said the suspect, Rahmanullah Lakanwal, drove across the country and carried out an 'ambush‑style' attack with a .357 Smith & Wesson revolver.
- Video shows the assailant 'came around the corner' and immediately opened fire; at least one Guard member exchanged gunfire.
- Troops subdued the gunman by running over and holding him; his injuries are not believed to be life‑threatening.
- Additional charge detailed: possession of a firearm during a crime of violence (along with assault with intent to kill while armed).
- West Virginia Gov. Patrick Morrisey initially stated the Guardsmen were killed, then retracted amid 'conflicting reports.'
- Lakanwal has been living in Washington state with his wife and five children, according to a former landlord.
- Approximate deployment size noted: nearly 2,200 Guard members were in D.C. for the mission.
Officials ID wounded National Guard members on job less than 24 hours before DC ambush as probe intensifies
New information:
- Victims identified as West Virginia National Guardsmen Sarah Beckstrom, 20, and Andrew Wolfe, 24; both remain in critical condition after surgery.
- Both Guardsmen were sworn in less than 24 hours before the ambush, according to U.S. Attorney Jeanine Pirro.
- Officials say the suspect used a .357 Smith & Wesson revolver; one Guardsman was shot, fell, and the attacker leaned over and shot again.
- Nearby Guardsmen rushed the suspect and a responding Guardsman shot and subdued him; the suspect is hospitalized under heavy guard.
- FBI Director Kash Patel said he spoke with CIA Director John Ratcliffe and War Secretary Pete Hegseth, and confirmed the suspect’s prior relationship with U.S. partner forces in Afghanistan; the case is being investigated as a possible act of international terrorism.
Mayor: D.C. shooting suspect drove cross-country to "attack America"
New information:
- Mayor Muriel Bowser said the suspect 'drove across the country' to 'attack America.'
- U.S. Attorney Jeanine Pirro identified the suspect as a 29-year-old Afghan national who lived in Bellingham, Washington, with his wife and five children and entered via a Biden-era Afghan program.
- Victims named as West Virginia National Guard members Sarah Beckstrom (20) and Andrew Wolfe (24); both underwent surgery.
- Shooting time and proximity: about 2:15 p.m. ET a short walk from the White House.
- Weapon detail: suspect carried a .357 Smith & Wesson revolver; he was shot by a Guard member and is hospitalized.
- FBI Director Kash Patel said multiple search warrants were executed nationwide; all occupants of the suspect’s last-known residence were interviewed; the probe spans 'coast-to-coast' and includes reviewing his Afghan partner-force connections and associates.
National Guard members shot in D.C. identified but motive still unknown
New information:
- Prosecutors reiterated the suspect is a 29-year-old Afghan national who previously worked with the CIA and other U.S. agencies and remains hospitalized under heavy surveillance.
- No motive identified as of the latest briefing; a Guard member shot the suspect during the incident.
- Specific likely charges detailed by the U.S. Attorney (assault with intent to kill while armed; firearm during a crime of violence), with potential upgrade to murder if fatalities occur.
What is Operation Allies Welcome, the program linked to the D.C. shooting suspect?
New information:
- Axios reports the suspect applied for asylum in 2024 and was granted asylum in 2025 under the Trump administration (citing multiple outlets).
- CIA Director John Ratcliffe told Axios the suspect 'should have never been allowed to come here.'
- USCIS publicly stated on X it has 'effective immediately' paused processing of all immigration requests related to Afghan nationals pending a vetting review (as context tied to the case).
- AP-reported status that the 29-year-old suspect was shot and his injuries are not believed to be life-threatening.
- Broader OAW context: DHS framing as an all-of-government resettlement effort; State estimates ~190,000 Afghans arrived under OAW/Enduring Welcome; more than 40% were SIV-eligible.
+ 26 more sources