Operation Arctic Frost

The FBI grabbed phone records of 8 senators and 400+ Republican figures through 197 secret subpoenas. Nondisclosure orders kept every single target in the dark. A second operation, Rampart Twelve, went after House members too. Senate hearings are now pulling back the curtain on what may be the largest political surveillance sweep since Watergate.

State of Surveillance Editorial Team

The United States Capitol dome illuminated at dusk against a dark blue sky
Photo via Unsplash

TL;DR: Senate Judiciary hearings on April 21 revealed the scope of Operation Arctic Frost, an FBI investigation that secretly obtained phone records of 8 Republican senators, at least 11 House members, and more than 400 individuals and organizations. Special Counsel Jack Smith’s team issued 197 grand jury subpoenas, every one shielded by nondisclosure orders that prevented telecom companies from telling targets their data had been seized. A second operation, Rampart Twelve, targeted Representatives Lauren Boebert, Paul Gosar, Andy Biggs, and Mo Brooks starting January 22, 2021. One intercepted call captured a privileged attorney-client conversation between Trump adviser Susie Wiles and her lawyer. The FBI closed Rampart Twelve a year later after finding no evidence, but the data had already been collected.

197 Subpoenas. Zero Notifications.

The numbers are staggering. Jack Smith’s special counsel team issued at least 197 grand jury subpoenas targeting approximately 430 Republican individuals and organizations. Every subpoena came with a nondisclosure order: a court-approved gag that prevented the telecom or tech company receiving it from notifying the person whose data was being handed over [1].

That means 430 people had their personal records seized by the federal government and never knew. Some still don’t.

The phone records (called “toll data”) included who called whom, when, for how long, and general location data. Not the content of the calls, but enough to map a person’s entire communication network, movements, and associations over the period of January 4–7, 2021 [2].

Senate Judiciary Chairman Chuck Grassley, who has led the oversight effort since 2025, called the operation “one of the most alarming abuses of prosecutorial power in modern history” [2].

Eight Senators. Their Personal Cell Phones.

The FBI didn’t just target political operatives and campaign staff. They went after sitting members of the United States Senate. Grassley’s oversight revealed that the FBI obtained toll data from the personal cell phones of eight Republican senators [2]:

  • Lindsey Graham (R-SC)
  • Bill Hagerty (R-TN)
  • Josh Hawley (R-MO)
  • Dan Sullivan (R-AK)
  • Tommy Tuberville (R-AL)
  • Ron Johnson (R-WI)
  • Cynthia Lummis (R-WY)
  • Marsha Blackburn (R-TN)

The FBI sought phone records covering January 4 through January 7, 2021, the days surrounding the certification of the 2020 election results and the January 6 Capitol breach. But internal documents reveal that Smith’s team created a “wish list” of 14 sitting members of Congress for whom they wanted tolling data. Six more names remain undisclosed [1][3].

Operation Rampart Twelve: The House Side

Arctic Frost wasn’t the only probe. On April 21, Senator Eric Schmitt (R-MO), chairing the Judiciary Subcommittee on the Constitution, revealed the existence of a companion operation: Rampart Twelve [4].

Opened by the FBI’s Washington Field Office on January 22, 2021 (just 16 days after January 6), Rampart Twelve was a preliminary investigation targeting at least four House members: Representatives Lauren Boebert, Paul Gosar, Andy Biggs, and Mo Brooks [4].

Text messages obtained through oversight showed Justice Department prosecutors expressing concerns about the legal requirements for obtaining members’ phone records. They went ahead anyway [4].

The FBI closed Rampart Twelve about a year later. They found no evidence to support the case. But “closing” an investigation doesn’t erase the data already collected. Those records had been in government hands for a year.

Nondisclosure Orders: Secret Searches for the Digital Age

This is the part that matters for everyone, not just politicians.

Nondisclosure orders are the digital equivalent of a no-knock warrant, but for your data. When the government issues a subpoena to your phone company, email provider, or cloud storage service, they can simultaneously obtain a court order that prohibits the company from ever telling you your data was taken [1].

No notification. No chance to challenge. No knowledge it happened at all.

In Arctic Frost, Smith’s team used these orders to accompany every one of the 197 subpoenas. Some gag orders lasted “at least one year.” Many of the targets are still discovering, through congressional oversight rather than any official notification, that their records were seized years ago [1][3].

Attorney Jeremy C. Hunt, writing in the Washington Times, called it “an asymmetry in investigative power” that creates a two-tier system: “physical searches require notice to the property owner, but digital searches can proceed entirely in the dark” [1].

Think about that for a second. If the FBI wanted to search your house, they’d need a warrant, and you’d know about it. If they want every call you made last month, who you texted, where you were when you sent those texts: they can get it without you ever finding out.

The Wiretap Nobody Was Supposed to Know About

Toll data wasn’t the only thing collected. In 2023, the FBI secretly recorded a phone call between Trump campaign manager Susie Wiles and her attorney, a conversation that should have been protected by attorney-client privilege [1][3].

Neither Wiles nor her lawyer were informed. The call was captured, and records show it was classified as “Prohibited Access”: a designation that restricted who within the Justice Department could view it [3].

Attorney-client privilege is supposed to be one of the hardest barriers for law enforcement to cross. The government can’t just listen in on your conversations with your lawyer. When it happens by accident during lawful surveillance, there are strict protocols for handling the intercepted material. The Arctic Frost hearings are examining whether those protocols were followed.

Why This Matters Beyond Politics

It’s easy to frame Arctic Frost as a partisan story: Republicans investigating the previous administration’s investigation of Republicans. But the surveillance tools used here aren’t partisan. They work on everyone.

Nondisclosure orders are used in routine criminal investigations, not just political ones. The same legal mechanism that kept 430 Republican targets in the dark about their seized phone records is available in every federal district court. It can be used against journalists, activists, business owners, or anyone whose digital footprint the government wants to examine without their knowledge.

This is exactly the kind of tool that Section 702 of FISA supercharges at scale. The difference: 702 doesn’t even need a subpoena. Arctic Frost at least went through grand jury procedures. The broader surveillance apparatus often skips even that step.

Congress is now considering legislation that would require data companies to notify their customers when the government subpoenas their records, with limited exceptions requiring a judge to make a specific, written finding that notification would compromise an active investigation or endanger someone [1].

That sounds like bare minimum accountability. The fact that it doesn’t already exist should worry you.

What You Can Do

  • Use end-to-end encrypted messaging: Signal, Session, or other E2EE apps protect message content even when metadata is seized. Toll data shows who you contacted and when, but not what you said if the conversation is encrypted
  • Check your transparency reports: Major tech companies (Google, Apple, Microsoft) publish transparency reports showing how many government data requests they received. Read them. Know what your provider hands over and under what circumstances
  • Support notification legislation: Contact your representatives about requiring government notification when personal records are subpoenaed. The EFF and ACLU have model legislation frameworks
  • Use a VPN: VPNs don’t stop toll data collection (your carrier still knows you made a call), but they protect your internet traffic from ISP-level surveillance that can be combined with phone records
  • Minimize metadata: The less data you create, the less there is to seize. Consider which apps track your location, which services log your communications, and whether you need all of them running all the time

References

  1. Washington Times: The deep state used nondisclosure orders to seize personal data (April 23, 2026)
  2. Senate Judiciary Committee: Biden FBI Spied on Eight Republican Senators as Part of Arctic Frost Investigation (2026)
  3. Senator Grassley: Senate Judiciary Committee Plans Series of Arctic Frost Hearings for 2026
  4. Senator Schmitt: Senate Judiciary Hearing on Arctic Frost Reveals New Documents (April 21, 2026)
  5. Military.com: Senate GOP Expands Arctic Frost Probe Into Ex-Special Counsel Jack Smith (February 17, 2026)

Published: April 24, 2026