NSA Bumblehive Could Unmask the Foreign Phones (Claims)
:::caution Attributed claims only The suspicion here is not that NSA did anything — it is that a capability exists and has not been used. The underlying phone dataset has never been published, and NSA's collection authorities are narrowly bounded by law. Nothing below is a finding of wrongdoing by any agency or person. :::
Claim snapshot
| Field | Value |
|---|---|
| The claim | The government reportedly has the technical means, 40 minutes from UVU, to identify the foreign phones alleged to have been near Kirk — and has not |
| Raised by | Tony Seruga (@TonySeruga) |
| First surfaced | Bumblehive post dated April 12 (year not given in source) |
| Rests on | Anonymous post; no dataset, methodology or provenance published |
| Evidence rating | SPECULATIVE |
What is alleged
Tony Seruga claims that the NSA's Utah Data Center in Bluffdale — nicknamed "Bumblehive" — ingests bulk phone data at a scale that permits something he calls "cross-pollination": the mixing of call, text, location, app, Wi-Fi and prior-device signals such that proprietary algorithms can link a burner phone to its real owner and to every device that person previously used. His stated figure is near-certainty after roughly 30–60 days of normal use. In his own framing: "due to certain proprietary algorithms, after ~30-60 days, we can link a 'burner' phone to" its owner. Burner phones, he argues, no longer protect anonymity for long.
He raised this as a follow-up to an earlier claim of his — that raw GPS data showed roughly 44 foreign-registered phones (Israeli, Chinese, Russian and Iranian) clustered near Charlie Kirk at UVU on September 10, 2025, and that four of the sixteen Israeli-registered handsets later surfaced at a hotel in Islamabad hosting US–Israel–Iran talks. The Bumblehive claim is the bridge between those two: if the phones were there, and if the capability is what he says it is, then the identity of every person carrying one is already known to the US government.
That is the actual accusation, and it is worth stating precisely because it is narrower and more interesting than it first appears. Seruga is not alleging NSA participation in anything. He is alleging that the answer to a central question in the case — who were those people — sits in a building a forty-minute drive from the venue, and that nobody has asked for it.
On that "nobody asked" point there is one named, on-record voice: former NCTC director Joe Kent has said his center was in the early phases of examining potential international ties when it was ordered to stop because a suspect was in custody.
The ordinary explanation
The chain breaks at its first link. Seruga has published no dataset, no methodology and no provenance for the alleged 44-phone GPS cluster. The most likely source for anything resembling it is commercially available advertising-location data, which is notoriously noisy about device registration country and cannot reliably establish that a handset carries an Israeli or Iranian SIM. Country of registration is the entire load-bearing claim, and it is the one thing that class of data is worst at.
Even granting the phones, foreign-registered handsets near a large public university are unremarkable. UVU enrolls tens of thousands of people; international students, visiting faculty, journalists and roaming visitors carry foreign SIMs across that campus every single day. A cluster is what a campus is.
On the capability itself, the Utah Data Center is a storage and processing facility. Its actual collection and querying authorities are narrowly bounded by FISA and Executive Order 12333 rules that specifically restrict querying data proximate to US persons — so "they could unmask everyone" conflates theoretical processing capacity with lawful practical access. Seruga's own phrasing gives this away: "we can link" is a capability claim, not a demonstrated result in this case. And silence from NSA is the default posture for any SIGINT question ever asked of it; it cannot be read as concealment because it is indistinguishable from the answer NSA gives to everything.
What would settle it
- Publication of the raw GPS dataset behind the 44-phone claim, with its source and collection method.
- An independent audit of whether that data class can establish SIM country of registration at all.
- A congressional intelligence-committee question to NSA on whether any Kirk-related query was tasked or received.
- Whether the FBI ever requested a tower dump or SIGINT support for the UVU venue on September 10, 2025.
- Corroboration of the Islamabad hotel claim from any independent source.
Interesting In This Area
- That same tracker's 44-phone GPS claim has never published a dataset or method.
- Four of those handsets reportedly surfaced later at an Islamabad hotel hosting US-Israel-Iran talks.
- The halted NCTC inquiry is the one named, on-record voice saying nobody asked.
- Counter-drone gear was reportedly tested at Provo during the week ending in Kirk's death.
Interesting In Other Areas
- The Utah Data Center sits roughly an hour from the UVU campus.
- No subscriber list has ever been released for the alleged foreign handsets.
- Israel-registered phones and the wider foreign-device breakdown rest on no released government document.
- If Bumblehive holds the record, deanonymising the campus becomes a query, not an investigation.
Images
Other Pages In This Section
Eleven items about defense-intelligence proximity to the case: the flights, the installations, the surveillance capability, and the one federal foreign-nexus inquiry that was reportedly stopped. Ranked honestly, from the strongest item to the ones listed only so they can be retired.
Read this
The Burnt Object in the SUV (Claims)
A charred mass photographed in the SUV is argued to contain transmitter parts, down to a melted audio jack. The theory cannot settle which RØDE model it is matching, and no fragment has ever been tested.
Read thisThirteen things citizen investigators flag about the venue, the setup, the equipment and the people physically on campus that day. The wider day, as distinct from the tight clock around the shot.
Read this
Everything citizen investigators flag as suspicious, sorted by who did it — state and local police, the FBI, an alleged Israeli nexus, US intelligence, and the defense. Sorting by actor rather than by topic is what makes the pattern visible.
Read thisElsewhere In The Investigation
Foreign Phones at UVU (Sept 10, 2025)
The claim that 44 foreign-registered phones sat near Charlie Kirk when he was shot, 16 of them Israeli. No subscriber list has ever been released, and the page keeps the benign explanations on the same screen as the allegation.
Read thisNSA Cellphones & Bumblehive (Claims)
The alleged twelve to sixteen Israeli-registered phones at UVU, plus the wider forty-four foreign-device breakdown. No NSA, DOJ or FBI document confirming any of it has been released publicly.
Read thisClaims about the NSA Utah Data Center holding the phone record that would settle who was on campus. If Bumblehive has it, deanonymisation is a query, not an investigation.
Read thisSources
- Tony Seruga on X (@TonySeruga)
- No dataset, methodology, or source provenance has been published for the underlying 44-phone claim.
This website's author is @HolonCitizen on X and YouTube/@HolonCitizen. Follow me there.
Interesting
- Thousands of pagers detonated in 2024, making remote device killing a proven capability.
- A former NCTC director says on the record his foreign-ties hunt was stopped.
- The Warren Commission's predetermined conclusions are why good-faith must be defined by statute.