NSA Bumblehive Could Unmask the Foreign Phones (Claims)
:::caution Attributed claims only The suspicion here is not that NSA did anything — it is that a capability exists and has not been used. The underlying phone dataset has never been published, and NSA's collection authorities are narrowly bounded by law. Nothing below is a finding of wrongdoing by any agency or person. :::
Claim snapshot
| Field | Value |
|---|---|
| The claim | The government reportedly has the technical means, 40 minutes from UVU, to identify the foreign phones alleged to have been near Kirk — and has not |
| Raised by | Tony Seruga (@TonySeruga) |
| First surfaced | Bumblehive post dated April 12 (year not given in source) |
| Rests on | Anonymous post; no dataset, methodology or provenance published |
| Evidence rating | SPECULATIVE |
What is alleged
Tony Seruga claims that the NSA's Utah Data Center in Bluffdale — nicknamed "Bumblehive" — ingests bulk phone data at a scale that permits something he calls "cross-pollination": the mixing of call, text, location, app, Wi-Fi and prior-device signals such that proprietary algorithms can link a burner phone to its real owner and to every device that person previously used. His stated figure is near-certainty after roughly 30–60 days of normal use. In his own framing: "due to certain proprietary algorithms, after ~30-60 days, we can link a 'burner' phone to" its owner. Burner phones, he argues, no longer protect anonymity for long.
He raised this as a follow-up to an earlier claim of his — that raw GPS data showed roughly 44 foreign-registered phones (Israeli, Chinese, Russian and Iranian) clustered near Charlie Kirk at UVU on September 10, 2025, and that four of the sixteen Israeli-registered handsets later surfaced at a hotel in Islamabad hosting US–Israel–Iran talks. The Bumblehive claim is the bridge between those two: if the phones were there, and if the capability is what he says it is, then the identity of every person carrying one is already known to the US government.
That is the actual accusation, and it is worth stating precisely because it is narrower and more interesting than it first appears. Seruga is not alleging NSA participation in anything. He is alleging that the answer to a central question in the case — who were those people — sits in a building a forty-minute drive from the venue, and that nobody has asked for it.
The ordinary explanation
The chain breaks at its first link. Seruga has published no dataset, no methodology and no provenance for the alleged 44-phone GPS cluster. The most likely source for anything resembling it is commercially available advertising-location data, which is notoriously noisy about device registration country and cannot reliably establish that a handset carries an Israeli or Iranian SIM. Country of registration is the entire load-bearing claim, and it is the one thing that class of data is worst at.
Even granting the phones, foreign-registered handsets near a large public university are unremarkable. UVU enrolls tens of thousands of people; international students, visiting faculty, journalists and roaming visitors carry foreign SIMs across that campus every single day. A cluster is what a campus is.
On the capability itself, the Utah Data Center is a storage and processing facility. Its actual collection and querying authorities are narrowly bounded by FISA and Executive Order 12333 rules that specifically restrict querying data proximate to US persons — so "they could unmask everyone" conflates theoretical processing capacity with lawful practical access. Seruga's own phrasing gives this away: "we can link" is a capability claim, not a demonstrated result in this case. And silence from NSA is the default posture for any SIGINT question ever asked of it; it cannot be read as concealment because it is indistinguishable from the answer NSA gives to everything.
What would settle it
- Publication of the raw GPS dataset behind the 44-phone claim, with its source and collection method.
- An independent audit of whether that data class can establish SIM country of registration at all.
- A congressional intelligence-committee question to NSA on whether any Kirk-related query was tasked or received.
- Whether the FBI ever requested a tower dump or SIGINT support for the UVU venue on September 10, 2025.
- Corroboration of the Islamabad hotel claim from any independent source.
Sources
- Tony Seruga on X (@TonySeruga)
- No dataset, methodology, or source provenance has been published for the underlying 44-phone claim.