DHS Agents Reportedly Threatened Legal Observers With 'Domestic Terrorist' Database While Using Purportedly AI-Enabled Surveillance During ICE Operations

Two plaintiffs alleged that DHS personnel used purportedly AI-enabled surveillance to identify people recording immigration enforcement and threatened to add them to a "domestic terrorist" database or watch list. The complaint reportedly includes video in which an agent appears to reference a "database," and another alleged warning that agents would "come to your house later tonight." DHS has reportedly denied that such a database exists while acknowledging threat monitoring.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.1 Disinformation, surveillance, and influence at scale

The incident involves the alleged use of AI-powered surveillance tools by a government agency to conduct warrantless monitoring and intimidation of citizens exercising their First Amendment rights.

Additional risk subdomains

• 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The AI-powered surveillance tools scan faces, license plates, and social media posts of U.S. citizens in real time without a warrant, violating their privacy.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The alleged risk and harm of surveillance and intimidation were caused by the intentional decisions and actions of DHS agents using deployed AI tools to monitor and threaten citizens.

EU AI Act risk tier

• Risk tier: 2 High Risk

High Risk: The report describes AI systems used in 'Law enforcement applications, including facial recognition.' Specifically, it mentions 'AI-powered surveillance tools, including technology that lets agents scan faces, license plates and social media posts in real time' being deployed by the DHS.

AI system and alleged parties

• AI system: AI-powered surveillance tools
• AI purpose: Smart Surveillance; Face Recognition
• Behaviour type: Tool
• Alleged developer: Unknown surveillance technology developers
• Alleged deployer: Unknown surveillance technology developers, United States Department of Homeland Security
• Alleged harmed parties: Legal observers, General public of the United States, General public, Elinor Hilton, Democracy, Colleen Fagan

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Minor, indirect Substantial
• Civil rights: direct Minor, indirect Substantial
• Democracy: direct Negligible, indirect Minor
• Privacy: direct Minor, indirect Severe
• Psychological: direct Minor, indirect Minor
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Differential treatment

Reported: The report explicitly describes differential treatment of individuals based on their political activities.

Directly caused: Bystanders and protesters recording immigration enforcement operations were singled out, threatened, and allegedly added to a terrorist database.

Indirectly caused: U.S. citizens protesting immigration policies are subjected to targeted surveillance and labeled as domestic terrorists, unlike citizens not engaging in protest.

Inferred additional harm: It is likely that minority groups, activists, and specific political protesters are disproportionately targeted by these AI surveillance tools.

Civil rights

Reported: The report explicitly describes violations of human and civil rights caused directly by the incident.

Directly caused: The plaintiffs allege federal agents retaliated against them for exercising their First Amendment right to observe and protest federal immigration operations.

Indirectly caused: The warrantless real-time monitoring of U.S. citizens using AI surveillance tools violates Fourth Amendment protections against unreasonable searches.

Inferred additional harm: Widespread warrantless surveillance likely chills free speech and assembly for thousands of citizens who fear government retaliation.

Democracy

Reported: The report explicitly describes the erosion of democratic norms caused directly and indirectly by the incident.

Directly caused: Federal law enforcement agents threatened citizens with retaliation and domestic terrorist labeling for legally recording public enforcement operations.

Indirectly caused: The expansion of warrantless AI surveillance tools to monitor domestic protesters undermines democratic oversight and the rule of law.

Inferred additional harm: The normalization of state surveillance against political dissent threatens the foundational democratic right to protest and hold government agencies accountable.

Privacy

Reported: The report explicitly describes privacy violations caused directly and indirectly by the incident.

Directly caused: Federal agents allegedly documented and tracked the personal information of bystanders recording public operations.

Indirectly caused: DHS's AI-powered surveillance tools scan faces, license plates, and social media posts of U.S. citizens in real time without a warrant.

Inferred additional harm: The privacy of thousands of citizens is likely compromised daily as their movements and online activities are ingested by AI surveillance systems without consent.

Psychological

Reported: The report explicitly describes psychological distress and intimidation caused directly by the incident.

Directly caused: Two plaintiffs experienced direct intimidation and threats of being labeled domestic terrorists and having agents come to their homes.

Indirectly caused: Activists and community members in Minneapolis report a chilling effect and anxiety from the sense of being constantly watched and monitored by their government.

Inferred additional harm: It is likely that many other protesters and bystanders experience anxiety, fear, and distress due to warrantless surveillance, though specific numbers are not detailed.

People affected

• Occurrences reported: 1
• People reportedly harmed: 2
• People reportedly exposed: 2

Potential causes

Management

• Expansion Over Civil Liberties: DHS prioritizing surveillance expansion over constitutional rights.
• Lack of Transparency and Denial: Management denying database existence despite agent statements.

Technology

• AI-Powered Surveillance Tools: Rapid expansion of facial recognition and real-time scanning tools.
• Real-Time Tracking Capabilities: AI system enables tracking of license plates and social media in real-time.

Data Inputs

• Unwarranted Citizen Data Collection: Capturing faces, license plates, and social media of bystanders.
• Bystander Video Recording Data: Using recordings of enforcement operations to identify observers.

Human Factors

• Agent Retaliation and Threats: Federal agents threatening to label lawful observers as domestic terrorists.
• Chilling Effect on Public: Citizens feel intimidated and constantly monitored by their government.

Process and Methods

• Warrantless Monitoring Processes: Monitoring U.S. citizens without obtaining proper legal warrants.
• Vague Threat Identification Criteria: Lack of clear guidelines on what constitutes a threat.

Regulatory Environment

• Lack of Oversight on AI Use: No strict regulations preventing AI surveillance of U.S. citizens.
• First Amendment Infringement: Weak protections against retaliation for recording federal agents.

Information quality

• Classification confidence: High
• Reason for confidence: The report clearly outlines the allegations, the specific parties involved, the nature of the AI tools (facial recognition, license plate scanning, social media monitoring), and the civil rights concerns. While DHS denies the database, the core facts of the lawsuit and the deployment of AI surveillance tools are well-documented.
• Ambiguities identified: The exact technical specifications of the AI tools and whether the 'domestic terrorist' database actually exists or is a verbal threat by agents remains unverified.
• Alternative interpretations: The incident could be viewed strictly as human misconduct/intimidation by individual agents rather than an AI safety failure, though the systemic integration of AI surveillance tools makes it highly relevant to AI risk.

The incident involves allegations of DHS agents using AI-powered surveillance tools to identify, monitor, and intimidate U.S. citizens exercising their First Amendment rights. While there is no immediate physical threat, the deployment of warrantless real-time facial recognition and tracking systems against domestic protesters represents a substantial challenge to societal stability, civil liberties, and democratic norms.

• Overall national security impact: Substantial
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Department of Homeland Security agents

Threat characteristics

• Imminence: Long-term. Represents an ongoing strategic and systemic concern regarding government surveillance capabilities rather than an immediate crisis.
• Autonomy: Human-controlled. AI tools are used to assist federal agents in monitoring, but humans make all final enforcement and threat decisions.
• Novelty: Evolved capability. Represents an evolution of existing surveillance capabilities being applied in new domestic enforcement contexts.

Impact by dimension

• Physical security: Negligible. No physical security threat, kinetic attack, or critical infrastructure compromise reported in this incident.
• Information security: Minor. Involves domestic intelligence collection and surveillance techniques, but does not indicate foreign intelligence compromise or state-sponsored information warfare.
• Sovereignty: Minor. Involves allegations of government overreach and First Amendment violations, but does not threaten overall state authority or territorial sovereignty.
• Economic security: Negligible. No strategic technology theft, financial system attacks, or economic security implications identified.
• Societal stability: Substantial. Widespread warrantless real-time AI surveillance of citizens and protesters directly impacts civil liberties, privacy, and societal trust in democratic institutions.