- The Washington Times - Wednesday, September 9, 2026

Kenys Galicia worked in a law office on Columbia Pike in Arlington in 2001, where she ran a side business selling notarized forms that allowed people to get Virginia driver’s licenses, despite being in the country illegally.

She was in the office on Aug. 2 when two Hispanic men, Victor Lopez-Flores and Herbert Villalobos, showed up with two Arab-looking men, looking for the documents to get IDs. The men paid $35 apiece. Ms. Galicia, a legal immigrant from El Salvador, handed over the two forms, and the Arab men were soon on their way to the DMV on Four Mile Run Drive in Arlington to get IDs.

A day earlier and a few miles away, at a 7-11 on Leesburg Pike, two other Arab men approached Luis Martinez-Flores, an illegal immigrant from El Salvador, and paid him $100 to help them falsify documents so they, too, could get licenses — this time at the DMV in Springfield.



The four Arab men were Ahmed al Ghamdi, Abdul Aziz al Omari, Hani Hanjour and Khalid al Mihdhar, who a month later, on Sept. 11, would hijack and crash planes into the Pentagon and the World Trade Center towers.

Virginia law at the time allowed people to submit affidavits to prove their identity, making it an easy target for the terrorists. Florida also provided licenses to at least 11 of the hijackers.

That relaxed approach to identity was critical to the Sept. 11 plot, which took the lives of nearly 3,000 people.


SEE ALSO: Never forget, never agree: Public schools struggle to explain 9/11 on 25th anniversary


“Driver’s licenses become a major source of identification and, of course, in this case had tragic results, because they enabled two of the people in the Sept. 11 events to have a better cover in American society,” U.S. District Judge Leonie Brinkema said in delivering a sentence to Ms. Galicia in 2002.

Correcting that was one of the major recommendations of the 9/11 Commission’s 2004 report, and it was a lesson Congress took to heart with the passage of the Real ID Act in 2005.

Advertisement
Advertisement

But 25 years after the attack, the consensus around securing IDs is fraying, according to experts who see a renewed apathy toward identity emerging.

The same is true for other lessons of Sept. 11. Those experts see stalled progress on screening people as they enter and exit the U.S., backsliding on breaking down walls between intelligence agencies, and confusion on identifying terrorists and denying them safe havens.

“We view Sept. 11 as a one-off thing that’s never going to happen again because we’ve taken care of it. But we’re back to Sept. 10, or Sept. 8, in the United States right now,” said Andrew “Art” Arthur, who ran the National Security Law division at the Immigration and Naturalization Service in the years before the Sept. 11 attacks.

>>>>Border checks & Real ID

The 9/11 Commission’s final report was a chronology of how the terrorists got here, how they prepared for and carried out their attack, and the failures within the U.S. that allowed it all to happen.

Advertisement
Advertisement

Commissioners said terrorists’ ability to travel and enter the U.S. was as important to their schemes as their access to weapons or money. If the immigration system had set a higher bar for verifying a migrant’s identity and purpose, the commission concluded that “several” of the hijackers might have been blocked.

That led to a recommendation for better screening of those coming and going through legal ports of entry. The obvious answer was full risk-based screening at airports, seaports and land border crossings, for both entry and exit.

Twenty-five years after the attack, biographic checks are done nearly everywhere, with the one exception being those leaving across the southern land border.

But biometric checks — the gold standard — are only done upon arrival at airports and seaports, and for pedestrians coming across the land boundaries. Vehicle passengers are still not fully screened for biometrics at entry, and none of the exit methods are fully covered yet.

Advertisement
Advertisement

The commission also recommended having the federal government set standards for issuing identification — a major lift, given that states are in control of birth certificates and driver’s licenses.

Still, Congress in 2005 managed to pass the Real ID Act that set national standards, at least for identification cards used for a purpose under the federal purview, such as boarding an airplane or entering a federal government building.

Janice Kephart, who served as staff on the 9/11 Commission and was a key architect of its separate staff report on the terrorists’ travel, said connecting identity to national security was a major victory for the panel.

“We put the line in the sand that states needed to establish minimal information prior to the issuance of an ID is even more critical now than it was then,” she told The Washington Times. “What we got right is that identity needed to be proven and established at the point of issuance.”

Advertisement
Advertisement

The commission also highlighted the information problem leading up to Sept. 11, with agencies sitting on data that, if shared, could have alerted the correct authorities that dangerous people had entered.

“I’ll never forget sitting down with INS national security folks and being like, ’Why aren’t you checking for terrorists at the border — verifying who they are? Their answer was that’s not our job, that’s the FBI’s job,” Ms. Kephart said.

Thanks to the commission, there’s now a National Counterterrorism Center and an Office of the Director of National Intelligence, both of which were designed to make sure more than a dozen intelligence agencies are talking to each other.

The goal was to break down the “silos” of information that kept agencies from understanding each other’s work.

Advertisement
Advertisement

Twenty-two years later, the structures are in place for agencies to share information — but the agencies themselves are becoming parochial again, according to the House intelligence committee’s 25-year look-back, released late last month.

“This worrying trend minimizes coordination and dampens cross-agency sharing of analytic judgments, rendering potentially poorer assessments and siloed thinking,” the committee concluded.

>>>>>Worrying trends

For all that, the country has, so far, avoided a repeat of the 2001 attacks and the 3,000 lives claimed that day.

The worst foreign terrorist attack since then was the Pulse nightclub shooting in Orlando, which took 50 lives.

That, like many of the others, was a homegrown terrorist.

The most successful foreign-directed attack came in 2019, when a Saudi pilot who’d been recruited by al Qaeda in the Arabian Peninsula was taking part in a U.S. training program at Naval Air Station Pensacola in Florida and opened fire in a classroom, killing three and wounding eight before being shot and killed by police.

Beneath that yardstick, though, there have been some worrying trends.

Those who were at the forefront of counterterrorism in 2001 say the consensus, built on the graves of those thousands of Americans, has fractured. President Trump’s decision to expand the terrorism designation to include Western Hemisphere drug-smuggling cartels is particularly irksome to those experts.

The global goodwill the U.S. enjoyed after the attack has long dissipated, soured in part by American-led wars in the Middle East.

And on the identity front, the idea of stricter vetting has seen some striking hiccups.

One of those came five years ago, under President Biden, when the U.S. allowed in thousands of evacuees from Afghanistan — the country where Sept. 11 sponsor Osama bin Laden was harbored — without thorough vetting. Migrants who lacked last names or birthdates were admitted, with U.S. immigration officials assigning them new birthdates.

And in a repeat of 2001, the immigration officers didn’t have access to a critical Defense Department system identifying terrorism risks. As a result, at least two people deemed national security risks and others who were labeled “of concern” managed to reach the U.S., an inspector general found.

States, for their part, continue to issue iffy IDs.

A federal-state operation in Oklahoma last year to get dangerous migrant drivers off the roads arrested dozens of truck drivers, including some whose cards had no name. Instead, they read: “No Name Given.”

Mr. Arthur said getting identity right is not a matter of capability but willpower, commitment and politics. Some states, determined to thwart the federal government’s immigration policies, have rebuilt the information silos that the 9/11 Commission blamed for American agencies failing to unravel the plot ahead of time.

“The whole 9/11 report was that we need to know who’s in the United States and we need to identify the people who shouldn’t be here and especially the people who pose a danger to our country,” Mr. Arthur said. “We’re a federal republic. Most of the information about people is held at the state and local level.”

The identity issues go beyond security. The government during the pandemic paid out hundreds of billions of dollars in bogus claims to fraudsters who gave fake or stolen identities.

Ms. Kephart said the push to streamline communications between agencies — what’s known as interoperability — has also stalled, after an initial surge of progress.

The European Union, a collection of countries, is now more interoperable than the federal government, she said.

“We’ve come a long way, we led the world on this, and now we’ve fallen behind because we don’t have our federal act together,” she said.

She blamed a lack of leadership at the top. Ever since the Obama White House nixed a working group that had pushed for standards and protocols, there’s been nobody to agitate for action.

“You have serious problems right now in the federal government, and a lack of leadership on the issue,” Ms. Kephart said.

The Washington Times reached out to several civil liberties groups for this story, but received no responses.

Contact the author

Copyright © 2026 The Washington Times, LLC. Click here for reprint permission.

Please read our comment policy before commenting.