AT&T Room 641A: Mark Klein Exposes NSA Fiber-Splitter Taps (Hepting v. AT&T)
In 2006 retired AT&T technician Mark Klein filed a sworn declaration and internal documents in EFF's Hepting v. AT&T lawsuit (filed 31 January 2006) describing a secret NSA-controlled room, 641A, at AT&T's San Francisco facility that received a copy of AT&T's internet backbone traffic.
02Deep-Dive Technical Analysis
Klein's documents described passive optical splitters inserted into fiber circuits carrying AT&T WorldNet internet peering traffic, diverting a portion of the light signal into Room 641A at 611 Folsom Street, which housed Narus deep-packet-inspection gear. Because the split happened at the photonic layer, the tap was invisible to routers and endpoints and captured everything on the link, including traffic of other carriers' customers exchanged at peering points. Klein reported that similar rooms were being built in other cities.
03Vulnerability & Exploit Flow
Passive fiber-optic beam splitters copying the full light signal of backbone peering links into a government-controlled DPI room.
04Recommended Defense & Mitigation Protocol
No operator-side remedy; the countermeasures are end-to-end encryption (TLS everywhere) and legal oversight reform rather than network controls.
05Security Impact & Geopolitical Consequence
First documentary evidence of bulk upstream backbone collection inside a US carrier; Congress responded with retroactive immunity for telecoms in the FISA Amendments Act of 2008, which ended Hepting, and the disclosures foreshadowed the 2013 Snowden revelations.
06Authoritative Standards & External References
07Related Topic Cluster Records
Master 5G Core, SS7 Defense & Subsea Cable Auditing
Ready to turn your historical knowledge into certified hands-on expertise? Register free on TelcoSec Academy to access interactive lab challenges, or consult our enterprise team for carrier-grade signaling assessments and portable BTS hardware.