Loading today’s stories
Product1 distinct publisher3 min readPublished
Homeland Security Investigations sent 92 subpoenas in a case against 39 protest defendants. One of them asked a retailer to search two years of transactions by item and hand back the people attached to them.
The Product Desk · Product desk
Compiled by The Product DeskSomething wrong?How this is made
Court filings say Homeland Security Investigations asked REI in March to run a single query: this item, this metro area, purchases since 2024, return the names [1]. The retailer has not said whether it ran the search, or how many customers it would cover [4].
Most retail systems can answer that query, and they can answer it because of features sold to customers as service. A return without a receipt needs a purchase-to-person join, and so does a warranty claim. Retail teams often describe the join as a tool for personalization and lifetime value, but customers mainly use it to return a jacket without the paper slip. Neither purpose needs the join kept for two years, which is the window Senator Ron Wyden pointed at when he told WIRED that a customs summons covers compliance with customs law and not a fishing expedition [13].
Scale matters here more than novelty. Ninety-two subpoenas against 39 named defendants works out to roughly 2.4 third-party data demands per person [14], and the filings say recipients included a car rental company and a state employment agency alongside the telecoms and airlines [3]. One airline summons went past records entirely: according to the filings it asked for a lookout notification on a defendant's future travel [10], which is a subscription rather than a lookup.
The variance in how companies answered is the part a retail team should study. Attorneys for the journalist defendant Georgia Fort wrote that Google refused a summons for information about her YouTube viewers and subscribers [9], while T-Mobile produced six months of her calls and texts, and the same filing alleges that neither the carrier nor the government told her [8]. T-Mobile says it reviews government demands and responds in accordance with the law [11]. Google says it reviews each request for lawfulness [15]. Both descriptions are plausible and they produced opposite outcomes, which puts the deciding factor somewhere other than the statute. Wyden and Representative Pramila Jayapal wrote that large tech firms sometimes ignore the secrecy request when it is not legally binding, while companies in more heavily regulated sectors told Congress they complied out of fear of regulatory retaliation [12]. A retailer whose goods cross a border sits closer to the second group.
The record does not show how often this happens. The number of 1509 summonses issued is unknown [6], recipients are typically asked to keep quiet, and the public usually learns of one only when a target contests it or stumbles on it later [7]. One retail transaction sweep is documented, in one case. That is enough to plan against, though not enough to call routine.
So the useful exercise is not counting summonses, it is auditing joins. For each customer table, ask two questions. Can it answer "all persons who bought item X in region Y since date Z"? And do you need it to run the business this month? The quadrant that hurts is yes and no: queryable by identity, no longer operationally necessary, and sitting there because of a retention default nobody has revisited since the system went in. Shortening that window is the one control a retail team holds by itself, because a 1509 summons arrives without a judge attached to it [5].
Ranked by verification strength, evidence, and original report placement.
New court filings allege that Homeland Security Investigations agents subpoenaed REI in March, requesting transaction information for "all persons" in the greater Minneapolis-St. Paul area who had purchased a specific type of dark green beanie from the company since 2024.
The filings are part of a broader lawsuit by the federal government against 39 people who attended an ICE protest at a church whose pastor also worked as an acting ICE field office director; defendants include protesters and journalists who were covering the event, among them former CNN host Don Lemon.
According to the court filings, the subpoena to REI was one of 92 sent as part of HSI's investigation into the defendants; other recipients included social media companies, airlines, telecom providers, a car rental company, and a state employment agency.
REI did not respond to questions about whether it had complied with the request and, if so, how many people are affected.
The subpoenas sent by HSI agents are 1509 customs summonses, meant to be used to request information related to imports and exports, and can be sent without the oversight of a judge or a jury.
The total number of 1509 summonses sent since the start of the Trump administration, and how many people have had personal information collected by DHS as a result, is unknown.
Distinct publishers with included, body-backed reporting in this cluster.
1 article · September 4, 2026
Follow any of these and your For You feed starts watching them — no settings page required.
product
A scraper republished Cara's whole 12-million-image library for less than $101 distinct publisher
product
Reddit joins the S&P 500 because a landlord got bought, not because the stock worked1 distinct publisher
security
A retail-theft bill would wire loss prevention into ICE, and security teams own the plumbing1 distinct publisher
invest
OpenAI rates GPT-6 Astra capable of hacking hardened systems without human guidance1 distinct publisher
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
Documented in filings, read by one newsroom
Almost nothing here rests on characterization: the beanie demand, the count of 92, the airline lookout request and the six months of Georgia Fort's call logs all come out of court filings, and Wyden speaks on the record under his own name. The hole is on the other side of the transaction. REI won't say whether it searched, DHS said nothing, and the Minnesota US Attorney's Office let the question of why a beanie needed a customs tool go unanswered. One newsroom has read this docket, and no one has checked its reading.
Demands counted, compliance visible only in fragments
Use of the instrument is the part we can partly count: 92 demands in one case, T-Mobile handing over half a year of a journalist's logs, Google refusing, Reddit saying DHS withdrew subpoenas covering 11 accounts after a First Amendment objection, Meta pushing back at least once in correspondence the EFF obtained. What can't be counted is everything outside this one docket — the government-wide total is stated to be unknown, and the retailer whose name is in the headline has not said whether it ran the search.
If anything, undersold
The headline promises a beanie dragnet and the filings deliver precisely that — no adjective outruns the docket. The distortion, such as it is, points the other way: secrecy is the default on these summonses, WIRED says the public normally sees one only when a target trips over it, and the overall count is unknown. Whatever fraction of this practice has surfaced, it is the small fraction, and the story is careful enough to say so instead of extrapolating.
A running beat and a senator with a bill in mind
WIRED has owned this beat since the administration began and gets the filings first, which is a franchise worth feeding — though here the documents do the arguing. Wyden's quote lands exactly where his own legislative remedy would go, the EFF attorney is tracking these subpoenas as advocacy work, and every corporate line quoted is written for the privacy-reputation ledger: T-Mobile's careful review, Google's lawfulness check, Reddit's push-back. None of that is disqualifying; it does mean the tone of the recipient statements should be read as positioning, not disclosure.
Firm on the incident, thin on the pattern
Named sources, a real docket, and two agencies choosing silence support the specific allegations comfortably. They support nothing about scale — and the story's most quotable implication, that this is routine rather than one aggressive prosecutor, is exactly the part that rests on facts the reporting says are unknown.