{"id":18324,"date":"2026-02-07T12:04:52","date_gmt":"2026-02-07T12:04:52","guid":{"rendered":"https:\/\/readtrends.com\/en\/natanson-garmin-reporting-seizure\/"},"modified":"2026-02-07T12:04:52","modified_gmt":"2026-02-07T12:04:52","slug":"natanson-garmin-reporting-seizure","status":"publish","type":"post","link":"https:\/\/readtrends.com\/en\/natanson-garmin-reporting-seizure\/","title":{"rendered":"Justice Department Seized Hannah Natanson\u2019s Garmin and Extensive Reporting Material"},"content":{"rendered":"<article>\n<p><strong>Lead:<\/strong> Unsealed court filings show federal agents searched Washington Post reporter Hannah Natanson\u2019s home in late 2025 and seized a Garmin device plus multiple drives and messaging records as part of a leak investigation. The materials released in Natanson\u2019s motion to recover her devices indicate the FBI copied Signal conversations and took encrypted reporting notes after an affidavit sought access to her communications. Critics say the warrant materials did not disclose the 1980 Privacy Protection Act to the magistrate and that agents may have collected far more reporting material than the affidavit\u2019s probable cause supported.<\/p>\n<ul>\n<li><strong>Seizure scope:<\/strong> FBI agents seized Natanson\u2019s Garmin, an encrypted drive, copies of Signal conversations and other reporting materials during a search tied to the Aurelio Perez-Lugones investigation.<\/li>\n<li><strong>Surveillance window:<\/strong> The affidavit says the FBI conducted physical surveillance of Perez-Lugones from December 12, 2025, through January 8, 2026, and CCTV from December 17, 2025, without observing in-person meetings with Natanson.<\/li>\n<li><strong>Digital preservation:<\/strong> Agents preserved the entirety of Signal conversations that had a new message or alert on or after October 1, 2025, regardless of the original message date.<\/li>\n<li><strong>Privacy Protection Act omitted:<\/strong> Unsealed responses and reporting note the application did not inform the magistrate judge about the 1980 Privacy Protection Act, which generally bars seizure of journalistic work product.<\/li>\n<li><strong>Potential over-seizure:<\/strong> Observers say the Garmin (location tracking) and broad Signal copies appear to exceed what the affidavit established as necessary to investigate alleged electronic transmission of classified material.<\/li>\n<li><strong>Security practices compromised:<\/strong> The affidavit relied in part on details Natanson publicly described about her source-handling methods, and agents later seized devices tied to those practices.<\/li>\n<li><strong>Prosecutorial scrutiny:<\/strong> AUSA Gordon Kromberg, who worked on related national security litigation, is noted in reporting as someone who should have been aware of the PPA\u2019s relevance.<\/li>\n<\/ul>\n<h2>Background<\/h2>\n<p>Hannah Natanson is a Washington Post reporter who has published reporting related to classified matters and whistleblower accounts. In late 2025 the FBI arrested Aurelio Perez-Lugones in an investigation that, according to court filings, involved alleged electronic transmission of classified information. The government obtained search warrants that led agents to seize Natanson\u2019s devices and to make forensic copies of messaging apps and drives tied to her reporting work.<\/p>\n<p>The Privacy Protection Act (PPA) of 1980 creates special protections for journalists\u2019 work product and documentary materials, making seizure unlawful unless narrow exceptions apply\u2014most notably when the reporter is suspected of committing a crime related to the material. Advocacy groups and press-rights experts argued that the magistrate who authorized the warrants should have been told about the PPA so the judge could weigh its protections against the government\u2019s requested intrusions.<\/p>\n<p>Independent coverage of the unsealed materials has focused on two parallel concerns. Security analysts have examined which of Natanson\u2019s operational safeguards worked and which were exposed, while legal reporters have highlighted omissions and procedural questions in the government\u2019s filings, including whether the affidavit overstated or mis-specified the nexus between the alleged leak and the items seized.<\/p>\n<h2>Main Event<\/h2>\n<p>Natanson filed court declarations and motions seeking the return of devices and drives seized when the FBI executed a search tied to the Perez-Lugones investigation. Among the items described in her filings is a Garmin fitness device that could contain location data; Natanson says she communicated with Perez-Lugones only by Signal or phone. The government\u2019s affidavit asserted that surveillance between December 12, 2025, and January 8, 2026, showed no in-person meetings, supporting the conclusion that transmissions occurred electronically.<\/p>\n<p>Federal agents made forensic copies of Natanson\u2019s Signal threads and preserved conversations that had any new activity on or after October 1, 2025. Roman Rozhavsky, whose declaration is part of the court record, described the process used to capture Signal data so that ephemeral messages would not be lost by automatic deletion settings. The breadth of preserved threads apparently covered reporting discussions unrelated to Perez-Lugones that took place via Signal in the October\u2013December window.<\/p>\n<p>According to Natanson\u2019s declaration, FBI agents specifically instructed her not to bring her Garmin with her after the search began. That direction, and the subsequent inclusion of the Garmin among seized items, alarmed rights advocates because location traces are a different category of evidence than the electronic communications the affidavit emphasized. Critics say location data can reveal meetings with other sources and so carries heavy First Amendment implications when taken from a reporter.<\/p>\n<p>The government\u2019s application materials and subsequent responses discussed efforts to limit access to genuinely privileged material going forward, but the court filings show limited acknowledgment of the PPA in initial submissions. Reporting by legal journalists has raised the question of whether prosecutors\u2014particularly those familiar with press-vs.-national-security conflicts\u2014failed to flag statutory protections to the magistrate authorizing the warrants.<\/p>\n<h2>Analysis &amp; Implications<\/h2>\n<p>The seizure raises a core tension: national security leak investigations can warrant aggressive collection, but seizure of a reporter\u2019s work product implicates statutory and constitutional safeguards. If a warrant fails to adequately address the PPA, a magistrate may not have applied the statute\u2019s heightened scrutiny, increasing the risk of over-collection of journalistic material. That procedural omission could affect admissibility of seized information and prompt motions challenging the search\u2019s scope.<\/p>\n<p>Practically, copying entire messaging threads based on a threshold of \u2018\u2018any activity\u2019\u2019 after an arbitrary date (October 1, 2025) swept in months of reporting communications. Reporters who used Signal to gather and corroborate sensitive stories\u2014some dated October 9, October 20, and October 31\u2014may find unrelated reporting captured by the FBI\u2019s preservation rule. The consequence is chilling: sources and methods could be exposed, and newsroom collaborations might be subject to forensic review beyond the stated target of the probe.<\/p>\n<p>Seizure of wearable-location data such as a Garmin introduces a privacy vector distinct from text preserved from Signal. Location histories can identify contacts and face-to-face encounters that the affidavit denies existed during intensive surveillance periods. If the government used Perez-Lugones as the predicate for broader collection, courts will need to scrutinize whether any non-targeted materials were lawfully obtained and whether the investigative rationale matched the items taken.<\/p>\n<h2>Comparison &amp; Data<\/h2>\n<figure>\n<table>\n<thead>\n<tr>\n<th>Item<\/th>\n<th>Described Purpose<\/th>\n<th>Date Range \/ Note<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Signal conversations<\/td>\n<td>Preserve messages with activity<\/td>\n<td>All threads with a new message\/alert on\/after Oct 1, 2025<\/td>\n<\/tr>\n<tr>\n<td>Encrypted drive (reporting notes)<\/td>\n<td>Potential documentary evidence<\/td>\n<td>Seized in search; contained reporting notes<\/td>\n<\/tr>\n<tr>\n<td>Garmin device<\/td>\n<td>Location data; possible meeting evidence<\/td>\n<td>Seized despite affidavit asserting no in-person meetings Dec 12, 2025\u2013Jan 8, 2026<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n<p>The table shows the mismatch critics highlight: the affidavit emphasizes electronic transmission and a surveillance window that allegedly detected no in-person meetings, yet agents collected location-tracking hardware and broad messaging archives. That contrast is central to arguments that the seizure exceeded what the probable cause statements justified.<\/p>\n<h2>Reactions &amp; Quotes<\/h2>\n<blockquote>\n<p>&#8220;By not alerting the judge to the existence of a federal law that is supposed to limit searches for reporting materials, it may have greased the skids for the judge agreeing to the warrant.&#8221;<\/p>\n<p>  <cite>Gabe Rottman, Reporters Committee for Freedom of the Press (press-rights organization)<\/cite>\n<\/p><\/blockquote>\n<blockquote>\n<p>&#8220;The affidavit relies on descriptions of Natanson\u2019s public account of her sourcing practices to establish probable cause for accessing protected communications.&#8221;<\/p>\n<p>  <cite>Legal reporting and analysis (summation of coverage)<\/cite>\n<\/p><\/blockquote>\n<blockquote>\n<p>&#8220;Security reviewers found that some of Natanson\u2019s operational precautions worked but that public descriptions exposed collection points.&#8221;<\/p>\n<p>  <cite>Runa Sundvik \/ 404 Media (security analysis \/ news site)<\/cite>\n<\/p><\/blockquote>\n<aside>\n<details>\n<summary>Explainer: The Privacy Protection Act (PPA) and journalist protections<\/summary>\n<p>The Privacy Protection Act of 1980 was enacted to protect journalists and newsrooms from routine searches and seizures of work product and documentary materials. Under the PPA, law enforcement generally may not search for or seize such materials unless the reporter is suspected of committing certain crimes connected to the evidence or there is another narrow statutory exception. When the PPA is properly invoked, prosecutors must inform the court so a judge can apply the statute\u2019s safeguards before authorizing intrusive measures. Failure to raise the PPA can lead to suppression arguments and raises concerns about press freedom and source protection.<\/p>\n<\/details>\n<\/aside>\n<h2>Unconfirmed<\/h2>\n<ul>\n<li>The record does not yet establish whether prosecutors deliberately omitted the PPA from the warrant application or whether the omission was inadvertent; that question remains under review.<\/li>\n<li>It is not confirmed that the Garmin data contained meetings with third parties; the device was seized but the contents and their evidentiary value have not been publicly disclosed.<\/li>\n<li>The extent to which the preserved Signal threads include unrelated reporting conversations beyond Perez-Lugones material is not fully documented in public filings.<\/li>\n<\/ul>\n<h2>Bottom Line<\/h2>\n<p>The filings around the Natanson search crystallize a recurring legal and policy clash: how to balance legitimate national-security inquiries with statutory protections for journalists. The combination of broad digital preservation rules, seizure of location-tracking hardware, and an apparent failure to flag the Privacy Protection Act to the authorizing magistrate heightens the risk that ordinary reporting materials were swept up beyond the investigation\u2019s stated target.<\/p>\n<p>Key next steps will be litigation over the search\u2019s scope, motions asserting PPA and First Amendment protections, and potential review of prosecutors\u2019 disclosures to the court. For reporters and newsrooms, the episode underscores operational risk: public descriptions of source-handling routines can create searchable roadmaps for investigators, and device-level holdings such as wearables and encrypted drives can expose reporting networks in ways that text-only analyses may not anticipate.<\/p>\n<h2>Sources<\/h2>\n<ul>\n<li><a href=\"https:\/\/emptywheel.net\/doj-over-seized-hannah-natansons-garmin-device-and-other-reporting-materials\/\" target=\"_blank\" rel=\"noopener\">Emptywheel (analysis blog)<\/a><\/li>\n<li><a href=\"https:\/\/www.rcfp.org\/\" target=\"_blank\" rel=\"noopener\">Reporters Committee for Freedom of the Press (press-rights organization)<\/a><\/li>\n<li><a href=\"https:\/\/www.washingtonpost.com\/\" target=\"_blank\" rel=\"noopener\">The Washington Post (news organization; reporter filings and related coverage)<\/a><\/li>\n<li><a href=\"https:\/\/www.404media.co\/\" target=\"_blank\" rel=\"noopener\">404 Media (news site; technical\/security reporting)<\/a><\/li>\n<\/ul>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>Lead: Unsealed court filings show federal agents searched Washington Post reporter Hannah Natanson\u2019s home in late 2025 and seized a Garmin device plus multiple drives and messaging records as part of a leak investigation. The materials released in Natanson\u2019s motion to recover her devices indicate the FBI copied Signal conversations and took encrypted reporting notes &#8230; <a title=\"Justice Department Seized Hannah Natanson\u2019s Garmin and Extensive Reporting Material\" class=\"read-more\" href=\"https:\/\/readtrends.com\/en\/natanson-garmin-reporting-seizure\/\" aria-label=\"Read more about Justice Department Seized Hannah Natanson\u2019s Garmin and Extensive Reporting Material\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":18318,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"DOJ Seized Natanson\u2019s Garmin and Reporting Material | Emptywheel","rank_math_description":"Unsealed filings show DOJ agents seized a Washington Post reporter\u2019s Garmin, preserved Signal threads and drives in a leak probe without citing the 1980 Privacy Protection Act, prompting legal and press-rights concerns.","rank_math_focus_keyword":"Hannah Natanson,DOJ seizure,Garmin,Privacy Protection Act,Signal","footnotes":""},"categories":[2],"tags":[],"class_list":["post-18324","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-top-stories"],"_links":{"self":[{"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/posts\/18324","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/comments?post=18324"}],"version-history":[{"count":0,"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/posts\/18324\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/media\/18318"}],"wp:attachment":[{"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/media?parent=18324"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/categories?post=18324"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/readtrends.com\/en\/wp-json\/wp\/v2\/tags?post=18324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}