Obama's secret struggle to retaliate against Putin's election interference

This story originally appeared in The Washington Post June 23, 2017.
https://www.washingtonpost.com/graphics/2017/world/national-security/obama-putin-election-hacking/?hpid=hp_hp-top-table-main_russiaobama-banner-7a%3Ahomepage%2Fstory&utm_term=.9d3c1b63bf93

EXCLUSIVE

Obama's secret struggle to punish Russia for Putin's election assault

By Greg Miller, Ellen Nakashima, and Adam Entous

June 23, 2017

(Photo by Alexei Druzhinin/AFP/Getty Images; photo illustration by Nick Kirkpatrick/The Washington Post)

Early last August, an envelope with extraordinary handling restrictions arrived at the White House. Sent by courier from the CIA, it carried "eyes only" instructions that its contents be shown to just four people: President Barack Obama and three senior aides.

Hacking Democracy

The White House debated various options to punish Russia, but facing obstacles and potential risks, it ultimately failed to exact a heavy toll on the Kremlin for its election interference.

Graphic: The main findings, highlighted

Inside was an intelligence bombshell, a report drawn from sourcing deep inside the Russian government that detailed Russian President Vladimir Putin's direct involvement in a cyber campaign to disrupt and discredit the U.S. presidential race.

But it went further. The intelligence captured Putin's specific instructions on the operation's audacious objectives - defeat or at least damage the Democratic nominee, Hillary Clinton, and help elect her opponent, Donald Trump.

At that point, the outlines of the Russian assault on the U.S. election were increasingly apparent. Hackers with ties to Russian intelligence services had been rummaging through Democratic Party computer networks, as well as some Republican systems, for more than a year. In July, the FBI had opened an investigation of contacts between Russian officials and Trump associates. And on July 22, nearly 20,000 emails stolen from the Democratic National Committee were dumped online by WikiLeaks.

SECRET CIA REPORT ARRIVES AT THE WHITE HOUSE

CIA Director John Brennan first alerts the White House in early August that Russian President Vladimir Putin had ordered an operation to defeat or at least damage Hillary Clinton and help elect her opponent, Donald Trump.

The president instructs aides to assess vulnerabilities in the election system and get agencies to agree on the intelligence that Putin was seeking to influence the election.

Brennan calls Alexander Bortnikov, the director of Russia’s main security agency, and warns him about interfering in the U.S. presidential election.

Homeland Security Secretary Jeh Johnson’s efforts to secure the U.S. voting systems run aground when some state officials reject his plan, calling it a federal takeover.

See full graphic

[Graphic: The main findings, highlighted]

But at the highest levels of government, among those responsible for managing the crisis, the first moment of true foreboding about Russia's intentions arrived with that CIA intelligence.

The material was so sensitive that CIA Director John Brennan kept it out of the President's Daily Brief, concerned that even that restricted report's distribution was too broad. The CIA package came with instructions that it be returned immediately after it was read. To guard against leaks, subsequent meetings in the Situation Room followed the same protocols as planning sessions for the Osama bin Laden raid.

Read the declassified report on Russian interference in the U.S. election

It took time for other parts of the intelligence community to endorse the CIA's view. Only in the administration's final weeks in office did it tell the public, in a declassified report, what officials had learned from Brennan in August - that Putin was working to elect Trump.

[Putin 'ordered' effort to undermine faith in U.S. election and help Trump, report says]

Over that five-month interval, the Obama administration secretly debated dozens of options for deterring or punishing Russia, including cyberattacks on Russian infrastructure, the release of CIA-gathered material that might embarrass Putin and sanctions that officials said could "crater" the Russian economy.

(In original story, video appears here)

But in the end, in late December, Obama approved a modest package combining measures that had been drawn up to punish Russia for other issues - expulsions of 35 diplomats and the closure of two Russian compounds - with economic sanctions so narrowly targeted that even those who helped design them describe their impact as largely symbolic.

Obama also approved a previously undisclosed covert measure that authorized planting cyber weapons in Russia's infrastructure, the digital equivalent of bombs that could be detonated if the United States found itself in an escalating exchange with Moscow. The project, which Obama approved in a covert-action finding, was still in its planning stages when Obama left office. It would be up to President Trump to decide whether to use the capability.

In political terms, Russia's interference was the crime of the century, an unprecedented and largely successful destabilizing attack on American democracy. It was a case that took almost no time to solve, traced to the Kremlin through cyber-forensics and intelligence on Putin's involvement. And yet, because of the divergent ways Obama and Trump have handled the matter, Moscow appears unlikely to face proportionate consequences.

Don't make things worse

The secrecy extended into the White House.

Rice [National security adviser. Rice orders the National Security Council to finalize a list of options to use against Moscow.], Haines[Avril Haines, Deputy national security adviser and former deputy director of the CIA under Brennan.] and White House homeland-security adviser Lisa Monaco convened meetings in the Situation Room to weigh the mounting evidence of Russian interference and generate options for how to respond. At first, only four senior security officials were allowed to attend: John Brennan[CIA director. Brennan first alerts the White House to the Putin intelligence and later briefs Obama in the Oval Office.], Clapper[James R. Clapper, Director of national intelligence and one of four senior administration officials to participate in meetings in of the Situation Room on how to retaliate against Russia. Clapper would eventually release the Obama administration's first statement concluding Russia interfered in the election.], Attorney General Loretta E. Lynch and FBI Director James B. Comey. Aides ordinarily allowed entry as "plus-ones" were barred.

Gradually, the circle widened to include Vice President Biden and others. Agendas sent to Cabinet secretaries - including John F. Kerry at the State Department and Ashton B. Carter at the Pentagon - arrived in envelopes that subordinates were not supposed to open. Sometimes the agendas were withheld until participants had taken their seats in the Situation Room.

Throughout his presidency, Obama's approach to national security challenges was deliberate and cautious. He came into office seeking to end wars in Iraq and Afghanistan. He was loath to act without support from allies overseas and firm political footing at home. He was drawn only reluctantly into foreign crises, such as the civil war in Syria, that presented no clear exit for the United States.

Obama's approach often seemed reducible to a single imperative: Don't make things worse. As brazen as the Russian attacks on the election seemed, Obama and his top advisers feared that things could get far worse.

They were concerned that any pre-election response could provoke an escalation from Putin. Moscow's meddling to that point was seen as deeply concerning but unlikely to materially affect the outcome of the election. Far more worrisome to the Obama team was the prospect of a cyber-assault on voting systems before and on Election Day.

They also worried that any action they took would be perceived as political interference in an already volatile campaign. By August, Trump was predicting that the election would be rigged. Obama officials feared providing fuel to such claims, playing into Russia's efforts to discredit the outcome and potentially contaminating the expected Clinton triumph.

Before departing for an August vacation to Martha's Vineyard, Obama instructed aides to pursue ways to deter Moscow and proceed along three main paths: Get a high-confidence assessment from U.S. intelligence agencies on Russia's role and intent; shore up any vulnerabilities in state-run election systems; and seek bipartisan support from congressional leaders for a statement condemning Moscow and urging states to accept federal help.

President Barack Obama speaks during a news conference at the White House in December.
(Photo by Andrew Harnik/AP; photo illustration by Nick Kirkpatrick/The Washington Post)

The administration encountered obstacles at every turn.

Despite the intelligence the CIA had produced, other agencies were slower to endorse a conclusion that Putin was personally directing the operation and wanted to help Trump. "It was definitely compelling, but it was not definitive," said one senior administration official. "We needed more."

Some of the most critical technical intelligence on Russia came from another country, officials said. Because of the source of the material, the NSA was reluctant to view it with high confidence.

Brennan [John Brennan, CIA director. Brennan first alerts the White House to the Putin intelligence and later briefs Obama in the Oval Office.] moved swiftly to schedule private briefings with congressional leaders. But getting appointments with certain Republicans proved difficult, officials said, and it was not until after Labor Day that Brennan had reached all members of the "Gang of Eight" - the majority and minority leaders of both houses and the chairmen and ranking Democrats on the Senate and House intelligence committees.

Jeh Johnson, the homeland-security secretary, was responsible for finding out whether the government could quickly shore up the security of the nation's archaic patchwork of voting systems. He floated the idea of designating state mechanisms "critical infrastructure," a label that would have entitled states to receive priority in federal cybersecurity assistance, putting them on a par with U.S. defense contractors and financial networks.

On Aug. 15, Johnson arranged a conference call with dozens of state officials, hoping to enlist their support. He ran into a wall of resistance.

The reaction "ranged from neutral to negative," Johnson said in congressional testimony Wednesday.

Brian Kemp, the Republican secretary of state of Georgia, used the call to denounce Johnson's proposal as an assault on state rights. "I think it was a politically calculated move by the previous administration," Kemp said in a recent interview, adding that he remains unconvinced that Russia waged a campaign to disrupt the 2016 race. "I don't necessarily believe that," he said.

Stung by the reaction, the White House turned to Congress for help, hoping that a bipartisan appeal to states would be more effective.

In early September, Johnson [Jeh Johnson, Homeland security secretary. Johnson is tasked with securing voting systems and arranges meetings with dozens of state officials.], Comey [James B. Comey, FBI director appointed by Obama. Comey was one of four senior officials to participate in meetings in the Situation Room on how to respond to Russia's interference. Comey particpates in a briefing for members of Congress on Russia's activities, but the meeting disolves into partisan bickering.], and Monaco [Lisa Monaco, Homeland security adviser. Monaco briefs key members of Congress on the intelligence.] arrived on Capitol Hill in a caravan of black SUVs for a meeting with 12 key members of Congress, including the leadership of both parties.

The meeting devolved into a partisan squabble.

"The Dems were, 'Hey, we have to tell the public,'" recalled one participant. But Republicans resisted, arguing that to warn the public that the election was under attack would further Russia's aim of sapping confidence in the system.

Senate Majority Leader Mitch McConnell (R-Ky.) went further, officials said, voicing skepticism that the underlying intelligence truly supported the White House's claims. Through a spokeswoman, McConnell declined to comment, citing the secrecy of that meeting.

Key Democrats were stunned by the GOP response and exasperated that the White House seemed willing to let Republican opposition block any pre-election move.

On Sept. 22, two California Democrats - Sen. Dianne Feinstein and Rep. Adam B. Schiff - did what they couldn't get the White House to do. They issued a statement making clear that they had learned from intelligence briefings that Russia was directing a campaign to undermine the election, but they stopped short of saying to what end.

Read: McConnell and other congressional leaders issue statement on Russia

A week later, McConnell and other congressional leaders issued a cautious statement that encouraged state election officials to ensure their networks were "secure from attack." The release made no mention of Russia and emphasized that the lawmakers "would oppose any effort by the federal government" to encroach on the states' authorities.

When U.S. spy agencies reached unanimous agreement in late September that the interference was a Russian operation directed by Putin, Obama directed spy chiefs to prepare a public statement summarizing the intelligence in broad strokes.

With Obama still determined to avoid any appearance of politics, the statement would not carry his signature.

On Oct. 7, the administration offered its first public comment on Russia's "active measures," in a three-paragraph statement issued by Johnson [Homeland security secretary. Johnson is tasked with securing voting systems and arranges meetings with dozens of state officials.] and Clapper [Director of national intelligence and one of four senior administration officials to participate in meetings in of the Situation Room on how to retaliate against Russia. Clapper would eventually release the Obama administration's first statement concluding Russia interfered in the election. Comey [FBI director appointed by Obama. Comey was one of four senior officials to participate in meetings in the Situation Room on how to respond to Russia's interference. Comey particpates in a briefing for members of Congress on Russia's activities, but the meeting disolves into partisan bickering.] had initially agreed to attach his name, as well, officials said, but changed his mind at the last minute, saying that it was too close to the election for the bureau to be involved.

"The U.S. intelligence community is confident that the Russian government directed the recent compromises of e-mails from U.S. persons and institutions, including from U.S. political organizations," the statement said. "We believe, based on the scope and sensitivity of these efforts, that only Russia's senior-most officials could have authorized these activities."

Early drafts accused Putin by name, but the reference was removed out of concern that it might endanger intelligence sources and methods.

The statement was issued around 3:30 p.m., timed for maximum media coverage. Instead, it was quickly drowned out. At 4 p.m., The Post published a story about crude comments Trump had made about women that were captured on an "Access Hollywood" tape. Half an hour later, WikiLeaks published its first batch of emails stolen from Clinton campaign chairman John Podesta.

To some, Obama's determination to avoid politicizing the Russia issue had the opposite effect: It meant that he allowed politics to shape his administration's response to what some believed should have been treated purely as a national security threat.

Schiff said that the administration's justifications for inaction often left him with a sense of "cognitive dissonance."

"The administration doesn't need congressional support to issue a statement of attribution or impose sanctions," Schiff said in a recent interview. He said many groups inadvertently abetted Russia's campaign, including Republicans who refused to confront Moscow and media organizations that eagerly mined the troves of hacked emails.

"Where Democrats need to take responsibility," Schiff said, "is that we failed to persuade the country why they should care that a foreign power is meddling in our affairs."

'Ample time' after election

The Situation Room is actually a complex of secure spaces in the basement level of the West Wing. A video feed from the main room courses through some National Security Council offices, allowing senior aides sitting at their desks to see - but not hear - when meetings are underway.

As the Russia-related sessions with Cabinet members began in August, the video feed was shut off. The last time that had happened on a sustained basis, officials said, was in the spring of 2011 during the run-up to the U.S. Special Operations raid on bin Laden's compound in Pakistan.

The blacked-out screens were seen as an ominous sign among lower-level White House officials who were largely kept in the dark about the Russia deliberations even as they were tasked with generating options for retaliation against Moscow.

Much of that work was led by the Cyber Response Group, an NSC unit with representatives from the CIA, NSA, State Department and Pentagon.

The early options they discussed were ambitious. They looked at sectorwide economic sanctions and cyberattacks that would take Russian networks temporarily offline. One official informally suggested - though never formally proposed - moving a U.S. naval carrier group into the Baltic Sea as a symbol of resolve.

What those lower-level officials did not know was that the principals and their deputies had by late September all but ruled out any pre-election retaliation against Moscow. They feared that any action would be seen as political and that Putin, motivated by a seething resentment of Clinton, was prepared to go beyond fake news and email dumps.

[The roots of the hostility between Putin and Clinton]

The FBI had detected suspected Russian attempts to penetrate election systems in 21 states, and at least one senior White House official assumed that Moscow would try all 50, officials said. Some officials believed the attempts were meant to be detected to unnerve the Americans. The patchwork nature of the United States' 3,000 or so voting jurisdictions would make it hard for Russia to swing the outcome, but Moscow could still sow chaos.

"We turned to other scenarios" the Russians might attempt, said Michael Daniel, who was cybersecurity coordinator at the White House, "such as disrupting the voter rolls, deleting every 10th voter [from registries] or flipping two digits in everybody's address."

The Moscow International Business Center in Moscow. (Photo by Andrey Rudakov/Bloomberg News; photo illustration by Nick Kirkpatrick/The Washington Post)

The White House also worried that they had not yet seen the worst of Russia's campaign. WikiLeaks and DCLeaks, a website set up in June 2016 by hackers believed to be Russian operatives, already had troves of emails. But U.S. officials feared that Russia had more explosive material or was willing to fabricate it.

"Our primary interest in August, September and October was to prevent them from doing the max they could do," said a senior administration official. "We made the judgment that we had ample time after the election, regardless of outcome, for punitive measures."

The assumption that Clinton would win contributed to the lack of urgency.

Instead, the administration issued a series of warnings.

John Brennan [CIA director. Brennan first alerts the White House to the Putin intelligence and later briefs Obama in the Oval Office.] delivered the first on Aug.Ā 4 in a blunt phone call with Alexander Bortnikov [the Director of the FSB, the post-Soviet successor to the KGB. CIA Director John Brennan is one of the first to warn Bortnikov over Russia's election interference in a telephone call. Brennan said Bortnikov denied it but told him he would pass on his message to Russian President Vladimir Putin. ], the director of the FSB, Russia's powerful security service.

A month later, Obama confronted Putin directly during a meeting of world leaders in Hangzhou, China. Accompanied only by interpreters, Obama told Putin that "we knew what he was doing and [he] better stop or else," according to a senior aide who subsequently spoke with Obama. Putin responded by demanding proof and accusing the United States of interfering in Russia's internal affairs.

In a subsequent news conference, Obama alluded to the exchange and issued a veiled threat. "We're moving into a new era here where a number of countries have significant capacities," he said. "Frankly, we've got more capacity than anybody both offensively and defensively."

There were at least two other warnings.

On Oct. 7, the day that the Clapper-Johnson statement was released, Rice[Susan Rice National security adviser. Rice orders the National Security Council to finalize a list of options to use against Moscow.] summoned Russian Ambassador Sergey Kislyak [Sergey Kislyak Russian ambassador to the United States since 2008, a career diplomat not considered especially close to Putin.] to the White House and handed him a message to relay to Putin.

Then, on Oct. 31, the administration delivered a final pre-election message via a secure channel to Moscow originally created to avert a nuclear exchange. The message noted that the United States had detected malicious activity, originating from servers in Russia, targeting U.S. election systems and warned that meddling would be regarded as unacceptable interference. Russia confirmed the next day that it had received the message but replied only after the election through the same channel, denying the accusation.

As Election Day approached, proponents of taking action against Russia made final, futile appeals to Obama's top aides: McDonough [White House chief of staff. McDonough was one of the first few officials to discuss details of the intelligence.], Susan Rice [National security adviser. Rice orders the National Security Council to finalize a list of options to use against Moscow.], and Haines [Deputy national security adviser and former deputy director of the CIA under Brennan.]. Because their offices were part of a suite of spaces in the West Wing, securing their support on any national security issue came to be known as "moving the suite."

One of the last to try before the election was Kerry. Often perceived as reluctant to confront Russia, in part to preserve his attempts to negotiate a Syria peace deal, Kerry was at critical moments one of the leading hawks.

In October, Kerry's top aides had produced an "action memo" that included a package of retaliatory measures including economic sanctions. Knowing the White House was not willing to act before the election, the plan called for the measures to be announced almost immediately after votes had been securely cast and counted.

Kerry signed the memo and urged the White House to convene a principals meeting to discuss the plan, officials said. "The response was basically, 'Not now,'ā€‰" one official said.

Election Day arrived without penalty for Moscow.

White House Chief of Staff Denis McDonough in 2014. (Photo by Brendan Smialowski/AFP/Getty Images; photo illustration by Nick Kirkpatrick/The Washington Post)

The 'tabledrop'

Despite the dire warnings, there were no meltdowns in the United States' voting infrastructure on Nov. 8, no evidence of hacking-related fraud, crashing of electronic ballots or ma-nipu-la-tion of vote counts.

The outcome itself, however, was a shock.

Suddenly, Obama faced a successor who had praised WikiLeaks and prodded Moscow to steal even more Clinton emails, while dismissing the idea that Russia was any more responsible for the election assault than "somebody sitting on their bed that weighs 400 pounds."

"The White House was mortified and shocked," said a former administration official. "From national security people there was a sense of immediate introspection, of, 'Wow, did we mishandle this.'"

At first, there was no outward sign of new resolve.

After his failed pre-election bid, Kerry returned with a fallback proposal, calling for the creation of a bipartisan commission to investigate Russian interference and make recommendations on how to protect future elections.

The panel would be modeled on the commission that investigated the Sept. 11, 2001, attacks, producing a definitive report and making recommendations that led to the overhaul of U.S. intelligence agencies.

"The idea was that if you think doing something aggressive is too inflammatory, then we shouldn't have a problem getting to the truth about what happened," said an administration official familiar with the Kerry plan. Trump was expected to oppose such a plan, but setting it in motion before he was sworn in would make it "harder and uglier politically" for him to block.

Supporters' confidence was buoyed when McDonough [Denis McDonough, White House chief of staff. McDonough was one of the first few officials to discuss details of the intelligence.] signaled that he planned to "tabledrop" the proposal at the next NSC meeting, one that would be chaired by Obama. Kerry was overseas and participated by videoconference.

To some, the "tabledrop" term has a tactical connotation beyond the obvious. It is sometimes used as a means of securing approval of an idea by introducing it before opponents have a chance to form counterarguments.

"We thought this was a good sign," a former State Department official said.

But as soon as McDonough introduced the proposal for a commission, he began criticizing it, arguing that it would be perceived as partisan and almost certainly blocked by Congress.

Obama then echoed McDonough's critique, effectively killing any chance that a Russia commission would be formed.

McDonough declined to comment on the principals' committee meeting on the commission or any other sensitive matters but acknowledged that he opposed the idea, in part because he believed it would be premature to do so before U.S. intelligence agencies and Congress had conducted their investigations.

White House staffers listen as President Barack Obama speaks about the election results on Nov. 9, 2016, in the Rose Garden. (Photo by Susan Walsh/AP; photo illustration by Nick Kirkpatrick/The Washington Post)

'Demoralized'

Several officials described the post-election atmosphere at the White House as somber. "It was like a funeral parlor," according to one official who said that work on Russia and other subjects slowed as officials began to anticipate the damage to Obama's policies and legacy.

Others disputed that characterization, saying that the NSC carried on with no interruption or diminution of focus. "Nobody got paralyzed by grief," a high-ranking official said. "We all did our jobs."

Rice [National security adviser. Rice orders the National Security Council to finalize a list of options to use against Moscow.] declined to comment on White House deliberations or other sensitive matters but said that the administration always planned to respond to Russia, regardless of the outcome of the election. "We felt it was on our watch and that we had to do something about it. It was our responsibility," Rice said.

Whatever the case, work on Russia did not resume in earnest until after Thanksgiving, in part because Obama made his last foreign trip.

Rice again ordered NSC staffers to finalize a "menu" of punitive measures to use against Moscow. The list that took shape was a distillation of ideas that had been circulating for months across three main categories: cyber, economic and diplomatic.

Again, the discussion ran into roadblocks.

Spy agencies wanted to maintain their penetrations of Russian networks, not expose them in a cyber-fusillade.

Treasury Department officials devised plans that would hit entire sectors of Russia's economy. One preliminary suggestion called for targeting technology companies including Kaspersky Lab, the Moscow-based cybersecurity firm. But skeptics worried that the harm could spill into Europe and pointed out that U.S. companies used Kaspersky systems and software.

Several senior administration officials called for imposing sanctions on Putin personally or releasing financial records or other information that would embarrass him. Some objected that the latter proposal would send the wrong message - the United States would be engaging in the same behavior it was condemning. In any case, it was not clear how long it would take U.S. spy agencies to assemble such a Putin dossier.

"By December, those of us working on this for a long time were demoralized," said an administration official involved in the developing punitive options.

Then the tenor began to shift.

On Dec. 9, Obama ordered a comprehensive review by U.S. intelligence agencies of Russian interference in U.S. elections going back to 2008, with a plan to make some of the findings public.

A week later, in one of Obama's final news briefings, he expressed irritation that such a consequential election "came to be dominated by a bunch of these leaks." He scolded news organizations for an "obsession" with titillating material about the Democrats that had dominated coverage.

Then he unloaded on Moscow. "The Russians can't change us or significantly weaken us," he said. "They are a smaller country. They are a weaker country. Their economy doesn't produce anything that anybody wants to buy, except oil and gas and arms."

It was a rare outburst for Obama, one that came amid a wave of internal second-guessing, finger-pointing from members of the defeated Clinton campaign, and the post-election posturing of Putin and Trump.

There was another factor at work, however.

Obama's decision to order a comprehensive report on Moscow's interference from U.S. spy agencies had prompted analysts to go back through their agencies' files, scouring for previously overlooked clues.

The effort led to a flurry of new, disturbing reports - many of them presented in the President's Daily Brief - about Russia's subversion of the 2016 race. The emerging picture enabled policymakers to begin seeing the Russian campaign in broader terms, as a comprehensive plot sweeping in its scope.

Ben Rhodes, former deputy national security adviser, said that the DNC email penetrations were initially thought to be in the same vein as previous Russian hacking efforts against targets including the State Department and White House.

"In many ways...we dealt with this as a cyberthreat and focused on protecting our cyber infrastructure," Rhodes said in an interview. "Meanwhile, the Russians were playing this much bigger game, which included elements like released hacked materials, political propaganda and propagating fake news, which they'd pursued in other countries."

"We weren't able to put all of those pieces together in real time," Rhodes said, "and in many ways that complete picture is still being filled in." Rhodes declined to discuss any sensitive information.

National security adviser Susan E. Rice looks over documents in the Oval Office in October. (Photo by Chip Somodevilla/Getty Images; photo illustration by Nick Kirkpatrick/The Washington Post)

Obama's darkened mood, the intelligence findings and the approaching transfer of power gave new urgency to NSC deliberations. In mid-December, as Cabinet members took turns citing drawbacks to various proposals for retaliating against Russia, Rice [Susan Rice, National security adviser. Rice orders the National Security Council to finalize a list of options to use against Moscow.] grew impatient and began cutting them off.

"We're not talking anymore. We're acting," she said, according to one participant.

Rice moved swiftly through a list of proposals that had survived months of debate, a menu that allowed principals to vote for what one participant described as "heavy, medium and light" options.

Among those in the Situation Room were Clapper [James R. Clapper, Director of national intelligence and one of four senior administration officials to participate in meetings in of the Situation Room on how to retaliate against Russia. Clapper would eventually release the Obama administration's first statement concluding Russia interfered in the election.], Brennan [CIA director. Brennan first alerts the White House to the Putin intelligence and later briefs Obama in the Oval Office.], Kerry [John Kerry, Secretary of state. Kerry tries to get the administration to confront Russia several times.], and Deputy FBI Director Andrew McCabe. Rice challenged them go to the "max of their comfort zones," a second participant said.

Economic sanctions, originally aimed only at Russia's military intelligence service, were expanded to include the FSB, a domestic successor to the KGB. Four Russian intelligence officials and three companies with links to those services were also named as targets.

The FBI had long lobbied to close two Russian compounds in the United States - one in Maryland and another in New York - on the grounds that both were used for espionage and placed an enormous surveillance burden on the bureau.

[On the Eastern Shore, a 45-acre Russian compound kept its secrets close]

The FBI was also responsible for generating the list of Russian operatives working under diplomatic cover to expel, drawn from a roster the bureau maintains of suspected Russian intelligence agents in the United States.

Cabinet officials were prompted to vote on whether to close one Russian compound or two, whether to kick out around 10 suspected Russian agents, 20 or 35.

Kerry laid out his department's concerns. The U.S. ambassador to Russia, John Tefft, had sent a cable warning that Moscow would inevitably expel the same number of Americans from Moscow and that departures of that magnitude would impair the embassy's ability to function.

The objections were dismissed, and Rice [Susan Rice, National security adviser. Rice orders the National Security Council to finalize a list of options to use against Moscow.] submitted a plan to Obama calling for the seizure of both Russian facilities and the expulsion of 35 suspected spies. Obama signed off on the package and announced the punitive measures on Dec. 29, while on vacation in Hawaii.

By then, the still-forming Trump administration was becoming entangled by questions about contacts with Moscow. On or around that same day that Obama imposed sanctions, Trump's designated national security adviser, retired Lt. Gen. Michael Flynn, told the Russian ambassador by phone that the sanctions would soon be revisited. Flynn's false statements about that conversation later cost him his job.

The report that Obama had commissioned was released a week later, on Jan. 6. It was based largely on the work done by the task force Brennan [John Brennan, CIA director. Brennan first alerts the White House to the Putin intelligence and later briefs Obama in the Oval Office.] had established and made public what the CIA had concluded in August, that "Putin and the Russian government aspired to help President-elect Trump's election chances when possible by discrediting Secretary Clinton."

It also carried a note of warning: "We assess Moscow will apply lessons learned from its Putin-ordered campaign aimed at the U.S. election to future influence efforts worldwide."

Sanctions' 'minimal' impact

The punitive measures got several days of media attention before the spotlight returned to Trump, his still-forming administration and, later, the initial rumblings of the Russia crisis that has become a consuming issue for the Trump White House.

But the package of measures approved by Obama, and the process by which they were selected and implemented, were more complex than initially understood.

The expulsions and compound seizures were originally devised as ways to retaliate against Moscow not for election interference but for an escalating campaign of harassment of American diplomats and intelligence operatives. U.S. officials often endured hostile treatment, but the episodes had become increasingly menacing and violent.

In one previously undisclosed incident on July 6, a Russian military helicopter dropped from the sky to make multiple passes just feet over the hood of a vehicle being driven by the U.S. defense attache, who was accompanied by colleagues, on a stretch of road between Murmansk and Pechenga in northern Russia. The attempt at intimidation was captured on photos the Americans took through the windshield.

An even more harrowing encounter took place the prior month, when a CIA operative returning by taxi to the U.S. Embassy in Moscow was tackled and thrown to the ground by a uniformed FSB guard. In a video aired on Russian television, the U.S. operative can be seen struggling to drag himself across the embassy threshold and onto U.S. sovereign territory. He sustained a broken shoulder in the attack.

Though conceived as retaliation for those incidents, the expulsions were adapted and included in the election-related package. The roster of expelled spies included several operatives who were suspected of playing a role in Russia's election interference from within the United States, officials said. They declined to elaborate.

More broadly, the list of 35 names focused heavily on Russians known to have technical skills. Their names and bios were laid out on a dossier delivered to senior White House officials and Cabinet secretaries, although the list was modified at the last minute to reduce the number of expulsions from Russia's U.N. mission in New York and add more names from its facilities in Washington and San Francisco.

A compound near Centreville, Md., that was being used by Russian diplomats is seen in a 2015 satellite photo. The compound was closed in December as part of a U.S. sanctions package. (Photo obtained by The Washington Post; photo illustration by Nick Kirkpatrick/The Washington Post)

The compounds were even higher on the FBI's wish list.

At one point in the White House deliberations, intelligence analysts used aerial images of the facilities to show how they had been modified to enhance their espionage capabilities. Slides displayed in the Situation Room showed new chimneys and other features, all presumed to allow for the installation of more-sophisticated eavesdropping equipment aimed at U.S. naval facilities and the NSA headquarters at Fort Meade in Maryland.

Rice [National security adviser. Rice orders the National Security Council to finalize a list of options to use against Moscow.] pointed to the FBI's McCabe [Deputy FBI director. McCabe was among others in the Situation Room challenged by Rice to go to the "max of their comfort zones" in deciding retaliatory measures.] and said: "You guys have been begging to do this for years. Now is your chance."

The administration gave Russia 24 hours to evacuate the sites, and FBI agents watched as fleets of trucks loaded with cargo passed through the compounds' gates.

When FBI agents entered the sites, they found them stripped of antennas, electronics, computers, file cabinets and other gear, officials said, their hasty removal leaving visible markings on floors, tables and walls.

Economic sanctions are widely seen as the United States' most potent lever, short of military force. Russia's economy is dwarfed by that of the United States, and nearly every major Russian institution and oligarch depends to some degree on access to U.S. and Western financial institutions, networks and credit.

Sanctions that the United States and Europe imposed on Russia in 2014 for its actions in Ukraine were damaging. Coinciding with a sharp drop in oil prices, those measures contributed to a 4 percent contraction in the Russian economy and sent its reserves plunging.

The election-related sanctions, by contrast, have had no such impact.

Officials involved in designing them said that the main targets - Russia's foreign and military intelligence services, the GRU and FSB, and senior officials at those agencies - have few known holdings abroad or vulnerable assets to freeze.

"I don't think any of us thought of sanctions as being a primary way of expressing our disapproval" for the election interference, said a senior administration official involved in the decision. "Going after their intelligence services was not about economic impact. It was symbolic."

More than any other measure, that decision has become a source of regret to senior administration officials directly involved in the Russia debate. The outcome has left the impression that Obama saw Russia's military meddling in Ukraine as more deserving of severe punishment than its subversion of a U.S. presidential race.

"What is the greater threat to our system of government?" said a former high-ranking administration official, noting that Obama and his advisers knew from projections formulated by the Treasury Department that the impact of the election-related economic sanctions would be "minimal."

A U.S. cyber-weapon

The most difficult measure to evaluate is one that Obama alluded to in only the most oblique fashion when announcing the U.S. response.

"We will continue to take a variety of actions at a time and place of our choosing, some of which will not be publicized," he said in a statement released by the White House.

He was referring, in part, to a cyber operation that was designed to be detected by Moscow but not cause significant damage, officials said. The operation, which entailed implanting computer code in sensitive computer systems that Russia was bound to find, served only as a reminder to Moscow of the United States' cyber reach.

But Obama also signed the secret finding, officials said, authorizing a new covert program involving the NSA, CIA and U.S. Cyber Command.

Obama declined to comment for this article, but a spokesman issued a statement: "This situation was taken extremely seriously, as is evident by President Obama raising this issue directly with President Putin; 17 intelligence agencies issuing an extraordinary public statement; our homeland security officials working relentlessly to bolster the cyber defenses of voting infrastructure around the country; the President directing a comprehensive intelligence review, and ultimately issuing a robust response including shutting down two Russian compounds, sanctioning nine Russian entities and individuals, and ejecting 35 Russian diplomats from the country."

The cyber operation is still in its early stages and involves deploying "implants" in Russian networks deemed "important to the adversary and that would cause them pain and discomfort if they were disrupted," a former U.S. official said.

The implants were developed by the NSA and designed so that they could be triggered remotely as part of retaliatory cyber-strike in the face of Russian aggression, whether an attack on a power grid or interference in a future presidential race.

Officials familiar with the measures said that there was concern among some in the administration that the damage caused by the implants could be difficult to contain.

As a result, the administration requested a legal review, which concluded that the devices could be controlled well enough that their deployment would be considered "proportional" in varying scenarios of Russian provocation, a requirement under international law.

The operation was described as long-term, taking months to position the implants and requiring maintenance thereafter. Under the rules of covert action, Obama's signature was all that was necessary to set the operation in motion.

U.S. intelligence agencies do not need further approval from Trump, and officials said that he would have to issue a countermanding order to stop it. The officials said that they have seen no indication that Trump has done so.

Karen DeYoung and Julie Tate contributed to this report.

Every Russia story Trump said was a hoax by Democrats: A timeline