HSI report describes a Minneapolis criminal investigation; Riach compares the operation to COINTELPRO

HSI says its Minneapolis undercover work targets criminal activity. Kevin Riach, counsel for a Minnesota 15 defendant, compares the operations to COINTELPRO. Court filings also dispute whether the defense should receive broader records about the funding program.

The facade and entrance sign of the Diana E. Murphy United States Courthouse in Minneapolis.
The Diana E. Murphy United States Courthouse in Minneapolis on February 4, 2022. File photo.

Case period:

Published by The Dispute Index editorial teamPublished Updated

Homeland Security InvestigationsU.S. Immigration and Customs EnforcementKevin C. RiachUnited States Department of Justice

Overview

HSI describes undercover work in Minneapolis as investigation of threats and interference with federal officers. Its St. Paul leader publicly defends the investigation as a response to coordinated violence. Defense attorney Kevin Riach compares HSI's operations to COINTELPRO. The accounts dispute the justification for the surveillance.

Read the full background

An HSI case-opening report (opens in a new tab), filed by the defense as an exhibit on August 13, describes Operation Puppet Master as an effort to investigate support for violence and interference with federal officers. It documents the integration of undercover agents into groups identified as potential threats and says HSI is conducting a financial investigation. The report lists January 28 as the opening date and February 16 as its approval date.

In its September 10 discovery brief (opens in a new tab), DOJ distinguishes Operation Keyhole, a funding and administrative program dating to 2008, from individual investigations. It says Puppet Master and Project Whipple Shield used that support and argues that disclosing unrelated investigative material could endanger agents and other cases. The brief asks the court to deny broader discovery, or review materials privately if disclosure is warranted.

In remarks published by WIRED on October 28 (opens in a new tab), Kevin Riach, counsel for Isaac Sant, compares HSI's role to COINTELPRO. The dispute concerns the justification and limits of the surveillance. The government's descriptions are allegations, and the discovery brief is an advocate's submission.

DOJ's June 16 announcement (opens in a new tab) identifies 15 defendants and charges including conspiracy to impede a federal officer, interstate stalking and assaults on federal officers. The release quotes HSI St. Paul defending the investigation as a response to coordinated violence. Those accusations remain allegations.

The September 30 order (opens in a new tab) grants Sant an evidentiary hearing because the government's supplemental brief purports to introduce new evidence supported only by attorney arguments. The October 21 minute entry (opens in a new tab) records the hearing held on October 20 and states that the discovery motion requires supplemental briefing. The docket also records a superseding indictment (opens in a new tab) filed October 22 and entered October 23. These entries do not decide whether the surveillance was justified.

Timeline

8 timeline entries on this page. Dates: January 28, 2026 to October 28, 2026

  1. January 2026

    1. HSI opens Operation Puppet Master

      Incident

      The case-opening report lists January 28 as the opening date and February 16 as its approval date.

      [01]HSI report opens Operation Puppet Master

      The HSI case-opening report was filed as an exhibit to the defense's August 13 discovery motion. It describes the stated criminal-investigation purpose of the undercover activity.

      HSI report opens Operation Puppet MasterECF 212-1, pages 1-2; filed August 13, 2026
  2. June 2026

    1. DOJ announces charges against 15 Direct Action Minnesota defendants

      Source release

      DOJ announces the indictment and quotes HSI's defense of the investigation. The allegations include interference with federal officers and stalking.

      [02]United States Department of Justice

      DOJ announces charges against 15 people and quotes HSI's defense of the investigation. The accusations remain allegations.

      DOJ announces the Direct Action Minnesota indictment · United States Department of JusticeJune 16 release, charge summary and HSI St. Paul statement
  3. August 2026

    1. HSI case-opening report is filed publicly

      Source release

      The defense files the HSI report as an exhibit to its discovery motion in United States v. Sant.

      [01]HSI report opens Operation Puppet Master

      The HSI case-opening report was filed as an exhibit to the defense's August 13 discovery motion. It describes the stated criminal-investigation purpose of the undercover activity.

      HSI report opens Operation Puppet MasterECF 212-1, pages 1-2; filed August 13, 2026
  4. September 2026

    1. DOJ files supplemental discovery arguments about Keyhole

      The government distinguishes the funding program from individual investigations and opposes broader disclosure.

      [03]United States Department of Justice

      The supplemental discovery brief distinguishes the funding program from individual investigations.

      DOJ explains Operation Keyhole and opposes broader discovery · United States Department of JusticeECF 263, September 10, 2026; pages 2-8
    2. Court grants an evidentiary hearing on Operation Keyhole

      Magistrate Judge David T. Schultz grants Sant's request for an evidentiary hearing because the government's supplemental discovery brief purports to introduce new evidence on Operation Keyhole supported only by attorney arguments. The order sets a hearing; it does not decide the discovery motion.

      [04]Court grants Sant an evidentiary hearing on Operation Keyhole

      The court grants an evidentiary hearing because the government's supplemental brief purports to introduce new evidence on Operation Keyhole supported only by attorney arguments. It does not decide the discovery motion on the merits.

      Court grants Sant an evidentiary hearing on Operation KeyholeUnited States v. Sant, ECF 274, pages 1-2
  5. October 2026

    1. Court holds a discovery hearing; motion requires supplemental briefing

      The October 21 minute entry records the previous day's evidentiary hearing, with Joshua Brenner as the government's witness. It says Sant's discovery motion requires supplemental briefing and will be taken under advisement as of the latest briefing due date, with an order to follow.

      [05]Minnesota 15 docket records the October 20 discovery hearing

      The minute entry records an evidentiary hearing and states that Sant's discovery motion requires supplemental briefing. It separately takes a nonparty's motion concerning an ICE memorandum under advisement.

      Minnesota 15 docket records the October 20 discovery hearingECF 304, entered October 21, reporting the October 20 hearing
    2. Prosecutors file a superseding indictment in the Minnesota 15 case

      The docket records a superseding indictment against the fifteen defendants, filed October 22 and entered October 23. Count One charges all fifteen with conspiracy to impede or injure a federal officer; the other seven counts charge individual defendants with offenses including solicitation, interstate threats, interstate stalking and assaulting a federal officer. The charges remain accusations.

      [06]Minnesota 15 docket records a superseding indictment

      The docket identifies a superseding indictment against the fifteen defendants. An indictment records accusations, not findings of guilt.

      Minnesota 15 docket records a superseding indictmentECF 308, filed October 22 and entered October 23, 2026
    3. WIRED reports on the surveillance and publishes Riach's criticism

      Source release

      The report quotes Riach and links the underlying filings about the investigation.

      [07]WIRED investigates HSI's Minneapolis surveillance

      Riach criticizes the investigations. The article links the HSI report and the government's discovery brief.

      WIRED investigates HSI's Minneapolis surveillanceOctober 28 report, Kevin Riach interview and linked filings

Claims

Claims separate what was said from what is contested. Follow each source for the original wording and context.

What's disputed

Disputed claim

Homeland Security Investigations

HSI's Minneapolis undercover work investigates support for crimes against federal officers.

What is disputed

HSI states this criminal-investigation purpose; Riach compares the operations to COINTELPRO.

Sources (2)

Response record

Responses

Choose one response filter, or select All responses to see the full record.

3 matching responses. Newest first.

  1. Kevin C. RiachDefense attorney for Isaac Sant, as identified by WIREDDirectly involved

    Before this statement

    In remarks published by WIRED, Riach discusses HSI reports.

    "the new COINTELPRO"
    Condemned

    Case context: HSI report describes a Minneapolis criminal investigation; Riach compares the operation to COINTELPRO

    Full statement and sources

    Riach compares HSI's operations to COINTELPRO and authoritarian secret policing.

    After the statement

    He compares its role to authoritarian policing.

    WIRED investigates HSI's Minneapolis surveillanceOctober 28 report, Kevin Riach interview and linked filings

    Why this label?

    Relative to the undercover operations, he likens HSI's role to COINTELPRO and authoritarian secret policing.

    This label describes the statement's response within the context above.

  2. Homeland Security InvestigationsHSI St. Paul, statement by Special Agent in Charge Michael McCarthyDirectly involved

    Before this statement

    DOJ announces an indictment against 15 people. The release attributes these remarks to HSI's St. Paul leader.

    "Today’s announcement is the result of a thorough investigation into a deeply troubling trend: coordinated violence targeting federal law enforcement officers in an effort to cause chaos and impede law enforcement operations"
    Defended or excused

    Case context: HSI report describes a Minneapolis criminal investigation; Riach compares the operation to COINTELPRO

    Full statement and sources

    Michael McCarthy, HSI's special agent in charge in St. Paul, says the charges are the result of a thorough investigation into coordinated violence targeting federal law enforcement officers.

    After the statement

    He says HSI respects peaceful protest and argues that violence and criminal activity warrant investigation.

    DOJ announces the Direct Action Minnesota indictment · United States Department of JusticeJune 16 release, charge summary and HSI St. Paul statement

    Why this label?

    Relative to HSI's Minneapolis investigation, McCarthy justifies it as a response to coordinated violence against federal officers and, in the same remarks, distinguishes it from peaceful protest.

    This label describes the statement's response within the context above.

  3. Homeland Security InvestigationsFederal investigative agencyDirectly involved

    Before this statement

    The report says an organized network is providing material support to violent opportunists and agitators involved in impeding federal law enforcement and assaulting federal officers. It says HSI St. Paul is conducting a financial investigation to uncover the funding sources used by these groups.

    "This case is opened to document the integration of Homeland Security Investigations (HSI) Undercover Agents (UCAs) into groups, organizations, or other gatherings identified by intelligence information and other sources as potentially threatening to law enforcement personnel in the performance of their duties."
    Defended or excused

    Case context: HSI report describes a Minneapolis criminal investigation; Riach compares the operation to COINTELPRO

    Full statement and sources

    The HSI report states a criminal-investigation purpose for integrating undercover agents into groups identified as potential threats.

    After the statement

    The report says any individual or organization identified for further investigatory action will be documented in its own case file, and that an assistant U.S. attorney has accepted the investigation for federal prosecution in Minnesota.

    HSI report opens Operation Puppet MasterECF 212-1, pages 1-2; filed August 13, 2026

    Why this label?

    Relative to HSI's undercover surveillance in Minneapolis, the report justifies the operation: it ties the undercover work to an alleged network supporting assaults on federal officers and to a financial investigation aimed at prosecution.

    This label describes the statement's response within the context above.

Sources

(7)

Original text

HSI report opens Operation Puppet Master

HSI report opens Operation Puppet Master (opens in a new tab)ECF 212-1, pages 1-2; filed August 13, 2026
Read source (opens in a new tab)

Relevant passage: ECF 212-1, pages 1-2; filed August 13, 2026

About this source

The HSI case-opening report was filed as an exhibit to the defense's August 13 discovery motion. It describes the stated criminal-investigation purpose of the undercover activity.

Author
Homeland Security Investigations
Published
Accessed
Archived copy (opens in a new tab)
Saved source copy
HSI case-opening report for Operation Puppet Master (opens in a new tab)

oct28-minnesotaInternal.pdf · application/pdf

Original text

Minnesota 15 docket records a superseding indictment

Minnesota 15 docket records a superseding indictment (opens in a new tab)ECF 308, filed October 22 and entered October 23, 2026
Read source (opens in a new tab)

Relevant passage: ECF 308, filed October 22 and entered October 23, 2026

About this source

The docket identifies a superseding indictment against the fifteen defendants. An indictment records accusations, not findings of guilt.

Author
U.S. District Court for the District of Minnesota
Published
Accessed

Original text

Minnesota 15 docket records the October 20 discovery hearing

Minnesota 15 docket records the October 20 discovery hearing (opens in a new tab)ECF 304, entered October 21, reporting the October 20 hearing
Read source (opens in a new tab)

Relevant passage: ECF 304, entered October 21, reporting the October 20 hearing

About this source

The minute entry records an evidentiary hearing and states that Sant's discovery motion requires supplemental briefing. It separately takes a nonparty's motion concerning an ICE memorandum under advisement.

Author
U.S. District Court for the District of Minnesota
Published
Accessed
Archived copy (opens in a new tab)

Original text

Court grants Sant an evidentiary hearing on Operation Keyhole

Read source (opens in a new tab)

Relevant passage: United States v. Sant, ECF 274, pages 1-2

About this source

The court grants an evidentiary hearing because the government's supplemental brief purports to introduce new evidence on Operation Keyhole supported only by attorney arguments. It does not decide the discovery motion on the merits.

Author
U.S. District Court for the District of Minnesota
Published
Accessed
Archived copy (opens in a new tab)

Official statement

DOJ announces the Direct Action Minnesota indictment

DOJ announces the Direct Action Minnesota indictment (opens in a new tab) · United States Department of JusticeJune 16 release, charge summary and HSI St. Paul statement
Read source (opens in a new tab)

Relevant passage: June 16 release, charge summary and HSI St. Paul statement

About this source

DOJ announces charges against 15 people and quotes HSI's defense of the investigation. The accusations remain allegations.

Published
Accessed
Archived copy (opens in a new tab)

Reporting

WIRED investigates HSI's Minneapolis surveillance

WIRED investigates HSI's Minneapolis surveillance (opens in a new tab)October 28 report, Kevin Riach interview and linked filings
Read source (opens in a new tab)

Relevant passage: October 28 report, Kevin Riach interview and linked filings

About this source

Riach criticizes the investigations. The article links the HSI report and the government's discovery brief.

Author
Ali Winston
Published
Accessed
Archived copy (opens in a new tab)

Original text

DOJ explains Operation Keyhole and opposes broader discovery

DOJ explains Operation Keyhole and opposes broader discovery (opens in a new tab) · United States Department of JusticeECF 263, September 10, 2026; pages 2-8
Read source (opens in a new tab)

Relevant passage: ECF 263, September 10, 2026; pages 2-8

About this source

The supplemental discovery brief distinguishes the funding program from individual investigations.

Published
Accessed
Archived copy (opens in a new tab)
Saved source copy
DOJ supplemental discovery brief about Operation Keyhole (opens in a new tab)

oct28-minnesotaMotion.pdf · application/pdf

Case updates

Want the next important update?

Follow this case and get an email when an important development changes the record.

12 updates added in the last 7 days.

Important updates only. Free. Confirm your email to start. Unsubscribe anytime. How we handle your email.

The newsletter

Follow disputes like this one.

New cases and significant updates to the record, in your inbox. Free.

You’ll confirm your subscription on Substack.

Share or embed this case

The embed keeps its attribution link to The Dispute Index. Credit the image to The Dispute Index and link to the case page.

Cite this record

Publisher
The Dispute Index
Title
HSI report describes a Minneapolis criminal investigation; Riach compares the operation to COINTELPRO
First published
Last updated
Permalink
https://disputeindex.com/cases/hsi-minnesota-15-puppet-master-keyhole-surveillance

The Dispute Index. "HSI report describes a Minneapolis criminal investigation; Riach compares the operation to COINTELPRO". First published: 2026-10-29. Last updated: 2026-10-29. https://disputeindex.com/cases/hsi-minnesota-15-puppet-master-keyhole-surveillance