An Afghan national accused of shooting two National Guard members near the White House worked with U.S. government entities in Afghanistan, including the CIA, according to public statements and officials familiar with the case.
The suspect, Rahmanullah Lakanwal, 29, entered the United States in September 2021 under Operation Allies Welcome, the post-withdrawal resettlement program for Afghan partners. He was taken into custody after Wednesday’s attack in downtown Washington, and the FBI is leading the investigation.
The shooting happened on November 26, 2025, a few blocks from the executive mansion in the Farragut Square area. Authorities said the two Guardsmen, members of the West Virginia National Guard, were critically wounded.
The White House went into a brief lockdown as police secured the scene. By evening, federal and local agencies said there was no ongoing threat to the public, though streets remained closed while evidence teams worked.
What officials are saying
Former Director of National Intelligence and current CIA Director John Ratcliffe told national media that Lakanwal previously worked with U.S. partner forces, including with CIA-affiliated units in Kandahar. Ratcliffe said the Biden administration cited that relationship when admitting Lakanwal to the United States during the 2021 evacuation.
He argued the individual should not have been allowed to enter and said Americans “deserve far better” than the consequences of poor vetting.
Law enforcement officials said the FBI has primary jurisdiction and is coordinating with the Metropolitan Police Department and federal protective agencies. Multiple senior intelligence sources said the case is being investigated as a possible act of international terrorism, though investigators have not publicly described a motive. Authorities confirmed that the two Guardsmen remained in critical condition on Thursday and that family notifications were underway.
Washington Mayor Muriel Bowser called the shooting a targeted attack. “One individual appeared to target these guardsmen,” she said, adding that a suspect was quickly apprehended. The mayor urged patience as authorities gather video from nearby businesses and interview witnesses who sheltered in place during the incident.
Suspect background and entry to the U.S.
According to officials familiar with the case, Lakanwal worked with American forces in southern Afghanistan before the Taliban takeover, part of a cohort of local partners whose affiliations made them eligible for evacuation.
Under Operation Allies Welcome, tens of thousands of Afghans were flown to U.S. bases for screening and resettlement. Lakanwal arrived in the United States in September 2021 after that process and later resettled stateside.
Intelligence sources said his past work included cooperation with units supported by the CIA. Ratcliffe stated that the government’s relationship with Lakanwal ended shortly after the chaotic evacuation period, and that the program’s vetting had shortcomings.
Officials have not provided a public accounting of the background checks performed in this case, which typically include biometric screening and interviews across multiple databases and agencies.
Investigators were reviewing Lakanwal’s recent movements, contacts and online activity, along with any financial records that could shed light on planning. Officials said there was no immediate indication of co-conspirators, but emphasized that the inquiry was wide-ranging and that search warrants were being executed in multiple jurisdictions.
