On the flight, 13 Middle Eastern men behaved in a suspicious manner that aroused the attention and concern of the flight attendants, passengers, air marshals and pilots.

Briefly, the following events occurred. Thirteen Middle Eastern men were traveling together as a musical group, 12 carrying Syrian passports and one, a lawful permanent resident of the United States of Lebanese descent, purchased one-way tickets from Detroit to Los Angeles. Six of the men arrived at the gate together after boarding began, then split up and acted as if they were not acquainted. According to air marshals, the men also appeared sweaty and nervous. An air marshal assigned to Flight 327 observed their behavior and characterized it as “unusual,” but made no further reports at the time.

During the flight, the men again acted suspiciously. Several of the men changed seats, congregated in the aisles, and arose when the fasten seat belt sign was turned on; one passenger moved quickly up the aisle toward the cockpit and, at the last moment, entered the first class lavatory. The passenger remained in the lavatory for about 20 minutes. Several of the men spent excessive time in the lavatories. Another man carried a large McDonaldÂ’s restaurant bag into a lavatory and made a thumbs-up signal to another man upon returning to his seat.

Flight attendants notified the air marshals on board of the suspicious activities. In response, an air marshal directed a flight attendant to instruct the cockpit to radio ahead for law-enforcement officials to meet the flight upon arrival. After arriving, Flight 327 was met by federal and local law enforcement officials, who gathered all 13 suspicious passengers, interviewing two of them. An air marshal photocopied the passengersÂ’ passports and visas. The names of the suspicious passengers were run through FBI databases, indicating the musical groupÂ’s promoter had been involved in a similar incident in January 2004. No other derogatory information was received, and all 13 of the men were released.

The Homeland Security Operations Center (HSOC) logs show no entries regarding Flight 327 on the day of the flight. Flight 327 was logged into HSOCÂ’s database on July 26, 2004, four days after the events that occurred on the flight were reported by The Times. The suspicious incident was brought to HSOCÂ’s attention by an inquiry from the White House Homeland Security Council.