How Was Ali Khamenei Found? Inside the Intelligence Operation Behind the February 28, 2026 Strike

The killing of Iran's Supreme Leader Ayatollah Ali Khamenei on February 28, 2026, was not simply the result of a missile being fired at a known address.

According to reporting published after the strike, the operation was preceded by months—and in some areas, years—of intelligence collection. Surveillance of Tehran, information about senior Iranian officials, intelligence from human and technical sources, and cooperation between American and Israeli intelligence agencies reportedly helped create a picture of Khamenei's movements.

The final piece of information may have been much more specific: a senior Iranian meeting in Tehran that Khamenei was expected to attend on the morning of the attack.

That account comes from people familiar with the intelligence operation and has not been independently disclosed in full by the CIA or Israeli intelligence. But it provides an important clue to how one of the world's most heavily protected political figures could become vulnerable to a precision strike.

A Target Protected by Layers of Security

Khamenei had been Iran's supreme leader since 1989. His position made him one of the country's most heavily protected individuals, with security surrounding his movements, communications and official residences.

That made locating him a fundamentally different problem from identifying a conventional military target.

A fixed military facility can be photographed, mapped and monitored. A political leader who frequently changes locations presents a moving-target problem.

The key question for intelligence agencies was therefore not simply:

Where does Khamenei live?

It was:

Where will Khamenei be at a particular time, and can that information be trusted long enough to launch an attack?

That distinction appears to have been critical on February 28.

The CIA Intelligence That Reportedly Changed the Timeline

CBS News reported on March 1 that intelligence collected by the CIA over several months had been shared with Israeli counterparts and contributed to the strike that killed Khamenei.

According to a person familiar with the matter, the CIA had been tracking Khamenei's whereabouts and gradually developed a better understanding of his movements.

The agency then obtained information about a Saturday morning meeting involving senior Iranian officials that Khamenei was expected to attend.

That information was reportedly passed to Israel, accelerating the timing of the strike.

CBS News — CIA intelligence reportedly led to the strike

This is an important distinction. The public evidence does not establish that a single CIA source simply provided Khamenei's exact coordinates.

Instead, the reporting describes an intelligence process in which information accumulated over time became valuable when combined with knowledge of a specific meeting.

Tehran's Surveillance Network Became Part of the Intelligence Battle

One of the most interesting elements reported after the strike involved Tehran's extensive network of surveillance and traffic cameras.

Financial Times reporting, cited by other international outlets, described years of Israeli intelligence work involving surveillance of Tehran and the movement patterns of Iranian officials.

Traffic cameras can provide something that satellite imagery alone cannot: continuous information about vehicles moving through streets.

For an intelligence service, repeated observations can reveal patterns.

A vehicle that appears at the same location repeatedly may indicate a person's routine. A particular security vehicle can reveal the movement of a protected official. Changes in those patterns can also indicate a change in security procedures.

This type of information is often described in intelligence analysis as a person's pattern of life.

It does not necessarily identify a target immediately.

Instead, thousands of apparently insignificant observations can gradually become meaningful when analyzed together.

Why Human Intelligence Still Matters

Modern intelligence is often associated with satellites, artificial intelligence and cyber operations.

But sophisticated surveillance systems still have a major limitation: technology can tell you what is happening without necessarily explaining why.

A human source may provide information about an upcoming meeting.

A technical system may show that vehicles are moving toward a particular location.

A satellite may reveal changes around a compound.

A communications intercept may indicate that senior officials are preparing for an event.

Individually, these pieces may be incomplete.

Combined, however, they can produce a much clearer intelligence picture.

This is why the reported CIA involvement is significant. According to CBS, the information about the meeting was not simply a piece of historical intelligence—it was reportedly actionable information that helped determine when the strike could take place.

The 2018 Iranian Nuclear Archive Operation

The intelligence story also has a much longer background.

In January 2018, Israel revealed that its intelligence service Mossad had obtained a large archive of Iranian nuclear documents from a secret facility in Tehran.

Israel said the operation resulted in the removal of thousands of documents and other materials concerning Iran's nuclear activities.

The operation became internationally significant because Israel used the documents to argue that Iran had previously conducted a structured nuclear weapons-related program.

The episode demonstrated another aspect of intelligence warfare: obtaining information can be as strategically important as destroying a physical facility.

However, the interpretation of Iran's nuclear activities has remained politically and technically contested. The archive should therefore not be treated as proof of every subsequent allegation concerning Iran's nuclear program.

From Nuclear Sites to Leadership Networks

For years, Israel's conflict with Iran focused heavily on the country's nuclear infrastructure.

But attacking physical facilities does not necessarily eliminate the knowledge and organizational structures required to rebuild them.

That is one reason intelligence about senior leadership can become strategically valuable.

A military facility can be rebuilt.

A laboratory can be relocated.

Equipment can be replaced.

But identifying the people responsible for coordinating these activities can provide a different type of leverage.

The exact point at which Israel decided that Khamenei himself should become a direct target is not fully documented in public sources.

Claims that the decision was made immediately after the 2018 archive operation should therefore be treated cautiously.

The Importance of the Pasteur Area

The Pasteur area of Tehran is one of Iran's important political and governmental districts.

Khamenei's official activities and several important government institutions are associated with the wider area.

Because of its political importance, the area naturally attracted attention from intelligence services.

The transcript provided for this article contains highly specific claims about underground tunnels, bunker dimensions, multiple security rings, entrances, hospitals and other buildings.

Some of these details have appeared in open-source reporting and analysis. But the complete layout and operational use of underground facilities are not publicly established to a level that would justify presenting every detail as fact.

That distinction matters.

In intelligence reporting, a photograph, satellite image or leaked map does not automatically reveal how a facility is actually used.

What About the Alleged Camera Hacking?

One of the more credible parts of the broader story is the reported Israeli penetration of Iranian surveillance systems.

Reports after the strike described Israeli intelligence efforts involving Tehran's camera network.

If accurate, such access would have been particularly valuable because cameras provide information from street level.

Satellite imagery can show buildings and major movements from above.

Street cameras can potentially show the actual movement of vehicles through intersections.

Together, those sources can complement each other.

However, the specific claim that every camera around Khamenei's compound was hacked through a particular vulnerability in Chinese-made Hikvision or other equipment has not been sufficiently established in public evidence to be presented here as a confirmed fact.

Did Satellites Track Every Movement?

The original transcript makes several extremely precise claims about Israeli and American satellites, including specific satellite systems allegedly monitoring individual rooftops, vehicles and movements around Tehran.

Some of these claims may reflect real intelligence capabilities, but the operational details of classified satellite systems are not publicly available in a way that allows independent verification of every assertion.

It is therefore safer to say that satellite imagery was part of the broader intelligence environment rather than claim that a particular satellite independently tracked Khamenei's every movement.

Modern satellite intelligence is powerful, but it is only one component of a larger system.

The AI Claims Need More Evidence

The most questionable part of the original transcript concerns artificial intelligence.

It claims that enormous quantities of intelligence data were processed using Palantir's systems and Claude AI, producing thousands of potential targets in approximately 90 minutes with an alleged 98.7% accuracy.

There is currently insufficient reliable public evidence to establish those specific figures or to confirm that Claude was used in the manner described.

That does not mean AI was absent from modern intelligence analysis.

Artificial intelligence and machine-learning systems are increasingly used to process large datasets, identify patterns and assist analysts.

But there is a major difference between saying AI can assist intelligence analysis and saying a particular AI system identified Khamenei with 98.7% accuracy in 90 minutes.

The second claim requires specific evidence.

Without that evidence, it should remain classified as an unverified claim rather than being presented as established fact.

Why the Final Intelligence Window Was So Important

Finding Khamenei somewhere inside Tehran would not necessarily have been enough.

The intelligence had to answer several questions simultaneously:

Was the information current?
Was Khamenei actually present?
Was he expected to remain there long enough?
Were senior officials gathered at the same location?
Could the strike be conducted without losing the target?
Had the intelligence become outdated because of a last-minute movement?

This is where the reported meeting became so important.

According to the CBS account, the CIA had already been tracking Khamenei for months. The information about the meeting provided a much narrower window.

That transformed a broad intelligence problem into a time-sensitive targeting problem.

The United States and Israel Were Working With Different Intelligence Capabilities

The operation also illustrates how intelligence partnerships can combine different capabilities.

Israel has extensive regional intelligence networks and long experience monitoring Iran.

The United States possesses global surveillance capabilities, satellite resources and intelligence infrastructure operating across multiple regions.

Neither side necessarily needs to possess every piece of information.

The value of cooperation comes from combining information.

One agency may know where a person is likely to be.

Another may have information about when the person is expected to arrive.

Another system may confirm vehicle movements.

A final intelligence assessment can then determine whether the information is sufficiently reliable for military action.

That appears to be closer to the publicly reported picture than the idea of a single technological breakthrough suddenly exposing Khamenei's location.

What the U.S. Government Says About the Operation

The White House officially described the U.S. military campaign as Operation Epic Fury.

In its March 1 statement, the administration said the operation was intended to address Iran's nuclear capabilities, ballistic missile arsenal, naval forces and regional proxy networks.

White House — Operation Epic Fury

The White House later published additional material describing the objectives of the campaign.

White House — Operation Epic Fury official updates

These are official U.S. government descriptions of the operation and should be distinguished from independent reporting about the intelligence process behind Khamenei's targeting.

What We Still Do Not Know

Despite the amount of information that has emerged since February 28, major questions remain unanswered.

We do not publicly know the complete chain of intelligence that confirmed Khamenei's final location.

We do not know which individual human sources, if any, provided the decisive information.

We do not know the full technical details of Israeli access to Iranian surveillance systems.

We do not know exactly how American and Israeli intelligence databases were integrated during the final stage of the operation.

And we do not have reliable public evidence supporting every highly specific technical claim circulating online.

That is normal for an intelligence operation of this scale.

Governments have strong reasons not to reveal exactly how a protected leader was located, because revealing the method could expose intelligence sources, technical capabilities and vulnerabilities that remain useful in future operations.

The Bigger Lesson

The most important lesson from the Khamenei operation may not be about missiles at all.

It is about information.

A modern intelligence campaign can combine human sources, cameras, communications data, satellite imagery, cyber capabilities and historical movement patterns.

No single piece of information necessarily provides the answer.

The advantage comes from connecting thousands of small pieces of information until a pattern emerges.

In Khamenei's case, publicly reported information suggests that years of intelligence preparation created the broader picture, while a much more recent piece of information about his expected presence at a meeting may have provided the final opportunity.

That is a very different story from the simplified version often seen on social media.

It was not simply a matter of a satellite finding a bunker.

It was reportedly the result of a long intelligence campaign in which multiple sources of information eventually converged on a narrow window of opportunity.

And while much remains classified, the information that has emerged so far shows why modern warfare is increasingly fought not only with aircraft and missiles, but also through data, surveillance and intelligence.