Did you buy a beanie from REI recently? The Department of Homeland Security might be looking for you.
New court filings allege that Homeland Security Investigations agents subpoenaed the outdoor retailer in March, requesting the transaction information for “all persons” in the greater Minneapolis–St. Paul area who had purchased a specific type of dark green beanie from the company since 2024. REI did not respond to questions about whether it had complied with the request and, if so, how many people are affected.
The filings are part of a broader lawsuit by the federal government against 39 people who attended an ICE protest at a church whose pastor also worked as an acting ICE field office director. Both protesters and journalists who were attempting to cover the event, including former CNN host Don Lemon, are now defendants.
The subpoena to REI was one of 92 sent as part of HSI’s investigation into the defendants, according to the court filings. Other recipients included social media companies, airlines, telecom providers, a car rental company, and a state employment agency. At least one subpoena sent to an unnamed airline, the filings allege, asked not only for information about a defendant’s past flights, but also requested that the airline give HSI a “lookout notification” about the defendant’s travel in the future. DHS declined to comment. The US Attorney’s Office in Minnesota, which is litigating the case on behalf of the government, did not respond questions about why it was necessary to identify everyone in Minnesota who purchased the beanie from REI, or why it specifically targeted REI customers, since the beanie is sold on other platforms as well.
The subpoenas sent by HSI agents are also known as 1509 customs summons, and are meant to be used to request information related to imports and exports. However, since the start of the Trump administration, WIRED and other news outlets have reported on DHS’s attempts to unmask online critics using the legal tool, which can be sent without the oversight of a judge or a jury.
“It’s flat-out absurd for DHS to demand REI search two years of customer data as part of Trump’s campaign against the people of Minneapolis,” US senator Ron Wyden of Oregon tells WIRED. “Customs summonses only allow DHS to request information directly related to compliance with customs laws, not to conduct unending fishing expeditions into the lives of people critical of Donald Trump.”
The total number of 1509 summonses that have been sent since the start of the Trump administration—and how many people have had their personal information guzzled up by DHS as a result—is unknown. Companies that receive these types of subpoenas are typically asked to keep their existence a secret. When the public has gotten a glimpse of them, it’s usually because the target has contested it in court, either because the recipient company ignored the request for silence and notified the target, or because the target discovered it after the fact.
According to a recent letter written by Wyden and Representative Pramila Jayapal, big tech companies will sometimes ignore the government’s request for silence when not legally required, but other companies in more heavily regulated sectors have told Congress that they’ve complied because of fear of regulatory retaliation.
Court filings, internal DHS documents, and companies’ own public statements show that companies have responded to recent customs summons in different ways.
Attorneys for Georgia Fort, a journalist and one of the defendants in the Minnesota case, wrote in a court filing that they were “stunned” when they realized that the government had obtained logs detailing six months’ of Fort’s calls and text messages from T-Mobile after the government sent a customs summons to the telecom provider. The attorneys allege that Fort was never notified by either T-Mobile nor the government.
“We take our responsibility to protect customers’ privacy and personal information very seriously,” says a T-Mobile spokesperson, who also said the company does not comment on specific legal requests. “Our team carefully reviews government demands for customer information and responds in accordance with the law.”
In the same filing, the attorneys said that Google refused to comply with a customs summons requesting information about Fort’s YouTube viewers and subscribers. A Google spokesperson says that the company reviews each government request for lawfulness and that Google will try to narrow requests or outright reject them when it believes the request is too broad.
Reddit recently announced that during the last half of 2025, it received DHS administrative subpoenas seeking information about 11 different Reddit accounts that made critical posts about ICE actions. After Reddit objected to them on First Amendment grounds, the company said, the agency withdrew them.
“Privacy is central to how Reddit operates, and we take our commitment to protecting it seriously,” says Ben Lee, Reddit’s outgoing chief legal officer. “We routinely push back on law enforcement requests and stand up for users who are exercising their First Amendment rights.”
Meta also pushed back against at least one customs summons, according to internal DHS correspondence obtained by the Electronic Frontier Foundation. Meta declined WIRED’s request to comment.
“I think DHS has proved time and time again that they can’t be trusted as the stewards of applying this law correctly,” says Mario Trujillo, a senior staff attorney at the EFF who has been tracking DHS subpoenas sent to tech companies. Congress could pass a law that would restrict how the agency used 1509 customs summons, or add penalties when they are misused, but until then companies and their customers are on their own.
