Among the chilling details unearthed in the manifesto of Norwegian domestic terrorist Anders Behring Breivik were passages advocating the use of biological weapons and especially Bacillus anthracis, the bacterium that causes anthrax. Most commentators rightly downplayed the issue, since no evidence has emerged that Breivik obtained the bacterium or the capability to produce and disseminate it.  At the same time, Breivik’s manifesto is yet another data point highlighting the appeal that biological weapons generally, and B. anthracis in particular, have to extremist groups and individuals seeking to cause mass casualties.
The most extensive non-state biological weapons program unearthed to date was organized in the 1990s by the Japanese Aum Shinrikyo cult.  Together with the 2001 letters containing B. anthracis mailed to the media and U.S. Congress, it is one of only two known non-state efforts to try to manufacture and disseminate aerosolized biological weapons or B. anthracis. Especially with so few cases on which to base analysis, Aum provides a key data point for assessing bioterrorism risks. But while much has been written about the group, most analysis has focused either on its successful chemical weapons attacks or the cult’s bizarre characteristics more generally. Aum’s failed biological weapons program has received far less attention, presumably in part because of a paucity of information. 
A recent report based on extensive interviews with key cult members, including some imprisoned and on death row in Japan, sheds new light on Aum’s biological weapons-related activities. The research effort that culminated in the publication of Aum Shinrikyo: Insights Into How Terrorists Develop Biological and Chemical Weapons was spearheaded by Richard Danzig, who served as Secretary of the Navy in the Clinton administration, and is a longtime advocate in Washington’s inner sanctums of more robust efforts to counter bioterrorism.  For full disclosure, this author worked on the early stages of the multi-year research effort that culminated in the report, though not the drafting of the final paper. The following draws on that work generally and the recently released report specifically.
Prior to the Danzig et al. study, key cult members had apparently never been debriefed in any detail about their biological weapons program. Japanese authorities were more interested in the chemical weapons program, because it produced casualties, than the biological weapons program that appears to have failed. It is unclear whether outside analysts had previously tried to gain access to imprisoned cult members, which would have required the cooperation of the Japanese government.
Newly available information about Aum’s biological weapons efforts provides grounds for both comfort and concern. The group grappled with challenges that will confront many non-state actors that might hope to employ biological weapons. Yet Aum’s struggles appear to have had as much to do with its often bungling approach as with the inherent challenges of deploying biological weapons, and future groups may navigate these challenges less ineptly. The ways in which Aum failed, and the trade-offs it confronted, provide lessons for policymakers looking to disrupt the efforts of future non-state actors that aspire to wield biological weapons.
From Yoga, Massage, and Alternative Medicine to Catalyzing the Apocalypse
Aum Shinrikyo began as a peaceful group before gradually morphing into an apocalyptic millenarian cult. The group evolved from a yoga studio founded in Tokyo in the mid-1980s by Chizuo Matsumoto (who later renamed himself Shoko Asahara), a semi-blind acupuncture, massage, and Chinese medicine practitioner.  Aum drew members stifled by a lack of purpose and spirituality in their lives, an early core of whom became Asahara’s inner circle.
The group grew rapidly; by 1989, it comprised about 4,000 members, and by 1995, when the cult carried out the sarin gas attacks on the Tokyo subway and Asahara and other key cult members were consequently arrested, it had about 10,000 members in Japan.  The cult controlled about two dozen properties in Japan and had foreign offices in the United States, Germany, and Russia. 
As early as 1985, Asahara predicted a coming apocalypse and identified himself and his acolytes as key to averting it. Over time, this prediction morphed into a belief that the apocalypse was inevitable but cult members alone would survive it, and finally that the cult should hasten the apocalypse by launching attacks, including with biological weapons. 
The group’s descent into violence was gradual. In late 1988, a follower accidentally drowned during ritual exercises, and fearing attention from authorities Asahara ordered his corpse burned and remains disposed of surreptitiously. When the deceased’s best friend became disillusioned with the cult and attempted to leave it early the following year, he was killed. A few months after that, Asahara ordered the killing of a lawyer representing families of cult members, and cult members also killed the lawyer’s wife and one-year-old son. 
One striking aspect of the Aum case is that roughly a dozen members of the inner circle personally carried out various criminal acts, including assassinations and the dissemination of biological and chemical agents. Cult rank-and-file appear to have assisted, likely often unknowingly, for example by staffing chemical and biological weapons production facilities, but appear not to have been directly involved in carrying out attacks. For members of the inner circle, crossing lesser thresholds to illegal action and violence appears to have reduced inhibitions to carrying out subsequent, more transgressive acts, and also made it difficult for members to contemplate leaving, since they were criminally implicated.
The trigger for the cult’s shift from apocalypse survival to apocalypse initiation appears to have been its unsuccessful attempt to compete in Japan’s 1990 parliamentary elections, on which it spent millions of dollars but garnered only a token number of votes.  The group’s efforts to develop apocalypse-hastening weapons melded science and science fiction; members were fascinated by futuristic weapons concepts such as plasma guns that could atomize human bodies or mirrors several miles across that would float in space and reflect the sun’s rays.  Several cult members visited the archive of Nicolai Tesla in Serbia to research his writings about earthquake-generating machines.  The cult purchased land in Australia with the intention of prospecting for uranium to build nuclear weapons.  And Aum purchased military hardware from the former Soviet Union, including AK-47 assault rifles, production equipment to manufacture its own versions in Japan, and a surplus MI-17 military transport helicopter, although its procurement efforts—like its later biological weapons efforts—were characterized by short attention spans and short shrift to technical challenges. 
While some of Aum’s efforts are best characterized as science fiction, the cult’s pursuit of chemical and biological weapons was substantially grounded in science. Chemical weapons were pursued in parallel with and ultimately as a substitute for failed biological weapons efforts. The cult reportedly manufactured small quantities of phosgene, hydrogen cyanide, soman, GF and VX nerve agents, and attempted to employ some of these in targeted assassinations, consistently without success.  It produced and disseminated larger quantities of sarin, with which it was able to kill and injure on several occasions.  Although Aum apparently dabbled with a variety of biological agents, it only seriously attempted to obtain and disseminate two, botulinum neurotoxin (BoNT), obtained from the bacterium Clostridium botulinum, and B. anthracis. The focus of this brief is Aum’s biological weapons efforts, which have received relatively little attention to date and on which the Danzig et al. study sheds more new light.
Botulinum Neurotoxin: Trying to Deploy the Most Potent Poison
After deciding that the lawyer representing cult members’ families should be killed, Asahara asked his disciples what the most potent poison was, and one replied, “botulinum.” Although not employed to assassinate the lawyer, after the humiliating 1990 electoral defeat Asahara ordered the toxin’s acquisition. 
As with B. anthracis, the cult chose not to try to obtain C. botulinum from legitimate culture collections, presumably fearing such a mode of acquisition could be traced back to Aum following any attacks.  Instead, cult members gathered soil from an area known to contain the bacterium with the intention of culturing it.  The cult may also have obtained material from a South American culture collection.  One key cult member recalls the group worked with at least five distinct strains of C. botulinum, suggesting that some effort was made to isolate C. botulinum from the thousands of other bacterial and fungal species a soil sample would contain, though no information sheds light on the methods by which the cult attempted this task.  If no isolation was attempted, that would provide one clear explanation for the apparent abject failure of Aum’s C. botulinum efforts, since a soil sample would contain thousands of living bacterial and fungal species that would crowd out any desired C. botulinum the samples might have contained.
Cult members cultivated material in two very large, crude, homemade fermenters; whether these were capable of maintaining the anaerobic (oxygen-free) environment or temperatures required is unclear. No efforts were made to purify the resulting yellow liquid, a mixture of growth media and bacteria. According to a key cult member, at least some of the product was contaminated with Bacillus [subtilis] natto, an aerobic bacterium used in Japan to ferment soybeans, although how the contaminant was identified remains unclear.  Enormous volumes of the yellow liquid were supposedly produced; based on data provided by interviewed cult members Danzig et al. estimate total production at a remarkable 450 metric tons. 
Given the challenges Aum faced and its crude approach, the cult’s efforts to produce BoNT unsurprisingly appear to have been unsuccessful. Mice on which the yellow liquid was tested showed no toxic effects, and one cult member reportedly slipped into a fermenting tank and nearly drowned, but subsequently showed no signs of illness.  In early 1990 the cult nonetheless disseminated large volumes of the liquid from trucks fitted with crude spray devices, deploying these in the vicinity of two U.S. Naval bases, the Narita airport, the Japanese Diet, the Imperial Palace, and the headquarters of a rival religious group.  No one appears to have been affected (including cult members who accidentally exposed themselves during the dissemination process), and the efforts went unnoticed by legal authorities.
In fall 1990, three Aum leaders were arrested for fraudulently purchasing land for a new compound; unbeknownst to the police, chemical weapons production facilities were under construction on the new land. According to a key cult member, the arrests were interpreted as a sign that a police raid was imminent, and Aum responded by dismantling its chemical and biological weapons facilities.  In 1992 the cult reinvigorated its efforts with a new focus on B. anthracis, detailed below. When these efforts failed to produce any casualties, in 1993 the group again attempted to produce BoNT and used small quantities of material it produced to unsuccessfully attack individuals and a subway station. 
A variety of factors may have contributed to the failed BoNT efforts. Several analysts have speculated that Aum may not have acquired a strain of C. botulinum capable of producing significant toxin.  Available information suggests the cult may simply have cultured a soil sample without attempting to isolate C. botulinum, which would not have yielded meaningful quantities of toxin even if the sample had contained a toxin-producing strain alongside thousands of other organic contaminants.
Even if the group did acquire and isolate a toxigenic strain, conditions for appropriate anaerobic fermentation may not have been achieved. Two cult members indicated the presence of bacterial contamination, and this would have interfered with the growth of C. botulinum.  It is also possible that some toxin was successfully produced but degraded or destroyed during processing, storage, or dissemination, or that whatever toxin was present was too dilute to have an effect. The most likely hypothesis remains that the cult failed to obtain or isolate the requisite bacteria.
Bacillus Anthracis: “Genetic Engineering” to Produce Lethality?
In 1992, Aum reinvigorated its biological weapons efforts in the context of more robust militarized interaction with the outside world, the trigger for which seems to have been leader Asahara’s whims rather than any particular external event.  Efforts now focused on B. anthracis, the bacterium that causes anthrax. As with the C. botulinum, Aum decided not to try to obtain material from a culture collection for fear the acquisition could be traced. An unsuccessful effort was apparently made to steal a strain from a laboratory, after which a cult sympathizer provided access to a vaccine strain of the material, although the details remain murky. 
Perhaps the most important puzzle on which the Danzig et al. report sheds potential light is with its alternative theory about how the cult ended up with a vaccine strain of B. anthracis. The conventional wisdom is that this represented bungling, possibly as simple as a clerical error when ordering material from a culture collection. Others have suggested that the anthrax dissemination was only intended as a trial run, or that the effort was sabotaged.  Danzig et al. advance a plausible, if still speculative, alternative explanation.
The cult member in charge of biological weapons efforts had completed undergraduate studies in agricultural and veterinary medicine at a university with a substantial anthrax collection, including both Sterne and Pasteur vaccine strains, before going on to PhD studies in virology.  Danzig et al. speculate that a contact at his old university provided him with B. anthracis, a supposition supported by new analysis of the samples gathered by the Japanese police, which suggest that the cult’s material closely matched the particular strain of Sterne held by the university. 
Two key cult members indicated that Aum members working on the project were aware they had a vaccine strain but planned to use “genetic engineering” to convert it to a more lethal form. While other analysts have dismissed this as more science fiction than science, Danzig et al. speculate that the cult may have obtained both Sterne and Pasteur strains and sought to combine them to produce a virulent strain.  It turns out that Russian scientists had published a paper detailing such an effort in 1989, and scientists at the Japanese agricultural and veterinary university had been working on the technique around the same time.  It bears emphasizing that no concrete evidence suggests the cult obtained a Pasteur strain, and even if it had, employing Sterne and Pasteur strains to create a virulent pathogen is a challenging task almost certainly beyond cult members’ capabilities.
As with BoNT, in 1993 the cult began attempting to mass produce B. anthracis without evidence that it had successfully obtained a pathogenic strain. Material was prepared in crude drum fermenters. No efforts were made to purify the 10-20 metric tons of liquid slurry produced, which was dispersed using a homemade sprayer, first from the roof of a cult building located in a residential neighborhood and later from a modified truck.
In the former case, some birds and neighborhood pets were apparently killed, though whether by the substance released remains unclear. Neighbors complained of the foul odor and gelatinous substance that rained down in the building’s vicinity, leading the police to visit and gather samples, but these were not tested until after the 1995 sarin subway attacks.  After attacks with liquid slurry failed to produce any casualties, the group began to employ crude drying devices to produce a powder, an unknown quantity of which was disseminated by truck in Tokyo. 
Although some neighborhood birds may have perished, it appears no humans were harmed as a result of Aum’s B. anthracis efforts. In fact, multiple cult members apparently inadvertently inhaled the material produced and subsequently reported no ill effects.  As with BoNT, a variety of factors appear to explain Aum’s lack of success. If the cult was indeed attempting to produce a virulent strain of B. anthracis using two vaccine strains, this remarkably ambitious effort unsurprisingly failed. Even in the unlikely event that the effort had been successful, the resulting strain might not have been sufficiently robust for subsequent production, storage, and dissemination. In the even more unlikely event that Aum had produced and successfully stored volumes of a virulent strain, it is possible that poor dissemination capabilities might have damaged the material or failed to aerosolize it so that sufficient quantities could be inhaled. For example, the cult employed a homemade nozzle that reportedly spouted rather than sprayed and dispersed material during the day, exposing it to UV radiation and thermal updrafts that would have reduced concentrations at ground level.  But the most plausible hypothesis remains that Aum failed to obtain a virulent strain of B. anthracis.
Learning from Aum’s Failed Efforts
Especially in light of the paucity of bioterrorism cases, Aum’s failed efforts to deploy effective biological weapons are a rich data point for assessing the threat and identifying policies to ameliorate it. Every case has its idiosyncrasies, and perhaps none quite so much as Aum, which really was “stranger than fiction.” But with that caveat in mind, the case does suggest three generalizations about the bioterrorism threat.
Putting the bioterrorism threat in perspective
Cult leader Asahara took a key lesson from his acolytes’ repeated failures to mount an effective biological weapons attack: American hyping of the bioterrorism threat was intended to mislead groups like his into pursuing this unproductive path in lieu of other, potentially more effective weapons.  Although to this observer it appears unlikely Washington’s public diplomacy efforts are quite so crafty (at least not intentionally so), Aum’s struggles do suggest that successful bioterrorism is more challenging than it is often portrayed.
Generalizations from one case should be taken with a grain of salt, all the more so when the case is as idiosyncratic as this one. But the cult brought to bear both some degree of relevant expertise and very substantial resources. The head of the biological weapons program had completed undergraduate studies in agricultural and veterinary medicine and conducted PhD studies in virology, albeit was not a microbiologist and lacked tacit knowledge regarding working with bacteria.  Another senior member was a medical doctor. As for resources, the cult possessed and was willing to spend millions of dollars on its unconventional weapons programs and constructed substantial infrastructure to support it.
The Aum case particularly highlights the importance of specialized, tacit knowledge to be able to isolate, manipulate, cultivate, and sustain living organisms, somewhat in contrast to chemical weapons development efforts.  The cult’s failure to successfully deploy biological weapons appears to be over determined. Whatever the causes of its failures—and these remain somewhat ambiguous—it appears that plenty of others stood between the cult and a successful bioterrorism attack. For example, the cult appears to have failed to obtain a pathogenic strain of B. anthracis or a toxigenic strain of C. botulinum. But had it succeeded, it appears likely the cult would have struggled to cultivate those strains. Had it overcome that hurdle, cult members would almost certainly have exposed themselves during the production and dissemination process. Had they avoided those hurdles, Aum’s crude production and dissemination techniques would have meant that few if any non-cult members would have been sickened by the crudely disseminated slurry, even if it had contained BoNT or a virulent strain of B. anthracis.
Effective dispersal is a significant hurdle
Discussions of bioterrorism tend to focus on the possibility that individuals or groups might obtain agents they could use to conduct attacks, but often give short shrift to how readily such agents could be disseminated if they were obtained. The evidence suggests that Aum likely failed to obtain potent agents, and that its struggles to distribute what it did obtain effectively are therefore not necessary to explaining its failure to cause harm via biological weapons.
Nonetheless, Aum’s struggles to effectively disseminate the material it produced highlight an important finding. Obtaining agents is likely the greatest hurdle to successful bioterrorism, but disseminating them to cause large numbers of casualties, and simultaneously avoiding exposure of those doing the disseminating, is a non-trivial secondary challenge that popular discussions of bioterrorism often overlook.
Where there is smoke, there may later be fire
Aum’s efforts were characterized by steadily escalating levels of attempted violence, a relatively seamless transition from individual to mass attacks, and from conventional to unconventional weapons, and a trial-and-error process of repeated errors but persistence and attempts at correction in the face of failure.
Like other non-state groups, Aum engaged in steadily escalating levels of illegal action and violence. The group began with the illegal disposal of the body of a cult member who had been accidentally killed and escalated to attacks on individuals perceived to be antagonistic to the cult and ultimately the general populace. Initial transgressions appear to have cemented group affiliation, emboldened cult members and especially the leader Asahara, and made it difficult for members to back out as violence escalated.
One striking element of the case is the relatively seamless transition from individual to mass attacks, and from more to less conventional ones, (i.e., from killing a lapsed cult member by strangling him with a rope to attempting to expose large populations to BoNT and B. anthracis). Normative inhibitions appear to have played little role, although it is hard to know how far that can be generalized beyond the case.
Relatedly, the cult was not dissuaded by repeated failures, and it was emboldened at the lack of consequences for its earlier actions. This suggests that where there is smoke there may be fire, in other words, failed attacks may be harbingers of future, and potentially more successful, ones. The pattern of trial, error, and potential later success also provides support for a “broken windows” theory of counterterrorism: responding robustly to more modest initial transgressions may make subsequent greater transgressions less likely. 
 Philipp C. Bleek is assistant professor of Nonproliferation and Terrorism Studies in the Graduate School of International Policy and Management at the Monterey Institute of International Studies, a Graduate School of Middlebury College, and fellow at the James Martin Center for Nonproliferation Studies. He thanks Richard Danzig, Jessica Varnum, and Ray Zilinskas for helpful comments on earlier drafts.
 One striking thing about Breivik’s manifesto is the sobriety of its analysis of anthrax, especially given the author’s apparent lack of relevant expertise. However, since much of the manuscript was plagiarized from various sources, whether Breivik deserves much credit for the analysis is debatable. “Theoretically,” the manifesto says (in this case channeling Wikipedia), “anthrax spores can be cultivated with minimal special equipment and less than a first-year collegiate microbiological education.” But in practice, the document notes, the procedure “is difficult and dangerous.” Andrew Berwick (pseudonym), 2083: A European Declaration of Independence (self-published, 2011), accessed November 4, 2011 at http://www.kevinislaughter.com/wp-content/uploads/2083+-+A+European+Declaration+of+Independence.pdf, pp. 952-954, 957, 959, 961-965.
 As William Rosenau notes, “Aum is the only example of a terrorist group that has attempted to carry out mass murder with biological toxins and human pathogens. Other terrorists have attempted to acquire human pathogens, and one religious cult has succeeded in poisoning food with dangerous bacteria. But to date only Aum has attempted to create and use bioweapons on a large scale. In short, Aum is an important source of empirical information on sophisticated terrorist efforts to acquire these weapons.” William Rosenau, “Aum Shinrikyo’s Biological Weapons Program: Why Did It Fail?” Studies in Conflict and Terrorism Volume 24, Number 4 (2001), p. 290.
 John Parachini wrote in 2005, “Aum’s research about biological weapons remains remarkably obscure in official, journalistic, and scholarly accounts…These activities warrant considerably more thorough examination than they have received thus far.” John Parachini, “Aum Shinrikyo,” in Brian Jackson et al., Aptitude for Destruction, Volume 2: Case Studies of Organizational Learning in Five Terrorist Groups (Santa Monica, CA: RAND, 2005), p. 19.
 Richard Danzig et al., Aum Shinrikyo: Insights Into How Terrorists Develop Biological and Chemical Weapons (Washington, DC: Center for a New American Security, 2011). Danzig’s prior work on the topic includes Richard J. Danzig, Rachel Kleinfeld, and Philipp C. Bleek, After an Attack: Preparing Citizens for Bioterrorism (Washington, DC: Center for a New American Security, 2007); Richard J. Danzig, A Policymaker’s Guide to Bioterrorism and What to Do About It (Washington, DC: National Defense University, 2009); Richard Danzig, Catastrophic Bioterrorism: What Is To Be Done? (Washington, DC: National Defense University, 2003). Subsequent references to “Danzig et al.” refer to the Aum Shinrikyo report.
 Aum appears to refer to the “ohm” sound yoga practitioners make; Asahara (then Matsumoto) called his yoga school Aum, Inc. Shinrikyo means teaching of truth. An earlier iteration of the group was called Aum Shinsen no Kai, or Aum Mountain Hermit’s Society, based on a prophecy that survivors of the coming apocalypse would be benevolent shinsen, or mountain hermits. Ian Reader, Religious Violence in Contemporary Japan: The Case of Aum Shinrikyo (Honolulu: University of Hawaii Press, 2000), p. 89.
 Reader, pp. 63, 92. Only a modest fraction of these were “monks” or “nuns” who had fully rejected all ties to the outside world. The group also attempted to open branches in Germany, the United States, and Sri Lanka, and was apparently most successful in Russia, where it attracted approximately tens of thousands of followers after Asahara visited the country with several hundred Japanese members on a “Salvation Tour,” including “spectacular” events and considerable radio and television advertising. Parachini, pp. 29-31.
 Appendix C: Aum Shinrikyo Facilities in Global Proliferation of Weapons of Mass Destruction: A Case Study on the Aum Shinrikyo Senate Government Affairs Permanent Subcommittee on Investigations, October 31, 1995, accessed November 4, 2011 at www.fas.org/irp/congress/1995_rpt/aum/index.html.
 Reader, pp. 88-93. Although the cult’s often-inept violence attracted police attention, a combination of equally-inept policing and strict laws protecting religious organizations allowed it to act with relative impunity.
 Reader pp. 143-145, 148-151; Danzig et al., pp. 9, 12, 14.
 Reader, pp. 148, 153-158.
 Reader, p. 180.
 Robert Jay Lifton, Destroying the World to Save It: Aum Shinrikyo, Apocalytic Violence, and the New Global Terrorism (New York: Metropolitan Books, 1999), pp. 119-120. One can imagine the elderly archivist’s bafflement at the strange Japanese visitors who spent day after day digging through the archives for earthquake generation-related material.
 Parachini, p. 23
 Parachini, p. 26; Reader, p. 217; Lifton, p. 181.
 Danzig et al., p. 29.
 The Danzig et al. study also includes a rich account of Aum’s chemical weapons efforts with some new details about the cult’s activities, including the most thorough discussion of the cult’s crude but effective sarin dissemination techniques published to date.
 Danzig et al., p. 16.
 Since the cult operated a hospital, it could plausibly have obtained the bacterium from a commercial culture collection.
 What was gathered remains unclear, but a key cult member told Danzig et al. that the cult worked on at least five strains or variants of C. butulinum, although some material may later have been obtained from a South American culture collection. How the cult isolated and identified the strains on which it supposedly worked remains unclear. Danzig et al., p. 16.
 The Danzig et al. study notes this possibility but does not attribute it to a source; see endnote 68, p. 54.
 Danzig et al, p. 16.
 Danzig et al., p. 17.
 A key cult member described to Danzig et al. two or three cube-shaped steel boxes, with dimensions of 2 x 2 x 2.5 meters, used as fermenters, and approximately 50 batches of yellow liquid produced. The total volume supposedly produced would be sufficient to fill dozens of full-size fertilizer transport trucks, suggesting that perhaps the cult member’s recollections should be taken with a grain of salt. That said, Aum had both very substantial financial resources (a study by the U.S. Senate Government Affairs Permanent Subcommittee on Investigations estimated Aum’s total resources in 1995 at more than $1 billion), and the land and manpower for substantial facilities. Global Proliferation of Weapons of Mass Destruction: A Case Study on the Aum Shinrikyo, Senate Government Affairs Permanent Subcommittee on Investigations, October 31, 1995, accessed November 4, 2011 at www.fas.org/irp/congress/1995_rpt/aum/index.html.
 Mice were apparently injected with the yellow liquid; whether ingestion and aerosol inhalation were also employed is unclear. There appears to have been some uncertainty about whether some mice were affected; some did die, but it was unclear whether this was linked to the administration of the botulinum. Danzig, p. 16 and endnote 76, pp. 54-55.
 Danzig et al., p. 17.
 Danzig et al., pp. 17, 20.
 Danzig et al., p. 21.
 W. Seth Carus, Bioterrorism and Biocrimes: The Illicit Use of Biological Agents Since 1990 (National Defense University, 2002), p. 50; Gregory D. Koblentz, Living Weapons: Biological Warfare and International Security (Ithaca, NY: Cornell University Press, 2011), p. 213; Milton Leitenberg, Assessing the Biological Weapons and Bioterrorism Threat (U.S. Army War College, 2005), p. 60.
 Danzig et al., p. 17.
 Danzig et al, pp. 20-21.
 Some of the uncertainty stems from the fact that the individual in charge of the cult’s biological weapons efforts declined interview requests from Danzig et al., and other key cult members disclaim knowledge of his bacillus anthracis source(s). Danzig et al., pp. 21, 23.
 Parachini, p. 21.
 Unfortunately, the cult member in charge of the biological weapons program declined to meet with Danzig and his colleagues.
 Paul Keim, who with colleagues had analyzed a sample from Aum’s 1993 attempted B. anthracis attack and identified it as a benign Sterne vaccine strain, conducted further analysis in 2010 in response to a request from Danzig et al. and determined that, “The genome sequence was extremely similar not just to Sterne but specifically to the 34F2 strain then available at Obihiro,” the university where the cult member in charge of the biological weapons program had conducted his undergraduate studies. Danzig et al., p. 23.
 Virulent B. anthracis possesses two plasmids, while the Sterne and Pasteur strains each possess only one of the two and can consequently stimulate immune reactions without being lethal. The two strains can be employed to yield virulent bacteria via either cell-to-cell “mating” (conjugation), or the use of a virus that infects bacteria (transduction). The technique is challenging and likely beyond the abilities of Aum’s members, but Danzig et al.’s speculation that it was being attempted finds considerable support from the accounts of cult members and other information. Danzig et al, pp. 23-25.
 The speculation is further reinforced by the recollection of one key cult member that a microscope was used to confirm success in transforming the vaccine strain to a more virulent one. The second plasmid found on a virulent anthrax strain generates a capsule that can be viewed after staining under a light microscope. Danzig et al, p. 24. The Russian paper cited is A.S. Stepanov, “Transduction and Conjugation Transfer of the pX02 Plasmid in Bacillus anthracis” Molekuliarnaia Genetika, Mikrobiologia, I Virusologia 12 (1989), pp. 39-43.
 Raymond A. Zilinskas, Biological Warfare: Modern Offense and Defense (Lynne Rienner, 2000), p. 81; Lifton, p. 188; Danzig, p. 25.
 Danzig et al., p. 25.
 Danzig et al., p. 25.
 Gregory D. Koblentz, Living Weapons: Biological Warfare and International Security (Ithaca, NY: Cornell University Press, 2011), p. 213.
 Danzig et al., p. 26, based on Danzig interview with Fumihiro Joyu, April 21, 2008. One can imagine Al Qaeda operatives similarly grumbling about chemical, biological, and especially nuclear terrorism risk assessments; the online humor magazine The Onion nicely captured that scenario in a story headlined “Terrorist Has No Idea What To Do With All This Plutonium” a few years ago. November 30, 2005, accessed October 2, 2011 at www.theonion.com/articles/terrorist-has-no-idea-what-to-do-with-all-this-plu,1847/.
 Tacit knowledge is knowledge that cannot be conveyed in words or symbols, but must be learned by doing, often through a process of trial-and-error. A paradigmatic example is learning to write a bicycle; a textbook on bicycle-riding would presumably be of little use to mastering the core skill of balancing while operating the bicycle.
 Successfully mounting a B. anthracis attack requires skills associated with obtaining, growing, processing, sporulating, drying, pulverizing, testing, and disseminating, posing major challenges even for those trained as, for example, medical doctors or veterinarians.
 The “broken windows” strategy of policing was first articulated by James Q. Wilson and George L. Kelling in a 1982 article in the Atlantic Monthly, in which they suggested that not fixing broken windows would encourage greater transgressions. The approach was famously implemented in New York in the early 1990s, first by the head of the city’s Transit Police, William Bratton, and then by Major Rudy Giuliani and his police commissioner, Howard Safir. As implemented in New York, one notable example of “broken windows” were the “squeegee men” who cleaned car windshields at intersections and then demanded payment. James Q. Wilson and George L. Kelling, “Broken Windows: The Police and Neighborhood Safety” The Atlantic Magazine (March 1982), accessed November 4, 2011 at http://www.theatlantic.com/magazine/archive/1982/03/broken-windows/4465/.
On the morning of March 20, 1995, members of the Aum Shinrikyo (Supreme Truth) doomsday cult carried out the deadliest act of domestic terrorism in the postwar era, releasing a toxic nerve gas that killed 13 and injured thousands during the rush-hour in Tokyo.
Twenty years later, a number of victims continue to suffer physical or mental after-effects of the sarin attack, experiencing complications such as impaired speech, blurred vision and post-traumatic stress disorder. Some of the more unlucky ones are still confined to their beds.
To date, investigators have charged 192 Aum members over their alleged role in the attack, with 13 members, including leader Shoko Asahara, receiving the death sentence.
Katsuya Takahashi, who was arrested in June 2012 after being on the run for 17 years, is the last cultist still on trial. Takahashi is thought to have been the driver for one of the senior cultists who sprayed the gas, and faces charges that include murder, kidnapping and solitary confinement resulting in death, and violation of the Explosives Control Law. He pleaded not guilty to almost all charges against him at the beginning of his trial at the Tokyo District Court in January. A verdict is expected at the end of April.
Following Aum’s dismantlement, former members quickly reorganized into a group called Aleph in 2000. Others joined a splinter group headed by former Aum spokesman Fumihiro Joyu called Hikari no Wa (Circle of Rainbow Light). The spin-off groups will remain under the Public Security Intelligence Agency’s surveillance until the end of January 2018.
Marking the 20th anniversary of the sarin gas attack, The Japan Times talks to three people who have dedicated their lives to helping former cult members break free from Asahara’s influence: Hiroyuki Nagaoka, Nagaoka’s son and Taro Takimoto. The three of them offer their insights into the cult and reveal how difficult it is for members to distance themselves from the group once they decide to leave.
The cult member
Nagaoka’s son, who has asked for his name to be withheld to protect the privacy of his family, first joined Aum Shinrikyo in the fall of 1987 when he was still a college student studying Indian philosophy. He had always been fascinated with religion and had, by this time, read more than 2,000 books on the subject. Picking up a couple of books published by Aum, he was surprised by the cult’s progressive ideas.
It didn’t take the son long to fall under the spell of visually impaired Aum guru Asahara, whose real name is Chizuo Matsumoto. He started to study the teachings of the cult, and take part in yoga classes. He went on to take part in a 10-day “madness” camp, during which participants were forced to undergo severe training that tested their physical strength to the limit. Desperate to become a fully fledged member, the son devoted himself completely to the cult.
Even though he was a college student, he made donations to Aum as often as he could, even skipping meals on occasion to save whatever money he could. “Mind control is sort of like magic — anyone is in danger of falling into that trap,” the son says. “Aum made it seem like you were free to make choices but, in reality, you were being guided toward those choices.”
He quickly took on a prominent role inside the cult, representing Aum in the media and opposing the actions of his father, who had founded a support group for parents whose children were being brainwashed by Asahara.
Like other cult members, the son was taught to believe that relationships with parents were unnecessary because they only represented his present life.
“The bond between Aum members was very strong because we thought we were connecting on a spiritual level,” he says. “We believed we are connected in our past lives as well as the future through reincarnation. I didn’t have a good relationship with my father at the time. I was taught that anything he said was evil nonsense.”
The son dedicated himself to Aum activities and worked tirelessly in the cult’s 1990 bid to get Asahara and 24 other members elected into the Diet. Eating one meal a day and sleeping a couple of hours each night, he spent his days distributing fliers and putting up campaign posters of Asahara.
One morning, he woke up suffering from amnesia — he had no idea who he was or what Aum Shinrikyo did. After a few days, he recovered most of his memory prior to his association with the cult, including his father’s phone number. His days with the cult were numbered.
After conducting his own research into Asahara and Aum Shinrikyo, he realized he had been lied to and was finally able to escape. “I was the son of the chairman of an Aum victims’ support group,” the son says. “If I had stayed, I would have either been killed or been forced to become involved in the sarin attacks.”
He went on a trip to India with his parents to meet with a close aide to the Dalai Lama, who denied that the Nobel peace laureate had instructed Asahara to propagate “real Buddhism” in Japan.
The son says he was able to escape the cult because of his parents, especially his father, Nagaoka, who refused to give up on him. Nagaoka publicly stood up to the cult, not only to help his son but also other parents whose children had been brainwashed.
By doing so, however, Nagaoka made himself a target and was attacked with VX nerve gas shortly before the sarin subway attack. He was almost killed in the attack.
“I feel terribly guilty for what I put my father through and always will,” the son says. “If I hadn’t joined Aum, he wouldn’t have been targeted in the VX attack. It was because of my father and mother that I was able to leave Aum. Not everyone is as lucky as I am because some people don’t have a family to go back to.”
The son has succeeded in helping more than 30 people leave Aum Shinrikyo. To this day, however, he regrets failing to convince convicted Aum member Masami Tsuchiya to quit. A few years before the sarin attack, the son spent weeks visiting a facility in Ibaraki Prefecture where Tsuchiya was being detained by his family members. He spent up to 10 hours a day talking to Tsuchiya, who remained impassive and eventually returned to the cult. Tsuchiya is now on death row after being found guilty of making the toxic gas that was used in the subway attacks.
“I’m sorry I couldn’t convince Tsuchiya to quit. If I had been successful, there probably wouldn’t have been sarin attacks in Matsumoto or Tokyo,” the son says. “Tsuchiya was older and smarter than me, and looked down on me as a failure. Nothing I said reached him.”
The son was in his mid-20s when the sarin attack happened. Now 46, he works as a contract employee and is also a certified Tibetan Buddhist monk.
He still tries to help some of the existing 1,650 members of Aleph and Hikari no Wa groups leave if approached by their families, but says it’s not easy to juggle a family and a full-time job.
“There are now people in my life that I need to protect and I can’t fully commit (to helping members quit),” the son says, noting that it takes countless hours to convince a member to leave.
Meanwhile, the people he once considered to be closer than his family are now on death row.
“If you kill someone, you have to atone for your sins in this life in accordance to Japanese law,” he says. “It’s true (the 12 men on death row) might have been under Asahara’s influence, but the reality is that they killed people. I don’t think our tax money should be used to keep them alive.”
The family member
Hiroyuki Nagaoka knew something was amiss when his son started asking him about receiving his inheritance before Nagaoka died. A short time later, he found a signed piece of paper in his son’s room pledging to give all assets he inherited from his father to “Holy Master Asahara.”
From that day forth, he was locked in a constant battle to free his son from the cult’s influence. “Aum turned our children into mindless people without a sense of their own free will,” Nagaoka says. “They became unable to determine good from bad and that is why Aum members didn’t think twice about murder. They became Asahara’s puppets.”
Nagaoka suspected the cult was after his land — more than 500 sq. meters in Tokyo’s expensive Aoyama shopping district. He did everything he could to break the cult’s hold on his son, and even went as far as to read Aum books and attend seminars delivered by Asahara.
Journalist Shoko Egawa introduced Nagaoka to lawyer Tsutsumi Sakamoto, who helped him launch a group in October 1989 to help support families of cult members.
Sakamoto, a young lawyer who was interested in human rights issues, was vocal about the cult’s suspicious activities. He had been preparing to file a civil lawsuit against Aum Shinrikyo when he, his wife and 1-year-old son mysteriously disappeared in November 1989. They remained “missing” for years and it was only after the 1995 sarin attack that Aum members admitted to killing them in the early hours of Nov. 4, 1989, and burying their bodies in separate locations in Nagano, Niigata and Toyama prefectures. To prevent them from being identified, the killers even went so far as to smash the victims’ teeth.
The slaying of Sakamoto and his family affects Nagaoka to this day. “For the first nine years (after Sakamoto was found and buried in a cemetery), my wife and I visited his grave every month to apologize,” he says, choking up on his words. “He was the one that told me that there are times when you need to take a stand. And that is why I have been continuing my activities now for more than 20 years.”
Nagaoka devoted himself to getting his only son back. He hired a private detective to look into Asahara’s background. He walked all around Kanda, visiting Chinese medicine stores to collect evidence that the “special” medicine Asahara was selling for outrageous prices was actually very cheap. He sold off his land and was pressured into quitting his job because Aum members began harassing him at his office and he knew his continued presence would only hurt his company.
However, Nagaoka refused to give in, repeatedly confronting Asahara and other senior cult members. “I called him out on his lies and told him to his face that a liar had no right to preach,” Nagaoka says.
It wasn’t long before Nagaoka became a Aum target. In January 1995, Aum cult members — including Takahashi — attempted to kill Nagaoka by spraying him with VX nerve gas. Nagaoka suffered a cardiorespiratory arrest and was in critical condition for 10 days. He recovered, but the nerve gas paralyzed the right side of his body, forcing him to visit a hospital every month for treatment.
Nagaoka has attended Takahashi’s trial almost every day since it began, noting that the suspect has yet to show any sign of remorse for his actions. Nagaoka also wrote to the former cult member immediately after his arrest almost three years ago, but hasn’t heard anything from him. “It is obvious he is still under Asahara’s influence. He doesn’t seem to be human any more,” he says. “I understand he’s a puppet of Asahara and, therefore, harbor absolutely no personal hatred against him.”
His compassion extends to other senior cultists on death row, and his Aum Shinrikyo Kazoku no Kai (Aum Shinrikyo Family Group) has launched a petition that seeks to pardon 12 of them, excluding Asahara. For more than 25 years, Nagaoka has led the support group. At 76, he cannot travel far from his home because he needs to carry an oxygen tank wherever he goes. Nagaoka, however, says he has no intention of stopping his activities “as long as the Aum cult still exists,” regardless of its name.
Over the years, Nagaoka has apologized to each victim he encounters. “Nothing I say will ever make up for the serious crimes our children committed, but the first thing I do is apologize,” he says. “It is our duty as parents to ensure that our children become people who can once again think for themselves.”
When Sakamoto first asked Taro Takimoto to help him on a case related to the Aum cult, the lawyer curtly turned his friend down. Cults were notoriously difficult to deal with and he was reluctant to get involved. However, Takimoto was quick to offer his services to parents seeking to get their children back from Aum Shinrikyo when Sakamoto went missing — at times, even directly negotiating with senior cult members.
“People are vulnerable and everyone is in danger of falling under their influence,” Takimoto says. “Most of these Aum children were honest, hard-working people who grew up not knowing that this kind of evil exists in the world.”
Takimoto and Nagaoka’s son began offering counseling services in July 1993, helping members to extract themselves from the clutches of the cult. They typically spend a great deal of time with each individual, building trust and discussing a wide range of issues such as religion, mathematics and even aliens. It was a long and arduous process, he recalls.
“Cult members no longer know the difference between right or wrong,” Takimoto says. “It is the same with Islamic State militants — they think they’re doing the right thing by beheading people. Aum members could equally commit murder because of their strong religious beliefs. This is what makes them extremely dangerous.”
Takimoto would first make Aum members question the small actions they carried out for the group, including such things as buying Asahara’s books with money provided by the cult.
He would slowly work his way up to showing the Aum members the now famous photograph of him “levitating” in the air. Asahara told his followers that he could levitate like this, and showed pictures of him with his legs crossed floating above the ground.
Takimoto proved that it’s possible for anyone to fake this by taking a remarkably similar photo himself. “Asahara used the photos of him ‘levitating’ to convince his followers he had achieved the ultimate state of mind,” Takimoto says. “He found my photo disrespectful.”
Indeed, it didn’t take long for Takimoto to wind up on Asahara’s hit list. Although investigators ultimately indicted just one case, the cult tried to kill the lawyer with sarin, VX nerve gas and botulinum toxin on four separate occasions.
Takimoto, however, refused to back down. He instructed his family to live apart temporarily and took out a life insurance policy that would pay more than ¥280 million in the event of a death.
When former Aum members told him about criminal activities that had taken place inside the cult, including the use of illegal drugs and the death of at least one member on their grounds, he passed on these facts to the police.
Both Takimoto and Nagaoka agree that the sarin subway attack could have been prevented had the police paid closer attention to their warnings.
Takimoto goes so far as to claim that Nagaoka’s case was grossly mishandled.
The only reason police officers investigated the site where Nagaoka was attacked with VX nerve gas was because the lawyer got in their faces. Even then, the police brushed it off as an attempted suicide using a type of organophosphate pesticide.
“Both the sarin subway attack and the attempt on Mr. Nagaoka’s life could have been prevented if the police had taken proper action,” Takimoto says. “I told the police that Mr. Nagaoka was in serious danger but they didn’t listen. … The police clearly made a mistake in dealing with this case, determining that Mr. Nagaoka attempted suicide without any grounds to back up their theory.”
About 20 years have passed since Takimoto established Kanariya no Kai (Canary Group) that consists of more than 100 former cult members. Some have gone back to night school because they were young when they were in the cult and didn’t complete a proper education; others have found jobs in the welfare industry. For many, life back in the real world hasn’t been easy and a third of the people Takimoto has assisted have sought help for depression. Some have since committed suicide.
Like Nagaoka, Takimoto also believes that the only person who should be executed for his crimes is Asahara. “Asahara is a man who is 100 percent full of worldly desires,” Takimoto says. “He has a strong urge for power and his hatred toward society for not being able to achieve it is deep. Executing him is the only way to bring some sort of closure.”
This is the first installment of a two-part series to mark the 20th anniversary of the sarin gas attacks in Tokyo. The second installment will appear on March 22.