BLACKWIRE
← All Reports Breaking / PULSE

Bombed CENTCOM, Fled to China: The MacDill Siblings and the Attack on America's War Brain

March 27, 2026 PULSE Bureau Tampa, FL / Fort Lauderdale, FL

A 20-year-old U.S. citizen planted an explosive device outside the visitors center of MacDill Air Force Base - home to U.S. Central Command - on March 10, called 911 minutes later to announce a bomb, then fled to China with his sister before investigators found the package. Today, both siblings face federal indictments. Their mother has been detained for deportation.

Military base security
Military base security remains at heightened alert across U.S. installations since Operation Epic Fury began Feb. 28. (Pexels)

The case landed in federal court Thursday in a press conference that underscored just how exposed CENTCOM - the nerve center of America's war with Iran - remains to threats from within the United States itself. Alen Zheng and his sister Ann Mary Zheng, both American citizens, face a combined potential 70 years in prison. (AP News, March 27)

What makes this case extraordinary is not just the target. It is the sequence: plant the device, make the 911 call, sell the car, buy plane tickets, and be gone from U.S. soil within 48 hours. A level of preparation that suggests this was not an impulsive act.

Timeline: The MacDill Bombing Plot

Feb 28 U.S. begins Operation Epic Fury against Iran. MacDill Air Force Base (CENTCOM HQ) placed on heightened alert.
Mar 10 Alen Zheng plants explosive device outside MacDill Visitor Center gate. Minutes later, makes 911 call reporting a bomb at the base.
Mar 12 Alen and Ann Mary Zheng sell their Mercedes-Benz SUV to CarMax and board a flight to China. Their mother, who overstayed her visa, remains in the U.S.
Mar 16 Air Force personnel conducting security sweeps discover the package - six days after it was planted. FBI Tampa begins analysis, finds "possible energetic materials."
Mar 18 Separate Florida man calls MacDill twice making threats referencing the suspicious package. Base issues shelter-in-place order. Man later arrested.
Mar 21 FBI ships the unexploded device by helicopter to FBI lab in Huntsville, Alabama for detailed forensic analysis.
Mar 26 Ann Mary Zheng returns from China and is arrested at the airport. Alen Zheng remains in China. Both charged in separate federal indictments.
Mar 27 U.S. Attorney Gregory Kehoe holds press conference in Fort Lauderdale. Siblings' mother detained pending deportation for visa overstay.

The Device That Sat Undetected for Six Days

Bomb disposal investigation
Explosive ordnance disposal units were deployed after the device was discovered. (Pexels)

The most alarming detail in Thursday's court filings is not the bomb itself - it is the gap. Alen Zheng planted the device on March 10. MacDill Air Force Base, already operating at elevated security status due to the ongoing Iran war, did not discover it until March 16. Six full days.

U.S. Attorney Gregory Kehoe said the device "could have potentially been very deadly." He did not elaborate on its specific composition, but the FBI's characterization of "energetic materials" suggests something more sophisticated than a hoax. Investigators later found components consistent with explosive materials at the family's home, according to court filings. (AP News)

The device was placed outside the base's Visitor Center gate - the point of entry for civilians, contractors, and non-credentialed personnel. That placement raises immediate questions about targeting logic: was this designed to kill civilians in the process of accessing a military installation, or was it intended as a symbolic statement against CENTCOM's operations in Iran?

Kehoe acknowledged Thursday that investigators have "no immediate evidence" that Alen Zheng acted on behalf of the Chinese government or any other foreign power. But he also made clear that investigators are "exploring every avenue" - careful diplomatic language that does not foreclose the possibility. The question of whether this was a lone act or a directed operation remains open.

"We're exploring every avenue we can to get him back to the United States." - U.S. Attorney Gregory Kehoe, press conference, Fort Lauderdale, March 27, 2026

CENTCOM: Why MacDill Is the Most Consequential Target on U.S. Soil

Military command center operations
U.S. Central Command at MacDill coordinates all American military operations across the Middle East and Central Asia. (Pexels)

U.S. Central Command - CENTCOM - is not just a military base. It is the operational brain for American wars across 21 countries, stretching from Egypt to Kazakhstan, and encompassing the entirety of the Middle East. Every airstrike on Iranian targets, every naval movement through the Persian Gulf, every logistics decision in Operation Epic Fury originates from or flows through MacDill's command structure.

When the Iran war began on February 28, MacDill was immediately elevated to Force Protection Condition Charlie - the second-highest military security level, reserved for situations where an attack is likely. The base has been in that posture for the entire conflict. The Zheng bombing was planted directly into that environment.

The fact that U.S. Air Force personnel conducted searches of the sprawling facility without finding the device for nearly a week speaks to the inherent difficulty of securing 5,600 acres of active military infrastructure against low-profile threats. MacDill houses not just CENTCOM but Special Operations Command (SOCOM), the Air Mobility Command's refueling wing, and support operations for ongoing strikes across the region.

Three of the six service members killed in the KC-135 crash in western Iraq on March 20 - a catastrophic collision during refueling operations that killed all six crew members - were from MacDill's own 6th Air Refueling Wing. The base has been absorbing the weight of this war at the operational and human level simultaneously. (AP News, March 21)

MacDill Air Force Base - Key Numbers

21
Countries under CENTCOM command
5,600
Acres secured at MacDill
6
Days device sat undetected
13
U.S. service members killed in Op. Epic Fury
140
U.S. service members injured in the war
70 yrs
Combined max prison exposure for siblings

The Siblings: American Citizens, Chinese Destination

Security and surveillance
Investigators used phone data and surveillance footage to reconstruct the siblings' movements. (Pexels)

Both Alen Zheng, 20, and Ann Mary Zheng, 27, hold U.S. citizenship. Kehoe stated Thursday that he is not immediately certain whether either also holds Chinese citizenship - another detail investigators are pursuing.

The case against Alen is direct: he planted the device. The charge - attempting to damage government property and unlawfully making and possessing an explosive device - carries a 40-year maximum sentence. He remains in China. The U.S. does not have an extradition treaty with China, which means that unless Beijing chooses to cooperate or Alen Zheng returns voluntarily, he may remain beyond reach indefinitely.

Ann Mary Zheng's exposure is different in character. She is charged with witness tampering and being an accessory after the fact - specifically for selling the Mercedes-Benz SUV her brother used to deliver the device. By the time investigators reached CarMax, the car had been professionally vacuumed and cleaned. But forensic testing still detected explosive residue, according to FBI Special Agent in Charge Matthew Fodor. (AP News)

She flew to China with her brother on March 12 - two days after the bombing. She has since returned to the U.S., where she was arrested upon landing. A federal public defender declined to comment on her case.

Their mother, whose identity has not been publicly released, was detained by immigration authorities for overstaying her visa. She is pending deportation proceedings.

"The device didn't detonate, but could have potentially been very deadly." - U.S. Attorney Gregory Kehoe, press conference, March 27, 2026

The 911 Call: A Taunting Move or a Calculated One?

Investigation and law enforcement response
Federal agents used cell site data to trace the 911 call back to Alen Zheng within days of the device's discovery. (Pexels)

Within minutes of planting the explosive, Alen Zheng called 911 and reported a bomb at MacDill Air Force Base. On its surface, this appears self-defeating - why announce the bomb you just placed? But the call may illuminate something about intent.

One interpretation: this was not primarily an assassination plot. The device was designed to be found, to trigger mass response, to disrupt the base at a moment when CENTCOM is directing a major military operation. The bomb was the delivery mechanism. The 911 call was the message. Cause chaos, demonstrate vulnerability, then disappear before accountability arrives.

A second interpretation: the call was operationally naive - a young man who wanted credit for the act and did not fully appreciate how quickly phone data would be used against him. The FBI traced the 911 call to Alen Zheng using phone data, then confirmed his presence via surveillance video of the SUV, then located explosive residue despite CarMax's cleaning. The forensic trail was thorough and relatively fast.

A third possibility - one that investigators have not ruled out - is that the call was designed to test base response protocols. CENTCOM's security procedures, response times, lockdown patterns - all visible to anyone watching the news coverage of a bomb threat. For a foreign intelligence service, that information has value.

The FBI has not characterized this as espionage. But the combination of factors - target (CENTCOM), timing (active war), escape route (China), composition (energetic materials), premeditated disposal of evidence - does not fit the profile of an impulsive domestic threat actor.

A Separate Threat, A Pattern of Vulnerability

Night security patrol
MacDill has maintained Force Protection Condition Charlie - the second-highest security level - throughout the Iran war. (Pexels)

Two days after investigators discovered the Zheng device on March 16, a separate individual - a 35-year-old man from Palm Harbor, Florida - called MacDill twice on the morning of March 18, making threatening statements to base personnel. The base issued a shelter-in-place order that lasted several hours before being lifted. The Palm Harbor man was arrested Monday and has no known connection to the Zhengs. He was taken to a mental health facility under Florida's Baker Act. (AP News, March 26)

Two separate threats against the same base within eight days - one a credible explosive device, one a verbal threat - illustrates the security environment CENTCOM is operating in domestically while fighting a war abroad. The convergence is not coincidental. Wartime raises the stakes for everyone who wants to send a message, and MacDill has become the most visible symbol of U.S. military power in the current conflict.

The KC-135 crash that killed six MacDill-connected airmen on March 20 added another layer of tragedy to a base already absorbing significant operational strain. The investigation into that crash - described by CENTCOM as not caused by hostile or friendly fire - remains ongoing. (AP News, March 21)

In the week between the device being planted and being found, the base processed untold numbers of personnel, vehicles, and deliveries through the Visitor Center gate where the bomb sat. The window of catastrophic potential was real and extended.

Can the U.S. Get Alen Zheng Back?

International law and extradition
The U.S. has no extradition treaty with China, complicating efforts to bring Alen Zheng to face charges. (Pexels)

The legal mechanism problem is stark: the United States and China have no extradition treaty. Alen Zheng, if he chooses to remain in China and if Beijing declines to act, is effectively beyond the reach of the U.S. justice system indefinitely.

This is not without precedent. Numerous individuals facing U.S. federal charges have sheltered in China over the years, with American authorities unable to compel return. The most the U.S. can typically do is issue an Interpol Red Notice - a request to member countries to locate and provisionally arrest the subject - and hope for diplomatic pressure to bear results.

Whether Kehoe's "exploring every avenue" language means a diplomatic request to Beijing has already been made, or is in preparation, was not confirmed at Thursday's press conference. Given the current state of U.S.-China relations - strained by the Iran conflict, trade disputes, and ongoing technology competition - the prospects for Chinese cooperation are, at best, uncertain.

The question of Alen Zheng's potential Chinese citizenship compounds this. If he holds Chinese citizenship, Beijing has additional legal cover to refuse extradition by invoking the standard principle that states do not extradite their own nationals. If he does not, the diplomatic picture is marginally cleaner - but still deeply uncertain.

The indictment stands regardless. It preserves prosecutorial options and, critically, means that if Alen Zheng ever travels to a country with an extradition treaty with the United States, or if he ever returns voluntarily, the charges are waiting. The clock on the indictment does not expire.

The Bigger Picture: Homeland Threats During Wartime

Military aircraft operations
Operation Epic Fury has put U.S. military installations across the country on a wartime security footing. (Pexels)

Since February 28, every major U.S. military installation has been operating under heightened security protocols tied to Operation Epic Fury. The logic is straightforward: a nation at war creates enemies abroad and potentially activates or emboldens adversaries within its own borders.

The MacDill case is a direct illustration of that risk. CENTCOM is not a base that was attacked because of proximity or opportunity. It was attacked because of what it represents - the command brain of the war America is currently fighting. Choosing MacDill as a target demonstrates a level of political and strategic literacy that goes beyond random violence.

Security analysts have long warned that wartime exposure for U.S. domestic installations is higher than peacetime, and that the threat profile is different - not conventional terrorism in the post-9/11 mold, but targeted disruption of command infrastructure by actors who understand the military's organizational chart. The Zheng case, whatever its ultimate origin, fits that profile.

The U.S. military death toll in Operation Epic Fury currently stands at 13, with 140 service members injured. Three of the six KC-135 crash victims were MacDill personnel. A bomb sat undetected outside CENTCOM's front gate for six days. And the primary suspect is in China with no immediate path to extradition.

The war is being fought in the skies over Iraq and the Strait of Hormuz. But its reverberations are reaching Tampa, Florida - and the full picture of who is acting, and why, remains a work in progress.

"War is hell. War is chaos. And as we saw yesterday with the tragic crash of our KC-135 tanker, bad things can happen. American heroes, all of them." - Defense Secretary Pete Hegseth, Pentagon press conference, March 21, 2026

What Happens Next

Federal courthouse justice
Federal charges have been filed in the Tampa district. Ann Mary Zheng faces arraignment; Alen Zheng remains at large in China. (Pexels)

Ann Mary Zheng will face the U.S. federal court system in Tampa. Her charges - witness tampering and accessory after the fact - carry a maximum 30-year sentence. How much of the full story she can or will provide to investigators about her brother's motivations may shape the next phase of the investigation significantly.

Alen Zheng faces the more serious charges and remains beyond reach. The FBI's analysis of the device at the Huntsville lab may produce additional evidence - including information about construction methods, material sourcing, and technical sophistication - that helps establish whether this was a self-taught operation or something with outside support.

The family home search produced explosive device components. That material evidence, combined with the car residue and the cell phone data, gives prosecutors a strong forensic case when and if Alen Zheng returns to U.S. jurisdiction.

The broader security question - how a functional explosive device sat outside CENTCOM's Visitor Center gate for six days during an active war - will almost certainly trigger a security review of protocols at MacDill and likely at other high-value installations. The base operates at FPCON Charlie as a baseline now, which is meant to reflect an environment where attack is "probable." The gap between the device's placement and its discovery suggests that even probable-threat postures have blind spots.

The MacDill case is not closed. The suspect is abroad, the investigation is active, the forensics are pending, and the geopolitical dimension - U.S. citizenship, Chinese destination, active war as backdrop - ensures this will remain a closely watched case. In a conflict that has already claimed 13 American lives, the discovery that CENTCOM's home base was a deliberate target from within the United States adds a dimension the Pentagon is unlikely to speak to openly. But it is there.

Get BLACKWIRE reports first.

Breaking news, investigations, and analysis - straight to your phone.

Join @blackwirenews on Telegram