As palm trees swayed in the ocean breeze, Yujing Zhang approached Secret Service agents in the Mar-a-Lago parking lot.
She said she was going to the swimming pool at the Palm Beach presidential estate and presented agents with two Chinese passports in her name. That raised suspicions with her screeners, but a call to the front desk at Mar-a-Lago revealed a club member with a similar last name and with that, and a possible language barrier, reception waved her through.
Not long after, Zhang was arrested carrying four cellphones, a laptop computer, an external hard drive and a thumb drive containing computer malware in an incident that is shining a spotlight on the unique difficulty of fortifying the oceanside Florida estate of President Donald Trump — who was staying at the club that weekend but golfing elsewhere at the time.
Zhang's arrest has revived concerns about security — particularly cyber security — at a presidential refuge that mixes social functions, world diplomacy and extraordinary access to the President. Hundreds of members frequent Mar-a-Lago and the President's other private clubs, which function as working resorts even when Trump himself visits, creating a series of challenges that test the Secret Service.
Federal officials were looking into whether Zhang was part of a larger effort to gain access to the President and do potential harm, and were combing through her devices and treating the case as a "credible threat", according to a US official who discussed the matter on condition of anonymity.
Democratic lawmakers were inquiring about a possible connection to Li Yang, the Republican donor and spa owner who promised Chinese business leaders that her consulting firm could get them access to the President at Mar-a-Lago.
Trump on Thursday dismissed the incident, saying it was "just a fluke situation". "We have very good control," he told reporters.
With the Atlantic Ocean to the east and Florida's Intracoastal Waterway to the west, Mar-a-Lago sits on the Palm Beach barrier island, a 128-room, 5800 square metre symbol of opulence and power. Long a Trump favourite since he purchased it from the foundation of the late socialite Marjorie Merriweather Post in 1985, the President travels to the estate every few weekends during its winter high season.
While there, Trump has been known to crash weddings, pop in on charity events and, one time, order air strikes. He has not been shy about conducting government business there. It was while hosting Chinese President Xi Jinping that Trump, over a chocolate cake dessert, authorised a missile launch at Syrian airfields after a chemical attack. On another occasion, he and Japanese Prime Minster Shinzo Abe sat on an outdoor patio, as guests dined nearby, and reviewed options for responding to a North Korean ballistic test.
Such interactions could make Mar-a-Lago a tempting target, particularly for cyberattacks.
"Mar-a-Lago has not been sufficiently well-defended against not just physical attacks, but against counterintelligence exploits, including digital attacks," said David Kris, an authority on foreign intelligence at Culper Partners consulting company in Seattle.
Federal agencies spent about US$3.4 million ($5m) per Trump visit, much of it on security, according to an analysis done by the US Government Accountability Office of four 2017 trips. The Secret Service doesn't decide who is invited or welcome at the resort; that responsibility belongs to the club. Agents do screen guests outside the perimeter before they're screened again inside.
The agency said in a statement that, with the exception of certain facilities that are protected permanently, like the White House, "the practice used at Mar-a-Lago is no different than that long used at any other site temporarily visited by the President".
But Mar-a-Lago is different from other presidential retreats.
Unlike Ronald Reagan's and George W. Bush's ranches or George H.W. Bush's seaside vacation home in Maine, Mar-a-Lago is open to members who pay US$14,000 annual dues after a US$100,000 or US$200,000 initiation fee. They expect access to the facility and want to host their equally affluent guests — and they are used to getting their way.
Zhang was charged with making false statements to federal agents and illegally entering a restricted area. She remains in custody pending a hearing.
But general club access doesn't mean access to Trump or his guests. When Trump is at Mar-a-Lago, more screening and security measures are required.
"I really think it's overblown. There is a lot of security and the staff is wonderful," said Toni Holt Kramer, a nine-year member of the club and founder of the group "The Trumpettes". "Mr Trump wants us all to feel right at home there."
- AP