Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Compliance

NSA Contractor Charged With Leaking Russia Hacking Report

A federal contractor has been charged with removing classified material from a government facility and mailing it to a news outlet, the U.S. Department of Justice announced on Monday.

A federal contractor has been charged with removing classified material from a government facility and mailing it to a news outlet, the U.S. Department of Justice announced on Monday.

Reality Leigh Winner, 25, of Augusta, Georgia, had worked as an NSA contractor with Pluribus International Corporation since mid-February. Winner allegedly abused her top secret clearance to access a classified intelligence report, which she printed and mailed to a news outlet that has not been named by authorities.

The news outlet in question is said to be The Intercept, which published an article on Monday based on top secret NSA documents claiming that hackers linked to Russia’s military had repeatedly attempted to break into U.S. voting systems before last year’s presidential election. The Intercept said it obtained the NSA materials from an anonymous source.

According to court documents, reporters informed intelligence officials of their intention to publish an article. The copy of the document provided by the news outlet to officials was “folded and/or creased,” which allowed government investigators to determine that the document had been printed and physically carried out of the facility.

An internal audit showed that a total of six individuals had printed the leaked report and one of them was Winner. An analysis of the desk computers used by these six individuals revealed that Winner had contacted the news outlet via email.

The FBI obtained a search warrant for Winner’s residence, and authorities said the woman admitted printing the report and mailing it to the news organization, despite knowing that the material was classified.

Advertisement. Scroll to continue reading.

Winner printed the classified report on May 9 and mailed it a few days later. She was arrested by the FBI on June 3 and on Monday she was charged with removing classified material from a government facility and mailing it to a news outlet.

“Exceptional law enforcement efforts allowed us quickly to identify and arrest the defendant,” said Deputy Attorney General Rod J. Rosenstein. “Releasing classified material without authorization threatens our nation’s security and undermines public faith in government. People who are trusted with classified information and pledge to protect it must be held accountable when they violate that obligation.”

The article published by The Intercept based on documents provided by Winner revealed that hackers associated with Russian military intelligence, specifically the Russian General Staff Main Intelligence Directorate (GRU), sent spear-phishing emails to employees of VR Systems, a Florida-based vendor of electronic voting services and equipment, in order to trick them into handing over their credentials.

The hackers then used the compromised credentials to deliver malware to local government employees by posing as the vendor. It’s unclear, however, if this phase of the attack was successful.

The United States has officially accused Russia of attempting to interfere with its presidential elections, but Moscow has repeatedly denied the accusations. Last week, Putin once again denied that the Russian government is involved in hacking operations, but admitted that patriotic hackers could launch politically motivated attacks against “those speaking ill of Russia.”

The U.S. is currently conducting an investigation to assess the impact of cyberattacks on the outcome of the elections, but Putin is convinced that hackers cannot influence an election campaign.

Related: DHS Uses Cyber Kill Chain to Analyze Russia-Linked Election Hacks

Related: Trump’s Intel Bosses Reiterate – Russia Meddled in Election

Related: Ex-CIA Chief Says He Warned Russia to Stay Out of Election

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.

Register

In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.

Register

People on the Move

Frank Verdecanna has been appointed Chief Financial Officer at Armadin.

Keeper Security has named Jessica Krowel and Bill Grabner as SVPs of sales for North America.

Skyhigh Security has named Anthony Palladino as Chief Operating Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.