Foreign Hacker Compromises FBI's Epstein Investigation Files in Cyber Breach
In a significant security lapse, a foreign hacker gained unauthorized access to files related to the FBI's investigation of the late sex offender Jeffrey Epstein during a cyber breach at the bureau's New York Field Office three years ago. This revelation comes from a source familiar with the matter and recently published Justice Department documents reviewed by Reuters, marking the first report detailing the involvement of a foreign hacker in this incident.
Details of the Cyber Incident
The FBI described the event as an "isolated" cyber incident, stating that access was restricted to the malicious actor and the network was rectified. However, the investigation remains ongoing, with no further comments provided at this time. Jeffrey Epstein, found hanged in his jail cell in 2019 in a ruling of suicide, had been arrested again on federal charges of sex trafficking of minors, making the compromised files of high sensitivity.
Although the source indicated the intrusion appeared to be carried out by a cybercriminal rather than a foreign government, the incident highlights the potential intelligence value of these files. Jon Lindsay, a researcher at the Georgia Institute of Technology specializing in emerging technology and global security, emphasized this point, stating, "Who wouldn't be going after the Epstein files if you're the Russians or somebody interested in kompromat? If foreign intelligence agencies are not thinking seriously about the Epstein files as a target, then I would be shocked."
Timeline and Discovery of the Breach
The breach occurred on February 12, 2023, when a server at the Child Exploitation Forensic Lab in the FBI's New York Field Office was inadvertently left vulnerable. According to the source and documents, Special Agent Aaron Spivack was navigating the bureau's complex procedures for handling digital evidence, which led to the security gap. The intrusion was discovered the following day when Spivack turned on his computer and found a text file warning that his network had been compromised.
Further investigation revealed traces of unusual activity on the server, including combing through files pertaining to the Epstein investigation. The timeline does not specify which files were accessed, whether data was downloaded, or the identity of the hacker. Reuters could not establish any overlap between the affected data and the Epstein documents published earlier this year or those still under wraps.
Hacker Interaction and FBI Response
In a statement to FBI investigators, Spivack claimed he was being made a scapegoat for the intrusion, blaming conflicting bureau policies and faulty IT guidance. The person familiar with the breach said the foreign hacker did not appear to realize they had penetrated a law enforcement server. Upon discovering child abuse images, the hacker expressed disgust and left a message threatening to report the owner to the FBI.
To defuse the situation, FBI officials convinced the hacker of their identity by having them join a video chat where agents flashed their law enforcement credentials. Reuters could not determine the hacker's identity, country of operation, actions taken with the accessed material, or any efforts to identify or punish them for the breach.
Context and Ongoing Secrecy
The breach was initially reported by CNN and Reuters on February 17, 2023, with the connection to Epstein materials later made by the French magazine Marianne. Epstein, a longtime associate of President Donald Trump, had pleaded guilty in 2008 to prostitution charges involving an underage girl. The legally mandated publication of Justice Department documents has exposed Epstein's ties to prominent figures in politics, finance, academia, and business, triggering global investigations.
Despite a law mandating full release last year, many documents remain heavily redacted or secret. The Trump administration cites concerns over compromising victims' identities or jeopardizing ongoing investigations as reasons for withholding material. Spivack and other FBI agents involved did not return messages seeking comment, and Reuters was unable to reach his lawyer, Richard J. Roberson, Jr.
