How The NSA And FBI Tracked Down The Air Force Vet Who Leaked A Top Secret Russia Hacking Report

Gear
Photo via Facebook

By going over printing histories and work computer data, the National Security Agency and the Federal Bureau of Investigation was able to trace a leaked report on the Russia investigation to 25-year-old Air Force veteran and federal contractor Reality Leigh Winner.


On June 3, Winner was arrested on charges of leaking top-secret intelligence about an NSA report on Russia's involvement in the 2016 election to The Intercept.

According to the document, Russian military intelligence launched an attack on at least one U.S. voting-software supplier and sent so-called spear-phishing emails to at least 100 local election officials shortly before the election. It is the strongest public indication so far that Russia interfered in the US election.

The NSA started investigating the leak when, on May 30, a journalist from The Intercept asked the agency to comment on the printed report, which appeared to be folded and creased, theWashington Post reports.

An affidavit of the investigation claims that six people had printed out the document — and Winner was one of them. As a contractor for the NSA with Pluribus International Corporation, Winner held top security clearance.

After searching her work computer, according to the affidavit, NSA and FBI investigators discovered that Winner had emailed the document to The Intercept from her private email, asking for podcast transcripts in the message. Investigators also found that, on May 9, Winner searched the agency's computer system for the classified document and printed it out in the office.

"Because the NSA logs all printing jobs on its printers, it can use this to match up precisely who printed the document," security expert Rob Graham wrote for the blog Errata Security. The printed documents have small yellow dots that help track where any document was printed, he wrote.

WikiLeaks accused the journalists at The Intercept of helping the NSA track Winner down so fast, because they handed over the printed documents.

On June 1, another government contractor told the NSA that a reporter texted him pictures of the document to confirm whether it was real, and that the journalist said the documents were mailed from Augusta, Georgia.

Investigators then found Winner's house in Augusta and arrested her while she was at home. Winner has since admitted to mailing the document and is in jail in advance of her trial.

More from Business Insider:

Construction crews staged material needed for the Santa Teresa Border Wall Replacement project near the Santa Teresa Port of Entry. (U.S. Customs and Border Patrol/Mani Albrecht)

With a legal fight challenge mounting from state governments over the Trump administration's use of a national emergency to construct at the U.S.-Mexico border, the president has kicked his push for the barrier into high gear.

On Wednesday, President Trump tweeted a time-lapse video of wall construction in New Mexico; the next day, he proclaimed that "THE WALL IS UNDER CONSTRUCTION RIGHT NOW"

But there's a big problem: The footage, which was filmed more than five months ago on Sep. 18, 2018, isn't really new wall construction at all, and certainly not part of the ongoing construction of "the wall" that Trump has been haggling with Congress over.

Read More Show Less
(From left to right) Chris Osman, Chris McKinley, Kent Kroeker, and Talon Burton

A group comprised of former U.S. military veterans and security contractors who were detained in Haiti on weapons charges has been brought back to the United States and arrested upon landing, The Miami-Herald reported.

The men — five Americans, two Serbs, and one Haitian — were stopped at a Port-au-Prince police checkpoint on Sunday while riding in two vehicles without license plates, according to police. When questioned, the heavily-armed men allegedly told police they were on a "government mission" before being taken into custody.

Read More Show Less
Army Sgt. Jeremy Seals died on Oct. 31, 2018, following a protracted battle with stomach cancer. His widow, Cheryl Seals is mounting a lawsuit alleging that military care providers missed her husband's cancer. Task & Purpose photo illustration by Aaron Provost

The widow of a soldier whose stomach cancer was allegedly overlooked by Army doctors for four years is mounting a medical malpractice lawsuit against the military, but due to a decades-old legal rule known as the Feres Doctrine, her case will likely be dismissed before it ever goes to trial.

Read More Show Less
The first grenade core was accidentally discovered on Nov. 28, 2018, by Virginia Department of Historic Resources staff examining relics recovered from the Betsy, a British ship scuttled during the last major battle of the Revolutionary War. The grenade's iron jacket had dissolved, but its core of black powder remained potent. Within a month or so, more than two dozen were found. (Virginia Department of Historic Resources via The Virginian-Pilot)

In an uh-oh episode of historic proportions, hand grenades from the last major battle of the Revolutionary War recently and repeatedly scrambled bomb squads in Virginia's capital city.

Wait – they had hand grenades in the Revolutionary War? Indeed. Hollow iron balls, filled with black powder, outfitted with a fuse, then lit and thrown.

And more than two dozen have been sitting in cardboard boxes at the Department of Historic Resources, undetected for 30 years.

Read More Show Less

A Coast Guard lieutenant arrested this week planned to "murder innocent civilians on a scale rarely seen in this country," according to a court filing requesting he be detained until his trial.

Read More Show Less