Alleged Guccifer 2.0 hack of Clinton Foundation raises suspicions

A new posting from the hacker alias Guccifer 2.0 purported to be documents stolen from the Clinton Foundation appears to be a hoax.


Guccifer 2.0 — believed to be a misinformation campaign operated by Russian intelligence — posted an 860-megabyte file on Tuesday afternoon that he claimed was donor information he hacked from Clinton Foundation servers.

A sampling of the posted documents include a spreadsheet of big bank donations, a list of primarily California donors, an outdated spreadsheet of some Republican House members — and a screenshot of files he claimed to have obtained, one of which was titled “Pay to Play.”

But there are a number of red flags that suggest the documents are in fact from a previous hack on the Democratic Congressional Campaign Committee (DCCC), not a new hack on the Clinton Foundation.

A spot check of some of the people on the donor list against FEC filings found that they all lined up with DCCC contributions.

The Clinton Foundation discloses its donors, and many of the alleged donors published by Guccifer 2.0 do not appear to have given to the organization.

One spreadsheet was allegedly created by a Kevin C. McKeon at DCCC in 2009. There was a Kevin McKeon that worked at DCCC at that time.

The Clinton Foundation says it has no evidence it was the victim of an attack — and denied that any of the file folders depicted exist on Foundation systems. 

“We still have no evidence Clinton Foundation systems were breached and have not been notified by law enforcement of an issue,” Clinton Foundation officials said. “None of the folders or files shown are from the Clinton Foundation.”

The hacker or hackers known as Guccifer 2.0 has previously leaked apparently legitimate documents from breaches at the Democratic National Committee (DNC) and the DCCC.

But last month he published a spate of files he claimed were stolen from House Minority Leader Nancy Pelosi (D-Calif.) that in fact appeared to be repurposed from the DCCC hack.

Those documents also appeared to be consistent with what Guccifer 2.0 would have found on the DCCC server. Only one document concerned Pelosi, a “year in review” memo about fundraising numbers — the kinds of donation statistics that would likely be shared with the DCCC.

Guccifer 2.0 claims to be a lone Romanian hacker, but the near totality of the intelligence and security communities take as fact that Guccifer 2.0 is a cover identity for Russian intelligence.

–Joe Uchill, Sylvan Lane and Harper Neidig contributed.

–Updated 5:20 p.m.


Most Popular

Load more


See all Video