Prime Only Members-Only Article
Reporter's notebook

Decoding The Unnamed Entities In Mueller’s Russian Hacking Indictment

TPM Illustration
July 13, 2018 4:34 p.m.

The special counsel on Friday indicted 12 Russian intelligence officers for hacking and disseminating information from Democratic targets during the 2016 election. Here and there amid the 29-page document are names and companies that are referred to in shorthand. We do our best to decode them for you here, in the order in which they appear.

“Organization 1”: WikiLeaks

This one is pretty straightforward. The indictment describes “Organization 1” as a group that maintains a website that has “previously posted documents stolen from U.S. persons, entities, and the U.S. government.”

“DCCC Employee 1”: Not yet known

The Democratic Congressional Campaign Committee whose email account was first successfully hacked by Russia on April 12, 2016.

“Company 1”: Crowdstrike

The indictment notes the Democratic National Committee and DCCC hired “Company 1” to investigate the hacking of their servers by suspected Russian operatives. The DNC and DCCC spoke openly during the 2016 campaign about hiring Crowdstrike, a U.S. cybersecurity company, to carry out this work.

“Candidate for the U.S. Congress” who asked for and received stolen documents about his/her opponent: Not yet known

“Then-registered state lobbyist and online source of political news”: Florida GOP operative Aaron Nevins

Nevins, a former lobbyist who maintained the blog, told the Wall Street Journal about his successful attempts to solicit information from “Guccifer 2.0” in August 2016. Nevins said he shared the documents about Democrats’ get-out-the-vote strategy on the site pseudonymously.

“A reporter” who received and wrote about stolen documents on the Black Lives Matter movement: Lee Stranahan

Stranahan, then at Breitbart and now at Sputnik, has openly discussed his communications with “Guccifer 2.0.” National security blogger Marcy Wheeler has shared what she said are Twitter DMs between Stranahan and Guccifer discussing the documents and mocking the notion that Russia could be behind the hacks.

“A person who was in regular contact with senior members of the presidential campaign of Donald J. Trump”: Roger Stone

Stone, too, has admitted to interacting with “Guccifer” about the hacked documents. He posted screenshots of their DM exchange on his personal blog last year.

“U.S. reporter” who received stolen emails from “Hillary Clinton’s staff” on June 27, 2016: The Smoking Gun

The news site tweeted on Friday that they were the “reporter” in the indictment who received “the password access to a nonpublic, password-protected website” that contained emails stolen from one of Clinton’s staffers, referred to as “Victim 1.”

“Victim 1”: Sarah Hamilton, a Clinton press volunteer based in Chicago

The Smoking Gun, which first reported on Hamilton’s email breach back in June 2016, affirmed today that she was the individual whose emails they first received.

“SBOE 1”: Not yet known

The indictment claims an unnamed state board of elections was compromised by the Russian intelligence officers in July 2016. Information for 500,000 voters was stolen.

“Vendor 1”: VR Systems

Mueller’s indictment says the hackers broke into the computer system of a U.S. vendor that supplied software used to verify voter registration information. Though the Florida-based e-voting vendor denied any breach, The Intercept reported that the facts laid out in the indictment indicate that it did in fact fall victim to the Russians’ 2016 spear-fishing campaign.

Prime Only Members-Only Article
To access more exclusive analysis and reporting from TPM’s award-winning staff along with:
The Hive Member Forum
Members-Only Newsletter
Exclusive RSS Feeds
View All Options
Masthead Masthead
Founder & Editor-in-Chief:
Executive Editor:
Managing Editor:
Senior Editor:
Special Projects Editor:
Editor at Large:
General Counsel:
Head of Product:
Director of Technology:
Associate Publisher:
Front-End Developer:
Senior Designer: