Jun 6, 2017

How the FBI got to Reality Winner, the alleged NSA docs leaker

Reality Winner / Facebook

A government contractor allegedly printed and leaked a classified NSA document on Russian meddling in the U.S. election to The Intercept. Reality Winner, the contractor, was arrested Saturday by the FBI.

An affidavit filed in federal court in Georgia on Monday alleged that Winner "printed and improperly removed classified intelligence reporting, which contained classified national defense information from an intelligence community agency, and unlawfully retained it."

Now she faces up to 10 years in prison.

How it happened:

  • Feb. 13: Winner, a contractor with Pluribus International Corporation is assigned to a U.S. government agency facility in Georgia, at which point she is given top security clearance.
  • May 5: An NSA report detailed that Russian military intelligence carried out a cyber attack on U.S. voting software and infrastructure in the days leading up to the November election, according The Intercept.
  • May 9: Winner accessed the classified report by searching the NSA's system and printed it. She mailed the report to The Intercept a few days later. (CNN)
  • May 30: The Intercept contacted the U.S. government "likely through the NSA" to verify the document's authenticity. Government officials confirmed the document was classified "at the top secret level." (ABC)
  • June 1: The NSA informed the FBI of the leak, and the FBI launched its investigation. That same day, another government contractor approached the NSA, and said he was independently approached by a reporter from The Intercept to verify the documents. He told the agency that the documents had originally been mailed and were postmarked "Augusta, Georgia" — Winner's home. (WaPo)
  • Early June: Authorities identified several details in the scanned copy of the report that point to Winner. Creases on the document indicated that it had been printed and transported by hand, and the NSA's internal audit revealed that six people had printed out the report. Of the six, only Winner had been in email contact with The Intercept. (Quartz)
  • June 3: Winner is arrested and questioned at her home in Georgia where she admits to obtaining and leaking the document. (WaPo)
  • June 5: The Intercept leaked the report, and, one hour later, the FBI announced that a suspect was in custody. (Quartz)

Critics have railed against The Intercept for exposing their source by publishing a redacted version of the leaked report. Although The Intercept never revealed Winner's identity — the company claimed in a statement Tuesday they still have "no knowledge of the identity of the person who provided us with the document" — surveillance and privacy reporter Barton Gellman tweeted that The Intercept "made egregious mistakes that doomed its source. The FBI affidavit spells them out."

  • The Intercept's mistakes, as detailed by Gellman: "It handed USG a color copy of original doc & told a clearance-holding contractor the doc was mailed from Augusta. Where source lives... When reproducing online, either retype or take tech steps to strip metadata and identifying micro-images. Normal people don't know all this, but journalists should. And @theintercept does. Has world class experts in @headhntr and @micahflee. Which makes it hard to accept this catastrophic failure of source protection. Reporters & editors didn't consult experts right at hand."
  • How the NSA was able to find Winner, as detailed by blogger Rob Graham: The document she gave to the Intercept contained nearly invisible yellow "tracking dots" that showed "exactly when and where documents, any document, is printed." (Errata Security Blog)
  • The Intercept's defense: The Intercept released a statement on the allegations against Winner: "The U.S. government has told news organizations that Winner was that individual... While the FBI's allegations against Winner have been made public through the release of an affidavit and search warrant... it is important to keep in mind that these documents contain unproven assertions and speculation designed to serve the government's agenda and as such warrant skepticism. Winner faces allegations that have not been proven. The same is true of the FBI's claims about how it came to arrest Winner."

Go deeper

Cuomo: Trump's mandatory quarantine comments "really panicked people"

New York Gov. Andrew Cuomo said in a press conference Sunday that President Donald Trump's unexpected Saturday announcement of a possible "short-term" quarantine of New York, New Jersey and parts of Connecticut to curb the spread of the coronavirus "really panicked people."

Why it matters: Though Trump ruled out the mandatory quarantine later that day, Cuomo said people still called "all night long" asking about the comments and many likely fled the New York area — possibly spreading the virus further.

Go deeperArrow15 mins ago - Health

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 1 p.m. ET: 691,867 — Total deaths: 32,988 — Total recoveries: 146,613.
  2. U.S.: Leads the world in cases. Total confirmed cases as of 1 p.m. ET: 125,433 — Total deaths: 2,201 — Total recoveries: 2,612.
  3. Federal government latest: The first federal prisoner to die from coronavirus was reported from a correctional facility in Louisiana on Sunday.
  4. Public health updates: Fauci says 100,000 to 200,000 Americans could die from virus.
  5. State updates: Louisiana governor says state is on track to exceed ventilator capacity by end of this week.
  6. World updates: Italy reported 756 new deaths, bringing its total 10,779
  7. What should I do? Answers about the virus from Axios expertsWhat to know about social distancingQ&A: Minimizing your coronavirus risk
  8. Other resources: CDC on how to avoid the virus, what to do if you get it.

Subscribe to Mike Allen's Axios AM to follow our coronavirus coverage each morning from your inbox.

U.S. coronavirus updates: Fauci suggests death toll could top 100,000

Data: The Center for Systems Science and Engineering at Johns Hopkins; Map: Andrew Witherspoon/Axios

Anthony Fauci, director of the National Institute of Allergy and Infectious Diseases, said on CNN Sunday that models suggest COVID-19 will infect millions of Americans and could kill 100,000–200,000, though he stressed that the projections are "such a moving target."

The big picture: With more than 121,000 people infected, the U.S. has the most COVID-19 cases in the world, exceeding China and Italy, per data from Johns Hopkins. A second wave of American cities, including Boston, Detroit, New Orleans and Philadelphia, reported influxes of cases on Saturday.

Go deeperArrowUpdated 1 hour ago - Health