Foreign Hacker Breached FBI Server, Accessed Epstein Investigation Files in 2023
A foreign hacker reportedly gained access to files connected to the investigation of late financier and convicted sex offender Jeffrey Epstein after breaching a server at the Federal Bureau of Investigation (FBI) in 2023, according to a source familiar with the matter and recently released documents from the United States Department of Justice.
The cyber intrusion occurred at the FBI’s New York Field Office and reportedly exposed files related to the Epstein investigation. Details of the breach, including the involvement of a foreign hacker, have only recently come to light through documents reviewed by Reuters and individuals familiar with the incident.
In a brief statement, the FBI confirmed that it experienced what it described as an isolated “cyber incident.” The bureau said it quickly restricted the intruder’s access and secured the affected network, adding that an investigation into the matter is still ongoing.
Although the source indicated that the individual behind the intrusion appeared to be a cybercriminal rather than an agent acting on behalf of a foreign government, experts say the breach highlights the significant intelligence value of the Epstein files. The documents tied to the disgraced financier have drawn global attention because they reveal links between Epstein and a number of prominent figures in politics, finance, academia, and business.
Cybersecurity and intelligence analysts suggest such files could be highly attractive targets for foreign intelligence services seeking sensitive information or leverage over influential individuals.
Epstein, who maintained connections with powerful individuals including former U.S. President Donald Trump, had previously pleaded guilty in 2008 to prostitution-related charges involving a minor. In 2019, he was arrested again on federal charges related to the sex trafficking of underage girls. He later died in a jail cell in New York, a death officially ruled a suicide.
Documents indicate that the breach occurred on February 12, 2023, when a server at the Child Exploitation Forensic Laboratory in the FBI’s New York office was inadvertently left vulnerable. The issue reportedly arose while Special Agent Aaron Spivack was navigating internal procedures for managing digital evidence.
According to a timeline written by Spivack and included in a cache of Justice Department documents released earlier this year, the intrusion was discovered the following day when he logged into his computer and found a text message warning that the system had been compromised.
Further examination of the server revealed unusual activity, including evidence that the intruder had searched through files connected to the Epstein investigation. However, the documents do not clarify which specific files were accessed or whether any of the information was downloaded.
Investigators also could not confirm whether the breached material overlapped with the batch of Epstein-related documents made public earlier this year or with files that remain classified or heavily redacted.
In his response to FBI investigators, Spivack denied responsibility for the breach and argued that he was being unfairly blamed for the incident. He said inconsistent internal policies and unclear guidance on information technology procedures contributed to the vulnerability that allowed the intrusion.
According to the source familiar with the case, the hacker initially did not realize they had accessed a law enforcement system. The individual reportedly expressed shock after discovering images related to child abuse on the server and left a message threatening to report the device’s owner to authorities.
FBI officials reportedly managed to resolve the situation by communicating with the hacker and convincing them that the server belonged to federal law enforcement. The hacker was eventually asked to join a video call during which agents displayed their official credentials in front of a camera.
Authorities have not disclosed the identity or nationality of the hacker, nor have they confirmed whether the individual was later tracked or prosecuted. It also remains unclear what information, if any, may have been copied during the intrusion.
The breach comes amid ongoing scrutiny of Epstein-related records. Despite a legal requirement for broader disclosure, many documents linked to the investigation have been heavily redacted or withheld. The U.S. government says certain materials remain confidential to protect victims’ identities and avoid compromising ongoing investigations.
Comments are closed.