Iranian Hackers Say They Have 100GB Of Trump Emails

In a significant escalation of cyber warfare, a group of Iranian hackers operating under the pseudonym “Robert” has made an audacious claim: they possess a staggering 100 gigabytes of sensitive emails allegedly stolen from the inner circle of former President Donald Trump. This purported data breach targets high-profile figures, including White House Chief of Staff Susie Wiles, Trump lawyer Lindsey Halligan, Trump adviser Roger Stone, and even adult film star-turned-Trump antagonist Stormy Daniels. The hackers have indicated their intention to either leak or sell this massive trove, a declaration that has swiftly triggered alarm and a varied response from U.S. officials regarding the implications for national security and cybersecurity.

The U.S. government’s reaction to “Robert’s” claims has been notably bifurcated. While Attorney General Pam Bondi condemned the incident as an “unconscionable cyber-attack,” and FBI Director Kash Patel vowed full investigation and prosecution for anyone involved in breaches of national security, other agencies have adopted a more skeptical stance. The Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Homeland Security (DHS) have largely dismissed the alleged hack as mere “digital propaganda” and a “calculated smear campaign.” Their unified statement suggests this is a deliberate effort to discredit Donald Trump and his associates, rather than a genuine security compromise, adding a layer of complexity to understanding the true nature of the threat.

The “Robert” group is not new to the scene of political interference; their presence first became known during the final months of the 2024 presidential campaign. At that time, they claimed to have breached the email accounts of several Trump allies, including Susie Wiles, and subsequently distributed a batch of emails to journalists. Reuters was able to authenticate some of this previously leaked material, notably an email that appeared to detail a financial arrangement between Donald Trump and lawyers for Robert F. Kennedy Jr., who later became Trump’s health secretary. Other documents reportedly included campaign communications and discussions regarding settlement negotiations with Stormy Daniels, underscoring the potential sensitivity and political leverage of such information.

The identity and motivations behind the “Robert” operation have been a subject of intense scrutiny. A September 2024 indictment from the U.S. Justice Department formally alleged that Iran’s Revolutionary Guards were behind the “Robert” hacking activities, directly linking the group to state-sponsored malicious cyber acts. Intriguingly, after Trump’s election victory, “Robert” had informed Reuters that no further leaks were planned, even declaring “I am retired, man” as recently as May. However, communication from the group resumed abruptly following a recent 12-day air war between Israel and Iran, which culminated in U.S. bombing of Iranian nuclear sites, suggesting a direct retaliatory motive for their renewed digital offensive.

This resurgence of activity from the “Robert” group, particularly after a significant military escalation, lends credence to the analysis of experts like Frederick Kagan, a scholar at the American Enterprise Institute. Kagan suggests that this renewed Iranian hacking effort could be a calculated move by Iranian intelligence to seek retaliation through “asymmetric” means, those that are unlikely to provoke further U.S. or Israeli military action. Leaking potentially damaging emails, while disruptive and embarrassing, falls within this scope, allowing Iran to exert pressure and exact a form of revenge without triggering another conventional military confrontation. This strategy highlights the evolving landscape of international conflict, where cybersecurity is a key battleground.

The broader context of American-Iranian relations further illuminates the significance of these alleged cyber incursions. Bilateral ties have reached new lows over the past year, marked by escalating tensions and reports of alleged Iranian plots, including attempts to assassinate Donald Trump, all aimed at provoking a direct confrontation. Despite the current conflict, Iranian hackers had maintained a relatively low profile during the recent air war. However, U.S. cyber officials have consistently warned that American companies and critical infrastructure operators remain at significant risk from ongoing Iranian operations, underscoring the pervasive nature of these threats to U.S. national security and digital resilience.

The claims by “Robert” underscore the persistent and evolving threat posed by state-sponsored cyber actors and the blurred lines between legitimate cybersecurity concerns and strategic disinformation campaigns. While U.S. officials debate the veracity and intent behind the 100GB email claims, the incident serves as a stark reminder of the ongoing digital skirmishes in the geopolitical arena. The potential leakage or sale of such a massive data breach, regardless of its authenticity, could have significant political ramifications, further complicating an already fraught relationship between the U.S. and Iran and raising serious questions about the vulnerability of high-profile individuals to sophisticated Iranian hacking operations.