Hacker claims to have breached CIA director's personal email

October 19, 2015 byKen Dilanian
Hacker claims to have breached CIA director's personal email
In this Dec. 11, 2014 fie photo, CIA Director John Brennan listens during a news conference at CIA headquarters in Langley, Va. An anonymous hacker claims to have breached CIA Director John Brennan's personal email account and has posted documents online, including a list of email addresses purportedly from Brennan's contact file. (AP Photo/Pablo Martinez Monsivais, File)

An anonymous hacker claims to have breached CIA Director John Brennan's personal email account and has posted documents online, including a list of email addresses purportedly from Brennan's contact file.

The CIA said it referred the matter to the proper authorities, but would not comment further.

The hacker spoke to the New York Post, which described him in an article published Sunday as "a stoner high school student," motivated by his opposition to U.S. foreign policy and support for Palestinians. His Twitter account, @phphax, includes links to files that he says are Brennan's contact list, a log of phone calls by then-CIA deputy director Avril Haines, and other documents.

The Post said he didn't reveal his name or where he lived.

The hacker also claimed to have breached a Comcast account belonging to Homeland Security Secretary Jeh Johnson, and released what appeared to be personal information.

One document purporting to come from Brennan's AOL email account contains a spreadsheet of people, including senior intelligence officials, along with their pension identification numbers, although the hacker redacted the numbers in the version he posted on Twitter. It's unclear why Brennan would have stored such a document in his private email account. Based on the titles, the document appears to date from 2009 or before.

When people visit the White House and other secure facilities, they are required to supply their Social Security numbers. Brennan could have been forwarding a list of invitees to the White House when he was President Barack Obama's counter terrorism adviser, the job he held before he became CIA director in 2013.

Security experts advise people not to email personal identification numbers, and some companies have software that automatically blocks an email if it detects characters in the format of these numbers. ity number.

The hacker told the Post he had obtained a 47-page version of Brennan's application for a security clearance, known as an SF86. That document—millions of which were stolen from the federal personnel office last year by hackers linked to China—contains detailed information about past jobs, foreign contacts, finances and other sensitive personal details.

No such document appears to be posted on the hacker's Twitter account, but it's not clear whether the hacker posted it elsewhere.

Explore further: CIA director: We didn't hack Senate computers

Related Stories

CIA director reverses himself on Senate spying

August 1, 2014

For months, CIA Director John Brennan had stood firm in his insistence that the CIA had little to be ashamed of after searching the computers of the Senate Intelligence Committee. His defiant posture quickly collapsed after ...

CIA joins Twitter, Facebook

June 6, 2014

The secretive US spy agency joined the world of social media Friday, and quickly had the Twitterverse talking.

Brazil hacker posts alleged data of ex- president

January 10, 2013

A hacker has posted what appears to be private information of former president Luiz Inacio Lula da Silva on the Internet to protest a major corruption scandal which he says "will end in nothing."

Q&A: Ashley Madison hack only latest high-profile breach

August 20, 2015

The data breach affecting customers of the Ashley Madison website may be salacious, embarrassing or even ruinous for those involved. But it's only the latest, and not the biggest, high-profile breach of customer or employee ...

Recommended for you

World's biggest battery in Australia to trump Musk's

March 16, 2018

British billionaire businessman Sanjeev Gupta will built the world's biggest battery in South Australia, officials said Friday, overtaking US star entrepreneur Elon Musk's project in the same state last year.

1 in 3 Michigan workers tested opened fake 'phishing' email

March 16, 2018

Michigan auditors who conducted a fake "phishing" attack on 5,000 randomly selected state employees said Friday that nearly one-third opened the email, a quarter clicked on the link and almost one-fifth entered their user ...

Origami-inspired self-locking foldable robotic arm

March 15, 2018

A research team of Seoul National University led by Professor Kyu-Jin Cho has developed an origami-inspired robotic arm that is foldable, self-assembling and also highly-rigid. (The researchers include Suk-Jun Kim, Dae-Young ...

1 comment

Adjust slider to filter visible comments by rank

Display comments: newest first

not rated yet Oct 19, 2015
I bet his password reset question was "What elementary school did you attend?"

Which the hacker could most likely get by googling his name.

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.