Cyber Incident Victim: WikiLeaks
Date:
Nov 2016
Location:
United States of America
Summary
WikiLeaks experienced a targeted distributed denial-of-service (DDoS) attack following its publication of over 8,000 Democratic National Committee emails, disrupting its servers and email publication systems shortly before the US presidential election. The organization had previously released tens of thousands of emails from a Clinton campaign aide, revealing internal party communications that indicated preferential treatment toward Hillary Clinton over Bernie Sanders during the primary season. Julian Assange attributed the cyberattacks to "forces aligned with the DC establishment," while analysts suggested potential Russian involvement through the Guccifer 2.0 persona, though both WikiLeaks and Russian authorities denied participation in the email breaches.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On November 7, 2016, WikiLeaks reported experiencing a targeted distributed denial-of-service (DDoS) cyberattack against its email publication servers. This occurred less than 24 hours after the organization published over 8,000 additional emails from the Democratic National Committee (DNC), marking the second major release of DNC-related materials ahead of the U.S. presidential election. The attack caused WikiLeaks.org to experience brief downtime, which the organization noted was unusual. WikiLeaks alerted its four million Twitter followers about the incident, stating it was investigating the disruption and later confirming the servers were under active attack following the #DNCLeak2 publication. Julian Assange attributed the cyberattack to "forces aligned with the DC establishment," alleging they employed both DDoS and attempted hacking attacks to disrupt operations. The incident unfolded amid heightened tensions surrounding WikiLeaks' election-related disclosures, which included over 50,000 emails from Hillary Clinton aide John Podesta released earlier that election cycle.

The newly published DNC emails contained internal communications showing Democratic Party staffers preparing interview questions for a CNN segment with Donald Trump in April 2016, along with discussions revealing institutional favoritism toward Clinton over Bernie Sanders during primary elections. While Guccifer 2.0 claimed responsibility for providing hacked DNC data to WikiLeaks, cybersecurity analysts assessed this persona likely served as a front for Russian intelligence operations. Both WikiLeaks and the Russian government denied involvement in the original DNC breaches. The Clinton campaign responded to the publication through communications director Jennifer Palmieri, who tweeted a warning about potential fake leaks days before the election, prompting a public rebuttal from WikiLeaks accusing the campaign of spreading falsehoods. The cyberattack temporarily disrupted access to WikiLeaks' publication infrastructure but did not prevent continued dissemination of the leaked materials during the critical pre-election period.
