The Atlanta Journal-Constitution
Answers to your questions about the case.
Arrested contractor spoke with Perdue staffers in February.
Monday’s arrest of a 25-year-old federal contractor charged with allegedly leaking top-secret information has led to several questions about how it all happened.
Reality Leigh Winner, who worked in Augusta, was charged with allegedly leaking top-secret National Security Agency documents to the media.
Her arrest came as The Intercept published a story about Russia’s interference in last year’s presidential election.
According to The Intercept, the NSA report says Russian military intelligence officials executed a cyberattack on a U.S. voting software supplier and sent spear-phishing emails to more than 100 local election officials days before the election.
Here’s what we know so far:
Q: What is Pluribus?
A: Winner worked as a contractor for Pluribus International Corporation at a U.S. government facility.
The company’s website appeared to be down Tuesday, but internet archives have a recent version saved. The site says the company, founded in 2004, is based in Alexandria, Virginia, and specializes in “high quality analytical, operational, engineering and program management support” to the U.S. government.
Pluribus supports its clients with contractors at locations across the country, in Europe and in Asia, the site says. It offers contractors with expertise in translation, intelligence, counterintelligence and counterterrorism.
The company, which reports $100 million annual revenue, bills itself as a small business, “which enables us to provide dedicated and responsive support to our customers.”
Winner worked at the company almost four months and had a Top Secret security clearance.
Q: What is The Intercept, the website that published leaked NSA report?
A: The Intercept is an online publication focused on national security and surveillance. It was founded in 2014 by journalists Glenn Greenwald, Laura Poitras and Jeremy Scahill. Poitras and Greenwald had previously published stories in The Guardian based on confidential information leaked by NSA whistleblower Edward Snowden.
The Intercept was started partially as a platform for more reporting based on Snowden’s leaks. The site has since expanded to reporting on American military drone strike programs, climate change and technology.
Q: What is spear-phishing, Russia’s alleged voter hacking technique?
A: Spear-phishing is a type of cyberattack, similar to phishing, but targeted toward a specific individual or entity, according to The Associated Press. Compare it to phishing, which is a broader form of online fraud that aims to steal things like credit card numbers, Social Security numbers, user IDs and passwords.
Spear-phishing often uses email to get personal credentials such as login info or other sensitive materials.
Q: How was the link revealed?
A: A search warrant filed in federal court in Georgia shows it took only a few days for investigators to target Winner as the alleged source of the leak.
On May 30, The Intercept showed authorities the printed top-secret documents and asked for comment. An internal audit showed that six people, including Winner, had printed out the materials.
Investigators said they searched her computer and found that she had emailed The Intercept in March from a personal account asking for transcripts of a podcast. The computer review also showed that on May 9 she searched the NSA’s classified system and found the report, which she printed that day. The NSA told the FBI about the leak on June 1. FBI agents staked out Winner’s house in Augusta the next day. She was arrested Saturday and admitted to leaking the document.
Q: How was Georgia affected by election probing mentioned in the leaked NSA report?
A: According to the state officials, it wasn’t.
Russia’s interference detailed in the report came after the U.S. Homeland Security Department in Sep- tember warned of unidentified hackers possibly targeting voter registration systems in more than 20 states, not including Georgia, before the presidential election.
Georgia’s Secretary of State office conducts its own testing and scanning of its voter systems using house staff and private vendors. It contracts with a security vendor to block and report threats, and a backup of the statewide voter registration system is updated every few seconds.
Q: What type of access did Winner have to Georgia officials?
A: Months before her arrest, Winner met with members of U.S. Sen. David Perdue’s staff. She posted a selfie outside the senator’s Atlanta office on Valentine’s Day.
A Perdue spokeswoman confirmed Tuesday that the meeting was to discuss “environmental issues.” The office does not ask about employment in routine meetings with constituents, and Winner’s work as a federal contractor didn’t come up.
In a social post, Winner said she told Perdue staffers that senators should “not be afraid to directly state when our president or his Cabinet tell outright lies.” She said her suggestion was “well heard.”