2023 FBI Server Breach Exposed Epstein Investigation Files in an ‘Isolated Cyber Incident’

Published
Written by:
Lore Apostol
Lore Apostol
Cybersecurity Writer
Key Takeaways
  • Initial Intrusion: A foreign hacker reportedly breached a server at the FBI’s New York Field Office, accessing files related to the Jeffrey Epstein investigation.
  • Point of Entry: The breach occurred in February 2023 at the Child Exploitation Forensic Lab after a server was left vulnerable during digital evidence processing.
  • Official Response: The FBI confirmed an "isolated" cyber incident, stating access was restricted and the network was rectified, with an ongoing investigation.

An FBI server breach led to unauthorized access to sensitive files related to the Jeffrey Epstein investigation. According to reports and recently released Justice Department documents, a foreign hacker infiltrated a server located at the FBI's New York Field Office on February 12, 2023, in an “isolated cyber incident.” 

Foreign Hacker, FBI Intrusion

Further investigation revealed that the unauthorized activity included "combing through certain files pertaining to the Epstein investigation," Reuters first reported. The FBI has officially acknowledged a cybersecurity incident, describing it as "isolated" and confirming that the malicious actor's access was restricted before the network was secured. 

The intrusion happened at the Child Exploitation Forensic Lab when Special Agent Aaron Spivack inadvertently left the server vulnerable while navigating complex procedures for handling digital evidence. The incident was discovered when the agent found a text file on the compromised system, warning that the network had been breached.

While the bureau has stated that an investigation is ongoing, it has not provided details on what specific files were accessed or whether data was exfiltrated. The source familiar with the matter suggested the perpetrator was likely a cybercriminal, not a state-sponsored actor, who was unaware they had accessed a law enforcement server.

Reuters reported that Spivack’s name appears elsewhere in the documents in connection with the Epstein investigation. He said he was being made "a scapegoat for the intrusion" in his statement to FBI investigators and blamed conflicting bureau policies and faulty guidance around information technology.

Implications for Federal Data Security

According to the source, the hacker left a message threatening to turn the device owner over to the FBI for the presence of child abuse images, and FBI officials communicated with the hacker via video chat to de-escalate the situation by proving their law enforcement credentials. 

The data breach raises critical questions about internal FBI protocols for data handling, network security, and the potential for sensitive information to be exposed, even unintentionally, as last week the FBI announced it was investigating suspicious activity on internal networks, which sources linked to wiretaps and the foreign intelligence surveillance system.


For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: