Desert Feed | Washington, June 30 — A hacker group allegedly linked to Iran has issued a new warning that it intends to release additional batches of emails stolen from figures close to former U.S. President Donald Trump. The same group previously leaked a set of emails to the media during the run-up to the 2024 presidential election.
Speaking with Reuters via online messaging on Sunday and Monday, the hackers, who identify themselves by the alias “Robert,” claimed they have around 100 gigabytes of sensitive email data. The files reportedly come from several individuals tied closely to Trump, including White House Chief of Staff Susie Wiles, Trump attorney Lindsey Halligan, adviser Roger Stone, and Stormy Daniels, the adult film actress who has had longstanding public legal battles with Trump.
While the hackers hinted at possibly selling the material, they provided no clear information about what the emails contain or when any additional leaks might occur. So far, they have not publicly disclosed their intended timeline or purpose beyond vague references to “broadcasting” the matter.
U.S. Attorney General Pam Bondi condemned the cyber intrusion, calling it “an unconscionable cyber-attack” and a serious threat to national security. The White House and the FBI responded jointly with a statement from FBI Director Kash Patel, who assured the public that the government would “fully investigate and prosecute” anyone involved in breaching national security.
Meanwhile, the Cybersecurity and Infrastructure Security Agency (CISA) dismissed the hacking effort as an orchestrated disinformation campaign. “This is not just a digital intrusion,” the agency said on social media platform X (formerly Twitter). “It is a calculated effort to smear President Trump and damage the reputations of loyal public servants who serve the nation with distinction.”
Representatives for Halligan, Stone, and Daniels did not respond to requests for comment. Iran’s mission to the United Nations also remained silent. The Iranian government has repeatedly denied any involvement in cyber-espionage activities, although U.S. intelligence has previously linked Tehran to various cyber operations.
The pseudonymous hacker “Robert” first came into public view in late 2024, just before the U.S. election, claiming to have breached the email accounts of key Trump allies, including Susie Wiles. The group subsequently distributed a number of leaked documents to journalists.
Among the leaked items verified by Reuters was an email that appeared to detail financial arrangements between Donald Trump and attorneys representing Robert F. Kennedy Jr., who later became Trump’s Health Secretary. Additional material reportedly included internal Trump campaign communications, political discussions concerning Republican candidates, and exchanges involving legal negotiations with Stormy Daniels.
Although the leaks attracted some media coverage at the time, analysts believe they did not significantly impact the outcome of the 2024 election, which Trump went on to win.
In September 2024, the U.S. Department of Justice formally indicted members of Iran’s Revolutionary Guard, accusing them of orchestrating the hacking operation under the “Robert” alias. The hackers themselves did not address those charges in their chats with Reuters.
After Trump’s re-election, “Robert” told reporters that the leaks were over, saying, “I am retired, man.” But the group resurfaced shortly after a 12-day military conflict between Israel and Iran, during which the United States bombed several of Iran’s nuclear facilities. Following that escalation, “Robert” once again contacted Reuters, stating they were now organizing the sale of the stolen emails and asking the media outlet to “broadcast this matter.”
According to Frederick Kagan, a cybersecurity analyst at the American Enterprise Institute, the timing suggests a strategic move by Iran’s cyber operatives to retaliate without provoking direct military consequences. “Given how severely Iran was hit during the conflict, their intelligence agencies are likely being told to use every asymmetric tactic available—especially ones that won’t reignite military escalation,” Kagan explained. “Leaking more emails fits that objective.”
Despite the recent tensions and threats, Iran’s hackers maintained a relatively low profile during the actual military conflict. Still, U.S. cybersecurity officials issued new warnings on Monday, cautioning that critical infrastructure and American companies could still be in Tehran’s cyber crosshairs.
