Iranian Hackers Targeted Trump's Inner Circle in Audacious Election Interference Campaign

Sophisticated cyber operation stole confidential materials from Trump's 2024 campaign and advisors

Mar. 28, 2026 at 11:50am

Got story updates? Submit your updates here. ›

Federal prosecutors have indicted three Iranian Revolutionary Guard cyber actors for executing a coordinated digital assault on the 2024 U.S. presidential election. The hackers, operating under the alias 'Robert', stole confidential materials from Donald Trump's campaign and the personal accounts of his closest advisors in a calculated effort to influence the outcome of the race.

Why it matters

This sophisticated state-sponsored hacking campaign represents a serious threat to American democracy, exposing vulnerabilities in political campaigns and the broader cybersecurity landscape. The operation's scale and precision, as well as Iran's history of election interference, underscore the need for robust public-private partnerships and enhanced defensive measures to safeguard the integrity of future elections.

The details

The hackers employed classic phishing techniques, posing as legitimate tech support from Microsoft and Google to gain access to WhatsApp accounts belonging to key Trump associates like Susie Wiles, Roger Stone, and attorney Lindsey Halligan. Between late June and early July 2024, the stolen campaign documents were anonymously sent to Biden campaign associates, though the Harris team denied any direct contact with the hackers.

  • In late June and early July 2024, the stolen Trump campaign documents began arriving in the personal email inboxes of Biden campaign associates.
  • In September 2024, the Justice Department indicted three unnamed IRGC cyber actors for the hack-and-leak operation.

The players

Robert

A digital alias used by three Iranian Revolutionary Guard cyber actors to mask the Iranian government's involvement in the election interference campaign.

Susie Wiles

A key advisor to Donald Trump's 2024 presidential campaign, whose private communications were compromised in the Iranian hacking operation.

Roger Stone

A longtime Trump confidant whose personal accounts were targeted by the Iranian hackers.

Lindsey Halligan

An attorney who was part of Trump's inner circle, and whose communications were stolen by the Iranian cyber actors.

Chris Krebs

The former director of the Cybersecurity and Infrastructure Security Agency (CISA), who confirmed Iran's multi-pronged efforts to target Trump in the 2024 election.

Got photos? Submit your photos here. ›

What’s next

The FBI's ongoing investigation into the Iranian hackers has intensified after the group reversed their 2025 claim of 'retirement' and threatened to release additional stolen materials. Attorney General Pam Bondi has vowed to protect officials and prosecute the perpetrators.

The takeaway

This sophisticated Iranian hacking campaign represents a serious threat to American democracy, exposing vulnerabilities in political campaigns and the broader cybersecurity landscape. Maintaining public-private partnerships and expanding defensive measures across campaigns and government communications networks will be crucial to safeguarding the integrity of future elections.