The FBI's Epstein files were compromised by a foreign hacker in 2023, according to sources and papers

A foreign hacker reportedly gained access to files linked to the investigation of late financier and convicted sex offender Jeffrey Epstein during a cyber breach at the Federal Bureau of Investigation’s New York Field Office in 2023, according to a source familiar with the matter and newly published documents from the United States Department of Justice reviewed by Reuters.

The details about who accessed the server — including allegations that a foreign hacker was involved — have not been previously reported. In a statement, the FBI described the event as an “isolated” cyber incident and said it had taken steps to block the malicious actor and repair the affected network. The agency added that the investigation into the incident remains ongoing and declined to provide additional comments.

According to the source, the breach appears to have been carried out by an individual cybercriminal rather than a state-backed hacking group. However, experts say the incident highlights the intelligence value of materials connected to the Epstein case, which has drawn global attention due to Epstein’s links to prominent figures in politics, finance, academia and business.

Jon Lindsay, who studies emerging technology and global security at the Georgia Institute of Technology, said intelligence agencies could see such files as valuable targets. He suggested that foreign actors seeking compromising information might naturally be interested in materials related to Epstein.

The breach itself was initially reported by Reuters and CNN in February, while the connection to Epstein-related materials was later highlighted by the French magazine Marianne.

Epstein, who had connections with numerous powerful figures including former U.S. President Donald Trump, pleaded guilty in 2008 to prostitution-related charges, including soliciting an underage girl. In 2019, after being arrested again on federal charges of sex trafficking minors, he was found dead in his jail cell in what authorities ruled a suicide.

According to documents released earlier this year, the breach occurred on February 12, 2023, at a server within the Child Exploitation Forensic Lab located at the FBI’s New York Field Office. The server had reportedly been left vulnerable by Special Agent Aaron Spivack while he was attempting to navigate complex internal procedures for handling digital evidence.

A timeline written by Spivack said the breach was discovered the following day when he logged onto his computer and found a text file warning that the network had been compromised. Subsequent checks revealed unusual activity on the server, including searches through files connected to the Epstein investigation.

The documents do not specify which files were accessed or whether the hacker downloaded any information. It also remains unclear whether the accessed data overlaps with the Epstein-related documents that have been released publicly or those that remain classified.

Spivack told investigators he believed he was being made a scapegoat for the incident, arguing that conflicting internal policies and unclear IT guidance contributed to the security lapse. Reuters could not determine the outcome of the FBI’s internal investigation into the matter.

According to the source, the hacker apparently did not initially realize they had breached a law enforcement server. After encountering images of child abuse stored as evidence, the hacker reportedly left a message expressing disgust and threatening to report the owner of the system to authorities.

FBI officials were said to have defused the situation by convincing the hacker that the system belonged to the FBI. According to the source, they arranged a video call with the hacker during which agents displayed their law enforcement credentials to prove their identity.

It remains unclear who carried out the intrusion, from which country it originated, whether any data was taken, or whether authorities later attempted to identify or prosecute the individual responsible.

Many of the Justice Department documents related to the Epstein case remain heavily redacted or undisclosed despite a law requiring their release last year. The administration of Donald Trump has said some materials are being withheld to protect victims’ identities and avoid jeopardising ongoing investigations.