A hacker group believed to be connected to Iran’s Revolutionary Guards has threatened to release or sell a massive trove of emails allegedly stolen from close aides of former U.S. President Donald Trump.
Known by the alias “Robert,” the group told Reuters in online messages that they had accessed around 100 gigabytes of emails from Trump’s inner circle.
Those allegedly targeted include White House Chief of Staff Susie Wiles, Trump lawyer Lindsey Halligan, long-time adviser Roger Stone, and adult film star Stormy Daniels, who famously clashed with Trump in past legal battles.
The hackers said they were considering selling the material but didn’t disclose its content or their full plans.
In 2024, the same group leaked sensitive emails during the U.S. presidential campaign, including one message that appeared to reveal a financial agreement between Trump and lawyers for Robert F. Kennedy Jr., now serving as Trump’s health secretary.
U.S. Attorney General Pam Bondi called the breach “an unconscionable cyber-attack.”
FBI Director Kash Patel issued a warning that anyone linked to national security intrusions would be prosecuted “to the fullest extent of the law.”
CISA, the federal cyberdefense agency, downplayed the breach as “digital propaganda,” accusing Iran of targeting Trump’s team in a calculated smear campaign.
Iran’s mission to the United Nations declined to comment, though Tehran has previously denied engaging in cyberespionage.
Neither Halligan, Stone, nor a spokesperson for Daniels responded to media requests.
The hacker group had claimed to retire in May, telling Reuters “I am retired, man.”
But their latest activity comes after a 12-day military conflict between Iran and Israel, during which the U.S. bombed Iranian nuclear sites.
Intelligence experts believe the renewed cyber activity may be Iran’s way of retaliating without provoking direct military confrontation.
American cybersecurity officials have warned that Iran may still target U.S. infrastructure and private companies in follow-up operations.
For now, the group known as Robert says they are organizing the sale of the stolen emails and want international media coverage to amplify their message.