9 April 2023

New Batch of Classified Documents Appears on Social Media Sites

Helene Cooper, Julian E. Barnes, Eric Schmitt and Thomas Gibbons-Neff

WASHINGTON — A new batch of classified documents that appear to detail American national security secrets from Ukraine to the Middle East to China surfaced on social media sites on Friday, alarming the Pentagon and adding turmoil to a situation that seemed to have caught the Biden administration off guard.

The scale of the leak — analysts say more than 100 documents may have been obtained — along with the sensitivity of the documents themselves, could be hugely damaging, U.S. officials said. A senior intelligence official called the leak “a nightmare for the Five Eyes,” in a reference to the United States, Britain, Australia, New Zealand and Canada, the so-called Five Eyes nations that broadly share intelligence.

The latest documents were found on Twitter and other sites on Friday, a day after senior Biden administration officials said they were investigating a potential leak of classified Ukrainian war plans, include an alarming assessment of Ukraine’s faltering air defense capabilities. One slide, dated Feb. 23, is labeled “Secret/NoForn,” meaning it was not meant to be shared with foreign countries.

The Justice Department said it had opened an investigation into the leaks and was in communication with the Defense Department but declined to comment further.

Mick Mulroy, a former senior Pentagon official, said the leak of the classified documents represents “a significant breach in security” that could hinder Ukrainian military planning. “As many of these were pictures of documents, it appears that it was a deliberate leak done by someone that wished to damage the Ukraine, U.S., and NATO efforts,” he said.

One analyst described what has emerged so far as the “tip of the iceberg.”

Early Friday, senior national security officials dealing with the initial leak, which was first reported by The New York Times, said a new worry had arisen: Was that information the only intelligence that was leaked?

By Friday afternoon, they had their answer. Even as officials at the Pentagon and national security agencies were investigating the source of documents that had appeared on Twitter and on Telegram, another surfaced on 4chan, an anonymous, fringe message board. The 4chan document is a map that purports to show the status of the war in the eastern Ukrainian city of Bakhmut, the scene of a fierce, monthslong battle.

But the leaked documents appear to go well beyond highly classified material on Ukraine war plans. Security analysts who have reviewed the documents tumbling onto social media sites say the increasing trove also includes sensitive briefing slides on China, the Indo-Pacific military theater, the Middle East and terrorism.

On Friday, a senior Ukrainian official said that the leak appeared to be a Russian ploy to discredit a counteroffensive. Credit...Mauricio Lima for The New York Times


The Pentagon said in a statement on Thursday that the Defense Department was looking into the matter. On Friday, as the disclosures widened, department officials said they had nothing to add. But privately, officials in several national security agencies acknowledged both a rush to find the source of the leaks and a potential for what one official said could be a steady drip of classified information posted on sites.

The documents on Ukraine’s military appear as photographs of charts of anticipated weapons deliveries, troop and battalion strengths, and other plans. Pentagon officials acknowledge that they are legitimate Defense Department documents, but the copies appear to have been altered in certain parts from their original format. The modified versions, for example, overstate American estimates of Ukrainian war dead and underestimate estimates of Russian troops killed.

The State of the WarWar Plans Leaked: The Pentagon is investigating a leak of classified documents detailing secret American and NATO plans for building up the Ukrainian military ahead of a planned offensive against Russian troops. The documents were recently posted on social media.
Macron in China: President Emmanuel Macron of France and Xi Jinping, China’s top leader, called for a rapid return to peace talks to end the war in Ukraine during a visit by Macron to China.
Finland’s Entry to NATO: The Nordic country officially became the military alliance’s 31st member, in what amounts to a strategic defeat for President Vladimir Putin of Russia.
Drone Warfare: Using aerial drones to spot the enemy and direct artillery fire has become a staple of war for Ukraine and Russia, especially in the fiercely contested city of Bakhmut.

On Friday, Ukrainian officials and pro-war Russian bloggers suggested the leak was part of a disinformation effort by the other side, timed to influence Ukraine’s possible spring offensive to reclaim territory in the east and the south of the country.

A senior Ukrainian official said that the leak appeared to be a Russian ploy to discredit a counteroffensive. And the Russian bloggers warned against trusting any of the information, which one blogger said could be the work of “Western intelligence in order to mislead our command.”

Behind closed doors, chagrined national security officials were trying to find the culprit. One official said it was likely that the documents did not come from Ukrainian officials, because they did not have access to the specific plans, which bear the imprint of the offices of the Pentagon’s Joint Staff. A second official said that determining how the documents were leaked would start with identifying which officials had access to them.

The first tranche of documents appeared to have been posted in early March on Discord, a social media chat platform popular with video gamers, according to Aric Toler, an analyst at Bellingcat, the Dutch investigative site.

In Ukraine, Lt. Col. Yurii Bereza, a battalion commander with Ukraine’s National Guard whose forces have fought in the country’s east in recent months, shrugged off news of the leak.

He noted that information warfare had become so intense that “we can no longer determine where is the truth and where is the lie.”

“We are at that stage of the war when the information war is sometimes even more important than the direct physical clashes at the front,” Colonel Bereza said.

A soldier in his unit, Maksym, had yet to hear the news. “We have a lot of our own problems, and with this leak I have no words,” he said angrily.

Outside experts said it was difficult to draw conclusions about who released the information and why.

Kyle Walter, the head of research at Logically, a British firm that tracks disinformation, said many prominent voices on Russian Telegram channels were calling the original, apparently unaltered photo showing Russian and Ukrainian casualties a “Western influence” operation.

“They think the actual unedited photo where it shows high Russian loss numbers and relatively low Ukrainian loss numbers is an attempt to instill poor morale in Russia and Russian forces,” Mr. Walter said.

Jonathan Teubner, the chief executive of FilterLabs AI, which tracks messaging in Russia, said that while pro-Kremlin voices were saying the leak was an American or Ukrainian disinformation campaign, his lead analyst thought it could be a Russian operation meant to sow distrust between Washington and Kyiv.

The doctored photo showing lower casualty numbers for Russia, and higher ones for Ukraine, than reported figures has been discussed far more frequently in Western-oriented social media than in Russian-focused platforms, Mr. Walter said.

It has been a frequent Russian disinformation tactic to alter stolen documents, including some purportedly leaked from the Ukrainian government, Mr. Walter said. But because Ukraine’s government has dismissed these documents as altered or out of context, they generally do not gain much traction, he added.

“There are a lot of examples of leaked documents being used in propaganda campaigns and specifically in terms of disinformation,” Mr. Walter said. But what is going on with these American documents, he added, “is still pretty unclear at the moment.”

The Ukraine war, Mr. Walter said, has had more document leaks than other conflicts, in part because of the role that open-source intelligence and declassified intelligence have played in the war.

“There’s definitely been an uptick, it’s happening more often, but that’s more indicative of just the environment we’re in rather than it being the tactic specific to the Ukraine war,” Mr. Walter said.

Natalia Yermak and Glenn Thrush contributed reporting.

Helene Cooper is a Pentagon correspondent. She was previously an editor, diplomatic correspondent and White House correspondent, and was part of the team awarded the 2015 Pulitzer Prize for International Reporting, for its coverage of the Ebola epidemic. @helenecooper

Julian E. Barnes is a national security reporter based in Washington, covering the intelligence agencies. Before joining The Times in 2018, he wrote about security matters for The Wall Street Journal. @julianbarnesFacebook

Eric Schmitt is a senior writer who has traveled the world covering terrorism and national security. He was also the Pentagon correspondent. A member of the Times staff since 1983, he has shared four Pulitzer Prizes. @EricSchmittNYT

Thomas Gibbons-Neff is a Ukraine correspondent and a former Marine infantryman. @tmgneff
A version of this article appears in print on April 8, 2023, Section A, Page 1 of the New York edition with the headline: Another Batch Of Secret Files Lands Online. 

A Year of War in Ukraine

The Future of Ukraine: The European Union and NATO have promised a path to membership for the country. But real partnership will hold risks and benefits.

Western Companies: Hundreds of Western businesses are still in Russia. Some say Moscow has tied their hands, while others have chosen to stay put.

Defying Isolation: After the invasion of Ukraine, the West tried to cut Russia off from the rest of the world. Here is why it didn’t work.

A Wartime Partnership: The alliance between President Biden and President Volodymyr Zelensky of Ukraine has become critical to the world order.

Zelensky’s Rise: The Ukrainian president, once brushed off as a political lightweight, has become a household name, representing his country’s tenacity.

Ukrainians’ Texts: The messages that Ukrainians wrote to loved ones as Russia invaded on Feb. 24, 2022, are a snapshot of a turning point in modern history.

How We Verify Our Reporting

Our team of visual journalists analyzes satellite images, photographs, videos and radio transmissions to independently confirm troop movements and other details.

We monitor and authenticate reports on social media, corroborating these with eyewitness accounts and interviews. Read more about our reporting efforts.

No comments: