WikiLeaks DNC Email Dump Exposed Anti-Sanders Bias and Triggered Leadership Resignations
WikiLeaks published nearly 20,000 Democratic National Committee emails and more than 8,000 attachments taken from the accounts of seven senior staff members, exposing internal messages that showed hostility toward Bernie Sanders during the 2016 Democratic primary. The leaked correspondence included discussions of using Sanders’s religious beliefs against him, insults directed at his campaign team, donor-access and fundraising conversations, and off-the-record exchanges with journalists and political figures. The release also exposed sensitive personal information for donors and other individuals, including contact and financial data, creating privacy and identity-theft concerns.
The disclosures triggered an immediate political crisis inside the DNC. Debbie Wasserman Schultz apologized to Sanders and resigned as chair, while CEO Amy Dacey, CFO Brad Marshall, and communications director Luis Miranda later departed as the fallout widened. Sanders and his allies said the emails confirmed that party officials had tilted the primary toward Hillary Clinton, while the DNC described the incident as a serious network intrusion and brought in outside security support. Multiple reports tied the breach to an earlier hack of DNC systems that investigators and political officials increasingly linked to Russian actors, even as WikiLeaks withheld its source.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
8 events from the most recent confirmed update back to the earliest known activity.
DNC CEO, CFO, and communications director depart over email scandal
The DNC's leadership shake-up widened when CEO Amy Dacey, CFO Brad Marshall, and Communications Director Luis Miranda left their posts in the wake of the hacked-email controversy. Interim chair Donna Brazile simultaneously announced transition and advisory appointments.
DNC issues public apology to Bernie Sanders
The Democratic National Committee publicly apologized to Bernie Sanders after the leaked emails showed internal hostility toward his campaign. The apology acknowledged that the messages undermined the party's claimed neutrality during the primary.
Debbie Wasserman Schultz resigns as DNC chair
Following the leak and the controversy over anti-Sanders messages, Debbie Wasserman Schultz resigned as chair of the Democratic National Committee. Her departure became the most immediate leadership consequence of the email disclosures.
Clinton campaign publicly blames Russia for the DNC leak
As fallout from the publication grew, Hillary Clinton's campaign publicly blamed Russia for the leaked DNC emails. This marked a prominent political attribution claim tying the incident to Russian interference.
DNC says contractor removed intruders and secured its network
After the breach became public, DNC Chair Debbie Wasserman Schultz described it as a serious incident and said a private contractor had been hired to remove the intruders and secure the network. This was one of the party's first formal responses to the compromise and leak.
Leak reporting highlights exposure of donors' personal data
Reporting on the WikiLeaks publication found that the released DNC material included sensitive personal information for ordinary contributors and others, including contact details and financial or identity data. The disclosure expanded the incident from a political embarrassment to a privacy and identity-theft risk.
WikiLeaks publishes nearly 20,000 hacked DNC emails
On the Friday before the 2016 Democratic National Convention, WikiLeaks released nearly 20,000 DNC emails and thousands of attachments from seven key staff accounts, presenting them as the first part of a 'Hillary Leaks' series. The publication exposed internal discussions about Bernie Sanders, donors, journalists, and other party matters.
DNC official suggests using Sanders's religion against him in email
A leaked DNC email dated May 2016 showed CFO Brad Marshall proposing that Bernie Sanders's religious beliefs be raised as a political issue in Kentucky and West Virginia. The message later became one of the most cited examples of anti-Sanders sentiment inside the DNC.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
17 references tracked. Mallory keeps watching after this page renders.
Leaked DNC emails reveal details of anti-Sanders sentiment | Democrats | The Guardian
theguardian.com
Open sourceHillary Clinton campaign blames leaked DNC emails about Sanders on Russia | Democrats | The Guardian
theguardian.com
Open sourceDNC CEO resigns in wake of email controversy | CNN Politics
edition.cnn.com
Open sourceWhat the Leaked E-mails Do and Don’t Tell Us About the DNC and Bernie Sanders | The Nation
thenation.com
Open sourceNew Leak: Top DNC Official Wanted to Use Bernie Sanders’s Religious Beliefs Against Him - The Intercept
theintercept.com
Open sourceWikileaks posts nearly 20,000 hacked DNC emails online - The Washington Post
washingtonpost.com
Open sourceWikiLeaks fights The Man by, er, publishing ordinary people's personal information
theregister.co.uk
Open sourceWikiLeaks - Search the DNC email database
wikileaks.org
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Russian Intelligence Hacked Democratic Targets and Used WikiLeaks to Release Stolen Emails
U.S. officials, cybersecurity investigators, and later federal prosecutors concluded that Russian intelligence penetrated Democratic Party networks and stole politically sensitive material during the 2016 presidential campaign. Early reporting on the Democratic National Committee breach tied the intrusion to the Russian-linked groups **Cozy Bear** and **Fancy Bear**, while the online persona **Guccifer 2.0** surfaced to claim responsibility and distribute stolen files, including opposition research on Donald Trump. As hacked emails from the DNC and Clinton campaign chairman John Podesta were published, U.S. officials said they saw increasing evidence that Russia was using **WikiLeaks** as a channel to disseminate the material, even as Moscow, WikiLeaks, and figures including Julian Assange publicly denied Russian involvement or coordination. The U.S. response escalated from an FBI investigation and intelligence reviews ordered by the Obama administration to formal attribution and criminal charges. Special Counsel Robert Mueller later secured indictments against **12 GRU officers** for the DNC hack-and-leak operation, and court filings and subsequent reporting detailed contacts between Guccifer 2.0 and Trump adviser Roger Stone, though Mueller said he lacked sufficient admissible evidence to charge Stone, Assange, or WikiLeaks in a broader conspiracy. A bipartisan Senate Intelligence Committee report later backed the intelligence community’s assessment that the interference campaign was approved by **Vladimir Putin**, combined cyber-espionage with influence operations, and was intended to damage Hillary Clinton and help Donald Trump.
May 26, 2026
Russian Hackers Breached the DNC and Used Guccifer 2.0 and WikiLeaks to Spread Stolen Emails
Russian government-linked hackers penetrated the Democratic National Committee, stole opposition research on Donald Trump and thousands of internal emails, and triggered a wider investigation after leaked material exposed not only politically damaging correspondence but also sensitive donor and personal data. Security firms including CrowdStrike, Mandiant, Fidelis, SecureWorks, and ThreatConnect tied the intrusion to Russian groups tracked as `APT28`/**Fancy Bear** and `APT29`, with later reporting pointing specifically to Russia’s military intelligence service, the **GRU**, based on malware and infrastructure overlaps. Researchers and investigators said the operation combined network intrusion, theft, and staged disclosure in a manner consistent with a coordinated influence campaign targeting the 2016 U.S. election. After the breach became public, the online persona **Guccifer 2.0** surfaced to claim responsibility and deny Russian involvement, but reporting and forensic analysis described the persona as a likely cutout used to distribute stolen documents and muddy attribution. WikiLeaks then published large batches of DNC emails while later reports said it had direct outreach to Donald Trump Jr. during the campaign and declined to publish a separate cache of Russian government documents in the same period, intensifying scrutiny of its role in the broader information operation. Subsequent congressional and special-counsel-era reporting found sharp partisan disagreement over whether Trump associates coordinated with Russia, but broad agreement that Moscow conducted an interference campaign that used hacked Democratic materials to damage Hillary Clinton and influence the election.
May 25, 2026
WikiLeaks Contacts Surface in Manning Leak Case and Trump Jr. Election Messages
U.S. prosecutors presented digital forensic evidence they said tied Pfc. Bradley Manning to WikiLeaks, including alleged chat logs with Julian Assange, deleted classified files recovered from military computers, and a memory card containing hundreds of thousands of Iraq and Afghanistan field reports. Investigators also described a secure file-transfer link associated with a server tied to WikiLeaks, a document with Assange contact information, and an email in which Manning allegedly claimed responsibility for providing the 2007 Apache helicopter video. The evidence was introduced at a Fort Meade pretrial hearing as Manning faced charges including Espionage Act violations and aiding the enemy. Separate disclosures later showed WikiLeaks was also in direct contact with Donald Trump Jr. during the closing weeks of the 2016 U.S. election while the organization was publishing hacked Democratic emails that U.S. intelligence agencies said were released at Russia’s direction. The leaked Twitter direct messages showed WikiLeaks urging Trump Jr. and the Trump campaign to promote its disclosures, sharing a searchable link to John Podesta’s emails that Trump Jr. later tweeted, proposing that Donald Trump release his tax returns through WikiLeaks, and suggesting on election day that he contest the result if he lost. Trump Jr. reportedly informed senior campaign officials including Steve Bannon and Jared Kushner, while Assange disputed how the messages were presented.
May 25, 2026