A strange cybersecurity incident involving files connected to disgraced financier Jeffrey Epstein has come to light after newly released U.S. Justice Department records revealed that hackers once infiltrated an FBI server — only to threaten to report the breach to the FBI themselves.

According to documents and reporting reviewed by Reuters, a hacker gained access on Feb. 12, 2023, to a server inside the Federal Bureau of Investigation’s New York Field Office. The system was connected to the bureau’s Child Exploitation Forensic Lab, which stores digital evidence used in investigations involving child exploitation cases, including material related to Epstein.

The intrusion reportedly occurred after a system used for handling digital evidence was left vulnerable while being configured for remote access by FBI Special Agent Aaron Spivack. The breach was discovered the following day when Spivack logged into his workstation and found a message indicating the network had been compromised.

Logs also showed suspicious internet activity and evidence that someone had browsed files tied to the Epstein investigation.

In a bizarre twist, the intruder apparently did not realize the system belonged to the FBI at first. After encountering files containing evidence from child exploitation investigations, the hacker left a note saying they were disturbed by what they had found and threatened to report the server’s owner to federal authorities.

FBI personnel later contacted the hacker through a video call and showed official credentials to confirm that the system was, in fact, operated by law enforcement.
Investigators still have not identified the individual responsible for the intrusion, though officials believe it was likely carried out by a foreign cybercriminal rather than a government-backed intelligence service.

Authorities have not disclosed exactly which Epstein-related files were accessed, copied or potentially lost during the breach.

Spivack later documented the incident in internal reports and said he believed he was being made a “scapegoat” for the security lapse. He reportedly blamed confusing internal IT procedures and unclear guidance for leaving the system exposed. The results of the FBI’s internal investigation into the breach have not been made public.

In a bizarre twist, the intruder apparently did not realize the system belonged to the FBI at first. After encountering files containing evidence from child exploitation investigations, the hacker left a note saying they were disturbed by what they had found and threatened to report the server’s owner to federal authorities.

FBI personnel later contacted the hacker through a video call and showed official credentials to confirm that the system was, in fact, operated by law enforcement.
Investigators still have not identified the individual responsible for the intrusion, though officials believe it was likely carried out by a foreign cybercriminal rather than a government-backed intelligence service.

Authorities have not disclosed exactly which Epstein-related files were accessed, copied or potentially lost during the breach.

Spivack later documented the incident in internal reports and said he believed he was being made a “scapegoat” for the security lapse. He reportedly blamed confusing internal IT procedures and unclear guidance for leaving the system exposed. The results of the FBI’s internal investigation into the breach have not been made public.