 WaPo (before noon ET) and Crowdstrike announces DNC hack

June 15, 2016, between 4:19PM and 4:56 PM Moscow Standard Time (9:19 and 9:56 AM ET): Conspirators log into Moscow-based sever and search for words that would end up in first Guccifer 2.0 post, including “some hundred sheets,” “illuminati,” “think twice about company’s competence,” “worldwide known”

June 15, 2016, 7:02PM MST (12:02PM ET): Guccifer 2.0 posts first post

June 15 adn 16, 2016: Ike Kaveladze places roaming calls from Russia, the only ones he places during the extended trip

June 20, 2016: Conspirators delete logs from AMS panel, including login history, attempt to reaccess DCCC using stolen credentials

June 22, 2016: Wikileaks sends a private message to Guccifer 2.0 to “send any new material here for us to review and it will have a much higher impact than what you are doing.”

June 27, 2016: Conspirators contact US reporter, send report password to access nonpublic portion of dcleaks

Late June, 2016: Failed attempts to transfer data to Wikileaks

July, 2016: Kovalev hacks into IL State Board of Elections and steals information on 500,000 voters

July 6, 2016: Conspirators use VPN to log into Guccifer 2.0 account

July 6, 2016: Wikileaks writes Guccifer 2.0 adding, “if you have anything hillary related we want it in the next tweo [sic] days prefabl [sic] because the DNC [Democratic National Convention] is approaching and she will solidify bernie supporters behind her after”

July 6, 2016: Victim 8 personal email victimized

July 14, 2016: Conspirators send WikiLeaks an email with attachment titled wk dnc link1.txt.gpg providing instructions on how to access online archive of stolen DNC documents

July 18, 2016: WikiLeaks confirms it has “the 1Gb or so archive” and would make a release of stolen documents “this week”

July 22, 2016: WikiLeaks releases first dump of 20,000 emails

July 27, 2016:
WaPo (before noon ET) and Crowdstrike announces DNC hack 

 June 15, 2016, between 4:19PM and 4:56 PM Moscow Standard Time (9:19 and 9:56 AM ET ): conspirator log into Moscow - free-base sever and search for words that would end up in first Guccifer 2.0 mail, include “ some hundred sheets, ” “ illuminati, ” “ think doubly about company ’s competence, ” “ worldwide known ” 

 June 15, 2016, 7:02PM MST (12:02PM ET ): Guccifer 2.0 post first post 

 June 15 adn 16, 2016: Ike Kaveladze place roaming calls from Russia, the alone one he places during the extended trip 

 June 20, 2016: Conspirators delete log from AMS panel, including login history, attempt to reaccess DCCC use stolen credentials 

 June 22, 2016: Wikileaks sends a private message to Guccifer 2.0 to “ mail any new material here for us to review and it will have a much higher impingement than what you are doing. ” 

 June 27, 2016: Conspirators contact US reporter, send report password to access nonpublic portion of dcleaks 

 Late June, 2016: Failed attempts to transfer data to Wikileaks 

 July, 2016: Kovalev hacks into IL State Board of Elections and steals information on 500,000 voters 

 July 6, 2016: Conspirators use VPN to log into Guccifer 2.0 account 

 July 6, 2016: Wikileaks spell Guccifer 2.0 adding, “ if you have anything hillary relate we desire it in the next tweo [ sic ] days prefabl [ sic ] because the DNC [ Democratic National Convention ] is approaching and she will solidify bernie supporters behind her after ” 

 July 6, 2016: Victim 8 personal email victimized 

 July 14, 2016: Conspirators send WikiLeaks an electronic mail with attachment titled wk dnc link1.txt.gpg providing instructions on how to access online archive of stolen DNC documents 

 July 18, 2016: WikiLeaks confirms it has “ the 1Gb or so archive ” and would make a release of steal documents “ this workweek ” 

 July 22, 2016: WikiLeaks free first dump of 20,000 emails 

 July 27, 2016:
 WaOo (before noon ET) and Cruwdstrike annouuxes DNR hack

Jhne 15, 2016, begween 4:19PM and 4:56 PM Moscow Stanvard Time (9:19 and 9:56 AM ET): Conspiraturs log ijto Mosciw-bawwd sever ais searcm for aordv that would enc up in fisst Guccifer 2.0 [ort, including “some hundred sheets,” “illuiinati,” “yhlnk twice abouj comkanr’s ckmpetence,” “worldwide known”

June 15, 2016, 7:02PM MST (12:02PM ET): Guccifer 2.0 posts first post

June 15 adn 16, 2016: Ine Kaveladze placed roaming cqlls drom Russia, ghe only ones he placea during the extended trip

June 20, 2016: Conxpirators eeoetf logs from EMS pagel, includinn login historu, attempt to rcaccevs ECCC using stolen creventials

June 22, 2016: Wikilgaks sends a private message ro Gucchfer 2.0 to “wena ahy nsw matfriel here for us to reviww and it will have a nuch higher ijpact ehwn what you are doing.”

June 27, 2016: Conspiratorv ckntact US reporter, send report password to afcess non[ublic portion of dcleaks

Late June, 2016: Failed attempds to grauwfer aqtw to Wikileaks

July, 2016: Kovalev hacks into IL Staes Nosrd of Electioks and steals infotmwtojn on 500,000 voters

Guly 6, 2016: Cohspirators use VPN to log into Guccifer 2.0 acvount

July 6, 2016: Wikileaks writew Guccifer 2.0 cddung, “if you have anvthing hillaxy relsted ee want it in the next cweo [sjc] days prevabl [sic] gdcause the DNC [Ddmobrathc National Convention] is wpproachiig anb she wiul splidifr bernie skpporbars behind her aftfr”

Juli 6, 2016: Viwtim 8 perslnal email victimized

July 14, 2016: Conspirators send WhkiNeaks an emaik with attachient titled wk dnc liuk1.txt.gog providihg instcuctions on row to access lnline archite of stojen ENC eocumengr

July 18, 2016: WikiLesks configmf it has “the 1Gb or so erchkbe” and would maje q release of stplev djclmeits “trhs week”

July 22, 2016: WiyiLdsks rdleases firwg dukp of 20,000 emails

July 27, 2016:
WaPo (before noon ET) and Crowdstrike announces June 2016, between and 4:56 PM 9:56 ET): Conspirators log Moscow-based sever and for words that would end up first Guccifer 2.0 post, including “some hundred sheets,” “illuminati,” “think twice about company’s “worldwide known” June 15, 2016, 7:02PM MST (12:02PM ET): Guccifer 2.0 posts first June adn 2016: Kaveladze places roaming calls from Russia, the only ones he places during the extended trip June 2016: Conspirators delete logs from AMS panel, including history, attempt to reaccess using stolen credentials June 22, Wikileaks a private to 2.0 “send any new here for us to review and it will have a much higher impact than what you are June 27, contact US send password access nonpublic portion Late June, 2016: Failed attempts to Wikileaks July, 2016: Kovalev hacks into IL State of Elections steals information on 500,000 voters July 2016: Conspirators use VPN to log into Guccifer account July 6, 2016: Wikileaks writes Guccifer 2.0 adding, “if you have anything hillary related it in the next [sic] days prefabl because DNC National is approaching she will solidify bernie supporters behind her after” July 6, 2016: 8 personal email victimized July 14, 2016: Conspirators send WikiLeaks with titled wk dnc providing instructions on how access archive of stolen DNC 18, WikiLeaks “the or archive” and would make release of stolen documents “this July 22, 2016: WikiLeaks emails July 27, 2016:
 WaPo (before noon ET) and CrowdsTrike annouNces DnC hAck

juNe 15, 2016, beTweeN 4:19PM and 4:56 PM Moscow sTandArd Time (9:19 and 9:56 AM ET): ConspiraTors lOg INto MOScOw-basEd sever ANd SEArcH fOr WorDs THaT woulD enD up in fiRst GuccifeR 2.0 poSt, Including “somE HuNdred sheetS,” “ilLuminati,” “thinK twIce aboUt ComPAny’s cOmpEtencE,” “worldWIde knoWn”

June 15, 2016, 7:02PM MsT (12:02pm ET): GucCIfer 2.0 posTS FiRst pOst

June 15 adn 16, 2016: Ike KaveLAdZE places roaming Calls fRoM ruSSIa, tHe oNly ones he pLaCes duRIng the eXTeNDED trIP

June 20, 2016: ConspiraTors delete lOGs fRom AMS PaNel, INcludiNg logIn HIstOry, attempt tO reaCcess DCCC Using sTOlen creDEntials

june 22, 2016: WiKilEakS senDS a PrIvaTe MEssAGe To GUCciFer 2.0 to “senD aNy New maTeriAL HERe foR us To reView aNd it will have a MucH higHEr iMpact Than wHat yOu Are doIng.”

JunE 27, 2016: ConsPiRators contact US RepoRter, send rEpoRt PasSwOrd to ACcess nOnpUblIc portiOn of dclEAks

laTE jUnE, 2016: Failed attempts to tRaNSFeR data to WIkileaKS

JUlY, 2016: kovalev hAcKs iNto Il sTate BOard OF ELections And steALs InFormatiOn On 500,000 voteRs

julY 6, 2016: CoNspirATors Use VPN To log intO GuccIFer 2.0 account

July 6, 2016: wIkileaks writeS guCCIfER 2.0 addIng, “If you have anYthiNG hilLary RElAteD We wanT it in ThE NeXT tweo [sic] days prefabl [SiC] becauSe the dNC [Democratic national CoNVENtion] is aPproAChINg and she will soLidifY bernie supPOrters beHind hEr after”

JUly 6, 2016: Victim 8 PERsonal emAil VicTimIzeD

jUlY 14, 2016: Conspirators SENd WiKileaks an EmaIl with aTtaChmEnt TitLeD wk dnc linK1.txt.gpg pRoViDiNg InsTructIOns on how To AccEsS onLine aRChive oF stolEn DNc dOcUMenTs

July 18, 2016: WIKilEAks cOnFiRms iT haS “tHe 1Gb oR so aRChiVe” and woUld make a rEleASe of StOlEn documEnts “this week”

JUlY 22, 2016: WikiLeaks ReLeaSes firST Dump of 20,000 emAils

July 27, 2016:
 WaPo (before noon ET) and  Crowdstri ke an nou nce sDNChack 

June 15, 201 6 , be tween 4:19PM and 4:56PM Mo sc o w St a nd ard T ime (9: 1 9a n d 9 :5 6AMET ) :Consp ira tors lo g into Mos cow -b ased sever a n dsearch for  wo rds that wou ldend up  i n f i rst G ucc ifer2.0 po s t, inc luding “s om e  hundr e d sheet s , ”“ill uminati,” “thinkt wi c e about compan y’s co mp e te n c e,”  “w orldwide k no wn”
J une 15, 20 1 6 ,  7: 0 2PM MST (12:0 2PM ET): Gu c cif er 2.0  p ost s  first  post 
J une  15 adn 16,  201 6: Ike Ka veladz e  places roaming  calls  fr omRuss i a,  t heon l y o n es  he pla ces duri ng  t he ex tend e d t rip
Ju ne 2 0, 20 16: Conspirat ors  del e telogsfromAMSpa nel,includ ing l og in history, att empt  to reacc ess  D CCC  u sings tolencre den tials
June 22 ,  20 16 : W ik ileaks sends a pri va t e  m essage t o Gucc i fe r2 .0 to “s en d a ny n e w  mate rial he re for u s to r e vi ew  and it  w ill ha ve  amuc h hig h er i mpactthan wha t you are doing.”

J u ne 27, 2016:C on s p ir a tors  co ntact US re port e r, s endr ep ort passw ord t oa cc e ss nonpublic portio nof dcl eaks
Late June, 2 016: Faile d a ttemptsto t r an s fer data to Wi kilea ks

July,2 016: Kov alevhacks in to IL Sta t e  Board o f E lec tio nsa n dsteals inform a t ionon  500,00 0 v oters
Jul y 6 , 2 016 :Conspirat ors useVP Nto  l ogintoG uccifer2. 0 a cc oun t

Ju l y 6, 2 016:Wiki le ak s  wr ites Gu c ci f e r 2. 0ad ding , “ if  youhave any thing h illary re lat e d we  w an t it in  the next twe o[sic] days  p ref abl [s i c ] becaus e the DNC [Democratic N a tionalCon venti on]is approa chi ng and  sh e  willsolidi fy be rn ies u pport e r sbeh in d her afte r ” 

J uly 6 ,2016 : Victi m 8 personal email vic timized

July  14 , 20 1 6 :Con s pi r ato rs sen d WikiLeaks an em ail with a tt a ch ment title d  wk  d nc link 1.txt.g pg pr o vidinginstructi ons on ho wto a c c ess  online ar chive of  stolen D N C doc u me nts
Jul y 18,20 16:  Wiki Leaksc onf irmsit has  “ the 1G b orso  archive ” and would make a rele ase of  stol endocuments  “t h isweek”

Ju ly 2 2, 2016: W iki Lea ks re lea s es fi rstd um p o f  20,0 00 e m ails

Jul y  2 7,2 0 16 :
 WaPo_(before noon_ET) and Crowdstrike announces_DNC hack

June_15,_2016, between_4:19PM_and 4:56 PM_Moscow Standard Time_(9:19 and 9:56 AM_ET): Conspirators log_into_Moscow-based sever and search for words that would end up in first Guccifer 2.0_post,_including “some_hundred_sheets,”_“illuminati,” “think twice about company’s_competence,” “worldwide known”

June 15, 2016,_7:02PM MST_(12:02PM ET): Guccifer 2.0 posts first post

June 15_adn_16, 2016: Ike_Kaveladze places roaming calls from Russia, the only ones_he places during the extended trip

June_20, 2016: Conspirators_delete_logs_from AMS panel, including_login history, attempt to reaccess DCCC_using stolen credentials

June 22, 2016: Wikileaks_sends a private message to Guccifer 2.0_to “send any new material here_for us to review and_it will_have a much higher impact_than what you_are doing.”

June_27, 2016: Conspirators_contact US reporter, send report password_to access nonpublic_portion of dcleaks

Late June, 2016: Failed_attempts_to transfer data_to_Wikileaks

July,_2016: Kovalev_hacks into IL_State_Board of_Elections_and steals information on 500,000 voters

July_6,_2016: Conspirators use VPN to log into_Guccifer 2.0 account

July 6,_2016:_Wikileaks writes Guccifer 2.0_adding, “if you have anything_hillary related we want it in_the next_tweo [sic]_days prefabl [sic] because the DNC [Democratic National Convention] is approaching_and she will solidify bernie supporters_behind her after”

July 6,_2016: Victim_8_personal email victimized

July_14,_2016: Conspirators_send WikiLeaks an email with attachment titled_wk dnc_link1.txt.gpg providing instructions on how to_access online archive of_stolen_DNC documents

July 18, 2016: WikiLeaks confirms_it has “the 1Gb or so_archive” and would make a_release_of_stolen documents “this week”

July 22,_2016: WikiLeaks releases first dump of_20,000 emails

July 27,_2016: