CrowdStrike hid the DNC server in Ukraine
| CrowdStrike hid the DNC server in Ukraine | |
|---|---|
| FALSE | |
| "The Democratic National Committee's server was secretly moved to Ukraine by CrowdStrike, and the FBI never examined it, so the Russia hack was fabricated." | |
| Domain | Politics & Elections |
| Tactic | Fabrication Conspiracy Theory |
| Era | Current |
| First seen | 2017 |
| Origin | Online forums and commentary from 2017, repeated by President Trump in a July 25, 2019 call with Ukraine's president |
| Last reviewed | 2026-11-03 |
| Further reading: books on Politics & Elections | |
The claim that CrowdStrike hid the DNC server in Ukraine reshapes a real detail (the FBI did not take the DNC's servers) into a claim that the hack never happened.
What the evidence shows
- CrowdStrike did investigate. The DNC hired the cybersecurity firm CrowdStrike in spring 2016. It identified two Russian groups inside the network and made forensic images of the affected systems.
- The FBI worked from copies. FBI Director James Comey told Congress in January 2017 that the bureau had requested direct access and received what he called appropriate substitutes, the forensic information from CrowdStrike. Critics say direct access would have been better, which is a fair criticism of the process.
- The attribution does not rest on CrowdStrike alone. The July 2018 indictment of 12 GRU officers laid out the intrusions in detail, based on government evidence. The intelligence community independently attributed the hack to Russia.
- Nothing supports a Ukraine server. CrowdStrike is based in California and is not owned by a wealthy Ukrainian. The DNC's email was largely cloud-based and spread across many machines. Trump's former homeland security adviser Tom Bossert and State Department official George Kent said the claim had no factual basis.
- A legitimate question remains small. Transcripts declassified in 2020 showed CrowdStrike's Shawn Henry telling House investigators that the firm had indicators, not concrete proof, that emails left the DNC network. The Mueller indictment supplied more evidence of the theft.
Why it persists
It has an understandable hook, the lack of direct FBI access, and it served the argument that the whole Russia story was manufactured. The idea became politically consequential when Trump raised it with Ukraine's president.
Lessons for readers
- The absence of one type of evidence does not erase the other evidence.
- Ask who else corroborated the finding.
See also
Sources
- U.S. Department of Justice, indictment of 12 GRU officers, July 13, 2018.
- James Comey, testimony before Congress, January 2017.
- Testimony of George Kent and Tom Bossert on the CrowdStrike theory, 2019.