Get breaking news alerts and special reports. The news and stories that matter, delivered weekday mornings.
California Democrat Hans Keirstead says he was aggressively targeted by cyber attacks that sought to obtain information and money during his bid to unseat GOP Rep. Dana Rohrabacher and that the FBI is investigating the hacks.
“There was a very sophisticated and very highly-coordinated attack on both my campaign digital services, but also my company,” the executive of a biomedical research firm told NBC News on Thursday. “They went for the duration of my campaign, and both of them stopped when I lost the primary.”
Rohrabacher, a strong supporter of President Donald Trump who is known as a staunch defender of Moscow’s interests, was warned by the FBI in 2012 that Russian spies were seeking to recruit him.
“They call me Putin’s best friend. I’m not Putin’s best friend,” Rohrabacher told ABC News in 2017. “I’m a patriotic American who knows that it would be really good for America to cooperate with Russia. I could care less whether it’s good for Russia.”

vCard.red is a free platform for creating a mobile-friendly digital business cards. You can easily create a vCard and generate a QR code for it, allowing others to scan and save your contact details instantly.
The platform allows you to display contact information, social media links, services, and products all in one shareable link. Optional features include appointment scheduling, WhatsApp-based storefronts, media galleries, and custom design options.

Keirstead said he hired two cybersecurity firms — one for his campaign and one for his company — but neither could identify the source of the hack. The FBI has an open investigation, Keirstead said, but have not offered him any “firm conclusions.”
The FBI declined to comment on the record for this story.
Keirstead said he believes it could be Russian intelligence agencies because of their efforts to influence the 2016 campaign and the fact that the hacks concluded when he lost the primary in June.
“People deserve to know that hacking into politics is not over. It didn’t end in 2016 with Trump and Clinton. It’s very active; it’s a very robust operation that’s happening now.”
The cyber attacks and FBI investigation were first reported by Rolling Stone.
Keirstead came in third in California’s nonpartisan top two “jungle” primary, losing by just 125 votes to another Democrat, Harley Rouda. Keirstead said he does not believe the hack affected the outcome of the race, and he endorsed Rouda.
The hack comes as U.S. intelligence agencies warn of the growing and serious threat cyber attacks pose the U.S., particularly from Russia.
The hacks on Keirstead’s campaign and company began in August 2017 with a spear-phishing attack on the then-candidate’s email. Spear-phishing attacks are a common technique where hackers sent a fake email that successfully trick the candidate into allowing hackers access to the email.
Keirstead said he changed his passwords promptly; the hacks later advanced to brute-force attacks on his campaign website, and eventually other attacks where hackers impersonated him and sought to obtain money and passwords from his staff.
“It really does look real. It doesn’t say something from Russia dot com, it really does look like Hans from Hans for California,” he said.
In one instance, an email that purported to be from the candidate asked an assistant to transfer hundreds of thousands of dollars to another account. It was so convincing, Keirstead said, that his assistant called the bank, but was unable to complete the transfer without Keirstead.
Robert Johnston, the expert who first investigated the 2016 election hack on the Democratic National Committee and now the CEO of Adlumin, has not reviewed Keirstead’s hack, but told NBC News that the spear-phishing and brute-force attacks follow a pattern used by Russian military intelligence. The efforts to steal money, however, are more commonly seen with criminal attacks.
“I’d say it’s more likely Russian activity just because of the other events that are around it, but I don’t have any of the forensic data so it’s impossible for me to tell,” Johnston said.
Sophisticated criminals seeking financial gain would start with mimicry emails, not spear-phising and brute-force attacks, Johnston said, and he noted that Sen. Claire McCaskill, D-Mo., was the victim of cyber attacks around the same time by Russian hackers.
Microsoft said they’d detected and helped block attempts to hack three Congressional campaigns, too, declining to detail which. The president has downplayed Russian interference in his effort to discredit the special counsel’s investigation into ties between Russia and the Trump campaign.