The Mueller Report:
On July 27, 2016, Unit 26165 targeted email accounts connected to candidate Clinton’s personal office [REDACTED: Personal Privacy]. Earlier that day, candidate Trump made public statements that included the following: “Russia, if you’re listening, I hope you’re able to find the 30,000 emails that are missing. I think you will probably be rewarded mightily be our press.” The “30,000 emails” were apparently a reference to emails described in media accounts as having been stored on a personal server that candidate Clinton had used while serving as Secretary of State.
Within approximately five hours of Trump’s statement, GRU officers targeted for the first time Clinton’s personal office. After candidate Trump’s remarks, Unit 26165 created and sent malicious links targeting 15 emails accounts at the domain [REDACTED: Personal Privacy] including an email account belonging to Clinton aide [REDACTED: Personal Privacy]. The investigation did not find evidence of earlier GRU attempts to compromise accounts hosted on this domain. It is unclear how the GRU was able to identify these email accounts, which were not public.