New Batch of Classified Documents Appear on Social Media Sites

WASHINGTON — A new batch of classified documents that appear to detail American national security secrets from Ukraine to the Middle East to China surfaced on social media sites on Friday, alarming the Pentagon and adding turmoil to a situation that seemed to have caught the Biden administration off guard.

The scale of the leak — analysts say more than 100 documents may have been obtained — along with the sensitivity of the documents themselves, could be hugely damaging, officials said. A senior intelligence official called the leak “a nightmare for the Five Eyes,” in a reference to the United States, Britain, Australia, New Zealand and Canada, the so-called Five Eyes nations that broadly share intelligence.

The latest documents were found on Twitter and other sites on Friday, a day after senior Biden administration officials said they were investigating a potential leak of classified Ukrainian war plans, include an assessment of Ukraine’s air defense capabilities. One slide, dated Feb. 23, is labeled “Secret/NoForn,” meaning it was not meant to be shared with foreign countries.

Mick Mulroy, a former senior Pentagon official, said the leak of the classified documents represented “a significant breach in security” that could hinder Ukrainian military planning. “As many of these were pictures of documents, it appears that it was a deliberate leak done by someone that wished to damage the Ukraine, U.S., and NATO efforts,” he said.

One analyst described what has emerged so far as the “tip of the iceberg.”

Early Friday, senior national security officials dealing with the initial leak, which was first reported by The New York Times, said a new worry had arisen: Was that information the only intelligence that was leaked?

By Friday afternoon, they had their answer. Even as officials at the Pentagon and national security agencies were investigating the source of documents that had appeared on Twitter and on Telegram, another surfaced on 4chan, an anonymous, fringe message board. The 4chan document is a map that purports to show the status of the war in the eastern Ukrainian city of Bakhmut, the scene of a fierce, monthslong battle.

But the leaked documents appear to go well beyond highly classified material on Ukraine war plans. Security analysts who have reviewed the documents tumbling onto social media sites say the increasing trove also includes sensitive briefing slides on China, the Indo-Pacific military theater, the Middle East and terrorism.

The Pentagon said in a statement on Thursday that the Defense Department was looking into the matter. But privately, officials from several separate national security agencies acknowledged both a rush to find the source of the leaks and a potential for what one official called a steady drip of classified information posted on sites.

The documents on Ukraine’s military appear as photographs of charts of anticipated weapons deliveries, troop and battalion strengths, and other plans. Pentagon officials acknowledge that they are legitimate Defense Department documents, but the copies appear to have been altered in certain parts from their original format. The modified versions, for example, overstate American estimates of Ukrainian war dead and underestimate estimates of Russian troops killed.

On Friday, Ukrainian officials and pro-war Russian bloggers suggested the leak was part of a disinformation effort by the other side, timed to influence Ukraine’s possible spring offensive to reclaim territory in the east and the south of the country.

A senior Ukrainian official said that the leak appeared to be a Russian ploy to discredit a counteroffensive. And the Russian bloggers warned against trusting any information in the documents, which one blogger said could be the work of “Western intelligence in order to mislead our command.”

Behind closed doors, chagrined national security officials were trying to find the culprit. One official said it was likely that the documents did not come from Ukrainian officials, because they did not have access to the specific plans, which bear the imprint of the offices of the Pentagon’s Joint Staff. A second official said that determining how the documents were leaked would start with identifying which officials had access to them.

The first tranche of documents appeared to have been posted in early March on Discord, a social media chat platform popular with video gamers, according to Aric Toler, an analyst at Bellingcat, the Dutch investigative site.

In Ukraine, Lt. Col. Yurii Bereza, a battalion commander with Ukraine’s National Guard whose forces have fought in the country’s east in recent months, shrugged off news of the leak.

He noted that information warfare has been so intense that “we can no longer determine where is the truth and where is the lie.”

Natalia Yermak contributed reporting.