New details from a U.S. criminal case have surfaced a decade after climate advocates pushing the #ExxonKnew campaign were targeted in phishing attacks. Court filings now allege the operation was commissioned by a public affairs firm working for Exxon Mobil. Both the company and the firm deny any involvement.
The alleged scheme began after a January 2016 strategy meeting at the Rockefeller Family Fund office in Manhattan. Within weeks, participants including Kert Davies of the Climate Investigations Center started receiving phishing emails that appeared to come from social media platforms. Some clicked the links, allowing access to their accounts.
Details from one hacked email reached the Wall Street Journal and Washington Free Beacon in April 2016. Those reports were later cited by Exxon in court filings opposing investigations by state attorneys general. Prosecutors now say the materials originated from the hacking operation.
In April 2026, an indictment against Israeli investigator Amit Forlit was unsealed. It claims a lobbying firm with ties to Exxon hired Forlit to target climate advocates and that stolen documents reached the client. Forlit was extradited from the United Kingdom and has pleaded not guilty. Exxon and the DCI Group have both rejected any connection to the attacks.
