Chelsea Manning: 750,000 Military Documents and Diplomatic Cables Released to WikiLeaks
US Army intelligence analyst Chelsea Manning downloaded 750,000 classified diplomatic cables and military documents onto a CD disguised as a Lady Gaga album and provided them to WikiLeaks, triggering the largest classified leak in US history.
Background
Chelsea Manning (then Bradley Manning) was a 22-year-old US Army intelligence analyst with top-secret clearance deployed to Iraq. Manning had access to two classified networks: SIPRNet (Secret Internet Protocol Router Network) for classified US military communications and JWICS for top-secret materials.
The Attack
Manning exploited broad access to SIPRNet that had been granted post-9/11 to enable intelligence sharing. She downloaded hundreds of thousands of records including the "Collateral Murder" gun camera video showing a 2007 Baghdad helicopter attack, 250,000 US diplomatic cables, 400,000 Iraq War field reports, and 90,000 Afghanistan War reports. The files were burned to a CD while humming and lip-syncing to Lady Gaga — a technique specifically designed to appear routine to anyone observing. She provided the data to WikiLeaks in multiple batches.
Response
Manning was arrested in May 2010 after boasting to hacker Adrian Lamo, who reported her to the FBI. She was court-martialled and sentenced to 35 years in prison, later commuted to 7 years by President Obama. The US government charged WikiLeaks founder Julian Assange with conspiracy under the Espionage Act.
Outcome
The Manning/WikiLeaks releases damaged diplomatic relationships, endangered sources and informants, and triggered a decade-long US government debate about classification, over-sharing, and insider threat programmes. The cables are still quoted in diplomatic analysis today. Manning was pardoned in 2017.
Key Takeaways
- Principle of least privilege must apply even to intelligence analysts — access should be limited to operationally necessary data
- Insider threat programmes must monitor for large-volume data copying even from authorised systems
- The post-9/11 decision to dramatically expand access to SIPRNet had foreseeable insider threat consequences
- USB and removable media controls are essential in classified environments — not just theoretical policy