Leaks

1. We read reporting by outlets that examined the material, and assessments by researchers, courts or the affected party. We do not read, download or browse the leaked material itself.
2. A leak is Verified only when a government, a court or the affected organisation confirms it, or several credible outlets and technical analysts independently reached the same conclusion.
3. A claim of a leak is not evidence of a leak. When the only source is the claimant, the entry is Unknown or Alleged and says what researchers or journalists found when they checked.
4. Every page separates three things: what is confirmed, what is only claimed, and the reported impact. Attribution to a state is shown as the claim of whoever made it.
5. We name only people prominently named in major reporting or in court coverage, never private individuals or low-level staff. We link to articles and court or agency pages, never to dumps or mirrors.

What the tags mean for leaks

• VERIFIED Authenticity confirmed by a government, a court record, the affected organisation, or by several credible outlets and forensic analysts working independently. Example: Vault 7 (a CIA programmer was convicted of the theft); the Pentagon Papers.
• ALLEGED Claimed, and partly confirmed: some material checked out, or the leaker, the origin or the attribution is asserted but not established. Charges and indictments are allegations until proven. Example: The Pegasus Project list (inclusion is not proof of infection); the DNC leaks (attribution by indictment).
• UNKNOWN Claimed, and no independent confirmation either way. We say so and do not guess. Example: A forum seller's claim that reporters could not verify.
• DEBUNKED Shown to be fake, altered or exaggerated by documented evidence. The tag applies to the claim or the altered version, not to an underlying genuine leak. Example: Doctored copies of the 2023 Discord documents.