Found it.


Experts pointed to the Democratic National Committee email hack that happened earlier this year. Metadata from the stolen and leaked documents showed the hackers had edited documents. For example, hackers were kicked out of the DNC network June 11, yet among their documents is a file that was created on June 15, found Thomas Rid, a war studies professor at King’s College London.

A few weeks later, Guccifer 2.0, the hacker believed to have Russian ties, released documents supposedly stolen from the Clinton Foundation. But security analysts reviewed the documents and found that they actually came from the DNC hacks, not the foundation. And some of the information was likely fabricated, like a folder conspicuously titled "Pay to Play."

In massive document dumps like the Podesta email leak, the risk of encountering altered documents is heightened because it’s easy to slip them in among thousands of genuine documents, said Susan Hennessey, a Brookings Institution fellow and former lawyer for the National Security Agency.