They wanted to hold Exxon accountable. Then they got hacked. | Grist
Skip to content
Grist home
Donate
Sign up for The Weekly
We hand-package the week’s best Grist stories . Delivered free every Saturday morning.
Grist home
Donate
Sign up for The Weekly
We hand-package the week’s best Grist stories . Delivered free every Saturday morning.
Grist home
Donate
Sign up for The Weekly
We hand-package the week’s best Grist stories . Delivered free every Saturday morning.
They wanted to hold Exxon accountable. Then they got hacked.
A decade after climate activists’ emails were breached, a court case is shedding new light on who allegedly orchestrated the hacking.
By Hilary Beaumont
Illustration by Grist / Getty Images
Jul 15, 2026
Topic
Climate + Accountability
Share/Republish
Copy Link
Republish
Copy Link
SMS
Republish
Bluesky
This story is published in partnership with the Guardian.
On a cold January morning in 2016, Kert Davies joined a group of climate advocates and lawyers at the Rockefeller Family Fund’s office in Upper Manhattan to discuss an audacious goal: holding Exxon Mobil, one of the world’s largest fossil fuel companies, accountable for climate change. A few months earlier, a set of explosive media reports had revealed that the company’s own scientists determined as early as 1982 that the extraction and burning of fossil fuels caused climate change — but Exxon went on to fund climate denial campaigns anyway.
For Exxon, it was a public relations crisis that carried potentially devastating legal consequences. Davies, the founder of the Climate Investigations Center, a group that monitors the fossil fuel industry, had been strategizing with other climate advocates to make those consequences stick, using the hashtag #ExxonKnew to raise public awareness.
About a month after the meeting in Manhattan, Davies received the first fishy email. It appeared to be from Facebook and said, “Kert, you have 5 poke.” Similar messages arrived over the next few days — emails that looked like notifications from people on Facebook, Twitter, and LinkedIn.
Not realizing he was being phished, Davies clicked some of the links embedded in the strange messages. But he soon felt a creeping sense of dread. In early March, he asked his colleagues on a climate activist listserv: “Has anybody received weird emails?” They replied that they had. Some had clicked links and entered their passwords.
Inundated with ominous emails, the feeling of constant danger started to stifle the group’s communication. Then, the following month, a Wall Street Journal reporter reached out to Davies about a detailed agenda she had obtained for the January meeting he’d attended at the Rockefeller Family Fund’s office. In April 2016, details from the email were published by the Wall Street Journal and the Washington Free Beacon, a conservative news publication, which alleged “secret coordination” against Exxon by climate activists.
Although Davies didn’t think it was unusual for environmental advocates to meet to strategize against one of the world’s largest polluters, Exxon soon latched onto the media reports to fight subpoenas and lawsuits it was now facing from 17 attorneys general. Defending itself from the investigations, Exxon quoted the meeting agenda in its court filings to argue that activists were conspiring against the company.
A criminal investigation would later reveal that the email obtained by the two publications had been hacked. But details about who ordered the hack have long been a mystery. Now, court documents allege that the hack was ordered by a firm representing Exxon itself — the very company Davies and others were trying to hold accountable for climate deception.
An Exxon Mobil gas refinery, as seen in March 2006 in Baytown, Texas.<br>Benjamin Lowy / Getty Images
The potential link to the oil company came to light last year, after the U.S. government issued an arrest warrant and attempted to extradite Israeli private investigator Amit Forlit from the U.K. Suddenly, Forlit was facing hacking and wire fraud charges that could land him in prison for up to 45 years. In the indictment from the U.S. attorney’s office in New York, which was unsealed earlier this year, prosecutors alleged that a public affairs firm working on behalf of an oil giant matching Exxon’s description hired Forlit to execute a project that involved hacking climate activists. In court documents, Forlit referenced the indictment and alleged that the hacking was commissioned by DCI group, a public affairs firm with a longtime relationship with Exxon. Separately, Reuters reported that the FBI had investigated DCI Group regarding the hacking operation.
DCI Group and Exxon deny involvement. Exxon Mobil did not reply to a request for comment, however, the company has previously said it has not been “involved in, nor are we aware of, any hacking activities. If there was any hacking involved, we...