The FBI has been told about a cyberattack on the campaign of David Min, a Democratic congressional candidate who lost in his primary for the 45th congressional district in Orange County, two sources tell CNN.
Reuters first reported the story and provided a detailed account of the timeline of events.
The congressional district spans across an inland portion of O.C., including the communities of Tustin, Anaheim Hills, Aliso Viejo, Laguna Niguel and other nearby areas. It’s currently represented by Republican Congresswoman Mimi Walters.
The sources — one person familiar with the Min campaign and another familiar with the Democratic Congressional Campaign Committee — said the alleged attack took place earlier this year.
RELATED: Democrat who challenged GOP congressman said he was hacked
The person familiar with Min’s campaign said the campaign became aware of the hack in March. The Democratic Congressional Campaign Committee told the campaign it was one of the most sophisticated hacks it had seen this election cycle at that point, based on how the hackers had masked the attack and the malware it had implanted, the source said.
In fact, the campaign didn’t detect the hack on its own. The campaign was using shared office space in Irvine and the organization running that office space sent a building-wide email saying someone on the network had been infected.
The source said it was a spear phishing attack and that the source had been told the hackers could monitor the keystrokes of some campaign staffers.
Due to a lack of resources, the campaign didn’t undertake a forensic audit, this person said.
Senior campaign staff met with the FBI, the source said, but didn’t go public with information because the campaign didn’t want the incident to be a distraction.
Min’s former campaign manager, Paige Hutchinson, declined to comment.
CNN has reached out to the FBI for comment.