Last week we learned the broad outlines of how John Podesta’s emails came to be stolen by Russian hackers. By using a phishing attack, they were able to get Podesta to give them his login credentials. All of this served to let people, included me, poke a little fun at Podesta. As it turns out, Podesta was not an idiot. He reported the attack and got bad advice.

Phishing attack sent to Podesta March 19. He forwarded to campaign tech team, which told him it was real! OOPS!!! https://t.co/7YewaR3ilG pic.twitter.com/ro8lJRS84i

— Phil Kerpen (@kerpen) October 28, 2016

If you look at these documents you find Podesta was suspicious of the request to change a password and notified the IT people at “clintonemail.com”.

The URL to reset the email is a bit.ly URL that is associated with a Russian hacker group.

This was who answered the email

And this was the answer he got:

I’m assuming this guy just glanced at the email, assumed it was legit, and here we are.

Keep in mind, this guy was maintaining the clintonemail.com domain. So if you think they weren’t hacked I’d suggest thinking again.