More stories

  • in

    Evidence Muddles Durham’s Case on Sussmann’s F.B.I. Meeting

    One disclosure dovetails with the special counsel John Durham’s indictment against Michael Sussmann, while several others clash with it.WASHINGTON — When a special counsel accused a prominent cybersecurity lawyer of lying to the F.B.I. during a September 2016 meeting about Donald J. Trump’s possible links to Russia, the indictment presented a lengthy narrative but the direct evidence appeared lean.The indictment said the lawyer, Michael A. Sussmann, had made a false statement by telling an F.B.I. official that he was not representing a client in presenting the information. Mr. Sussmann, who has pleaded not guilty, has denied saying that. No one else was present and their conversation was not recorded, so the direct and clearly admissible evidence appeared to boil down to one witness.This week, additional pieces of evidence emerged into public view that were not in the indictment — one of which appears to dovetail with the accusation against Mr. Sussmann by the special counsel, John H. Durham, who was appointed during the Trump administration, while several others appear to conflict with it. The material emerged in court filings and at a status conference before a judge on Wednesday.It is not clear whether all of the newly disclosed evidence will be admissible. But the jostling between prosecutors and defense lawyers could offer a preview of aspects of the trial, which they said on Wednesday would last about two weeks and Judge Christopher R. Cooper said could begin in May or early June.While the charge against Mr. Sussmann is narrow, it has received significant political attention in part because Mr. Durham concluded that the Hillary Clinton campaign had helped push the suspicions, which concerned possible secret communications between computer servers associated with Mr. Trump’s company and the Kremlin-linked Alfa Bank. The F.B.I. decided the suspicions were unfounded.In accusing Mr. Sussmann of telling the F.B.I. official — James A. Baker, then the bureau’s general counsel — that he had no clients, Mr. Durham claimed that Mr. Sussmann was actually representing both a technology executive and the Clinton campaign. Mr. Sussmann, via his lawyers, denied that he told Mr. Baker that he had no client, while maintaining he was there on behalf of only the executive, not the campaign.One piece of newly disclosed evidence, described in a filing by Mr. Durham’s team on Tuesday evening, consists of handwritten notes by an F.B.I. lawyer to whom Mr. Baker spoke about the meeting that day. The Durham filing quoted the notes as saying “no specific client.”That evidence is similar to another set of handwritten notes previously cited in the indictment by another F.B.I. official who also spoke to Mr. Baker after the meeting. The indictment quoted those notes as listing Mr. Sussmann’s name, then a dash, then the name of his law firm, then a dash, and then the words “said not doing this for any client.”It is not clear whether such notes — or testimony by the F.B.I. officials who took them — would be admissible at a trial under complex rules of evidence. Those rules generally ban statements made outside court as hearsay, but they make exceptions subject to judges’ interpretations.The indictment also said that in February 2017, Mr. Sussmann met with the C.I.A. and conveyed similar and related concerns, citing a post-meeting memorandum by two agency employees that said he was “not representing a particular client.” Mr. Durham portrayed that as showing Mr. Sussmann had repeated a false statement.But at the hearing on Wednesday, a lawyer for Mr. Sussmann, Sean Berkowitz, cited evidence turned over by the prosecutors last week that muddies that picture by suggesting he may instead have told them he had a client.Emails by agency personnel ahead of the meeting, Mr. Berkowitz said, included statements like “Sussmann said he represents a client who does not want to be known” and “the plan should be to convince Sussmann that it is in his and his client’s interest to go to the F.B.I.” A draft version of the agency’s post-meeting memo also referred to Mr. Sussmann having a client, he said.A prosecutor working for Mr. Durham, Andrew DeFilippis, told the judge that “although we’re not, you know, interested in a full factual debate before the court,” an agency employee had spotted the reference to a client in the draft memo and “corrected” it for the final version. Mr. De Filippis did not address references to a client in the earlier emails.Those disclosures followed a court filing on Monday by Mr. Sussmann’s defense team that revealed contradictory things Mr. Baker had said under oath about the key interaction in Justice Department interviews, which Mr. Durham’s team disclosed to them last week.In 2019 and 2020 interviews, Mr. Baker recalled the interaction in two different ways that each clashed with the indictment’s version. In the first, he said Mr. Sussmann told him the cyberexperts who developed the Alfa Bank theory “were his clients.” In the second, he said Mr. Sussmann never said if he was representing anyone and Mr. Baker didn’t ask, but assumed he had no client.In the Tuesday court filing, Mr. Durham’s team accused the defense of “cherry-picking” the evidence and putting forward a “skewed portrayal.”The 2019 and 2020 interviews “occurred years after the events in question, and Mr. Baker made these statements before he had the opportunity to refresh his recollection with contemporaneous or near-contemporaneous notes,” they said, adding that he had since “affirmed and then re-affirmed his now-clear recollection of the defendant’s false statement.” More

  • in

    Defendant in Case Brought by Durham Says New Evidence Undercuts Charge

    Lawyers for Michael Sussmann, accused by the Trump-era special counsel of lying to the F.B.I., asked for a quick trial after receiving what they said was helpful material from prosecutors.WASHINGTON — The defense team for a cybersecurity lawyer who was indicted in September by a Trump-era special counsel asked a judge on Monday to set a trial date sooner than the prosecutor wants — while disclosing evidence recently turned over to them that appears to contradict the charge.The materials could make it harder for the special counsel, John H. Durham, to prove beyond a reasonable doubt that the cybersecurity lawyer, Michael Sussmann, is guilty of the charge against him: making a false statement to the F.B.I. during a September 2016 meeting about possible links between Donald J. Trump and Russia.The newly disclosed evidence consists of records of two Justice Department interviews of the former F.B.I. official to whom Mr. Sussmann is accused of lying, each of which offers a different version of the key interaction than the version in the indictment. That official is the prosecution’s main witness.The existence of the evidence, which Mr. Durham’s team provided to Mr. Sussmann’s team last week, “only underscores the baseless and unprecedented nature of this indictment and the importance of setting a prompt trial date so that Mr. Sussmann can vindicate himself as soon as possible,” the defense lawyers wrote.While Mr. Durham wants to wait until July 25 to start the trial, they said, the defense team urged the judge to set a start date of May 2.A spokesman for Mr. Durham declined to comment.The indictment centered on a September 2016 meeting between Mr. Sussmann and James A. Baker, who was then the F.B.I.’s general counsel. Mr. Sussmann relayed analysis by cybersecurity researchers who cited odd internet data they said appeared to reflect some kind of covert communications between computer servers associated with the Trump Organization and Alfa Bank, a Kremlin-linked Russian financial institution. (The F.B.I. briefly looked into the Alfa Bank suspicions, but dismissed them as unfounded.)Mr. Durham’s indictment accused Mr. Sussmann of falsely saying he was not there on behalf of any client. Through his lawyers, Mr. Sussmann has denied saying that to Mr. Baker.The indictment also said that Mr. Sussmann was in fact representing both a technology executive and the Hillary Clinton campaign. Mr. Sussmann has maintained he was only there on behalf of the executive, and not the Clinton campaign.Different statements by James Baker, a former F.B.I. general counsel, are at the heart of the legal battle.via C-SPANNo one else was present at the meeting, and if the trial boils down to pitting Mr. Baker’s memory against Mr. Sussmann’s, the newly disclosed evidence will provide fodder for the defense team to show that Mr. Baker’s accounts of that aspect of the meeting have been inconsistent, and to raise doubts about the reliability of the version cited by Mr. Durham.The newly disclosed evidence consists of partly redacted records of two of Mr. Baker’s interviews with the Justice Department. The court filing appended copies of several pages of a transcript and an interview report.In July 2019, Mr. Baker was interviewed by the Justice Department’s inspector general about the meeting. Mr. Baker stated, according to a two-page transcript excerpt, that Mr. Sussmann had brought him information “that he said related to strange interactions that some number of people that were his clients, who were, he described as I recall it, sort of cybersecurity experts, had found.”The newly disclosed evidence also includes a page of a report Mr. Durham’s team made to summarize an interview they conducted with Mr. Baker in June 2020. According to that report, Mr. Baker did not say that Mr. Sussmann told him he was not there on behalf of any client. Rather, he said the issue never came up and he merely assumed Mr. Sussmann was not conveying the Alfa Bank data and analysis for any client.“Baker said that Sussmann did not specify that he was representing a client regarding the matter, nor did Baker ask him if he was representing a client,” the Durham team’s report said. “Baker said it did not seem like Sussmann was representing a client.”Mr. Baker later told Bill Priestap, then the F.B.I.’s top counterintelligence official, about the meeting. According to the indictment, Mr. Priestap’s handwritten notes list Mr. Sussmann’s name and law firm and then, after a dash, states “said not doing this for any client.” (It is not clear whether such notes would be admissible at a trial.)The former Trump administration attorney general, William P. Barr, appointed Mr. Durham to scour the Russia investigation for evidence of wrongdoing by government officials pursuing it. The Sussmann indictment, however, portrayed the F.B.I. as a victim.Mr. Durham used the narrow charge against Mr. Sussmann to put out, in a 27-page indictment, large amounts of other information.He showed that Mr. Sussmann had interacted about Alfa Bank with a colleague at his law firm who represented the Clinton campaign, and that in accounting for his own time on the Alfa Bank matter in law firm billing records, Mr. Sussmann listed the campaign as the client. (Mr. Sussmann had represented the Democratic Party about Russia’s hacking of its servers.)Mr. Durham also put out significant amounts of information about the technology executive and three other cybersecurity researchers who had discovered the odd internet data and developed the theory that it reflected some kind of hidden communications, including mining emails in which they discussed what it might mean.Although Mr. Durham did not charge the researchers with any crime, he insinuated that they did not really believe what they were saying. Mr. Trump and his supporters seized on the indictment, saying it showed the Alfa Bank suspicions were a hoax by Clinton supporters and portraying it as evidence that the entire Russia investigation was unwarranted.Lawyers for those data scientists have pushed back, saying their clients believed their theory was a plausible explanation for the odd data they had uncovered — and still do. They have also accused Mr. Durham of putting forward a misleading portrayal in his indictment by selectively excerpting fragments of their clients’ emails, omitting portions that showed their clients enthusiastically supported the final analysis.The transcript and statement add to materials already in the public record, in which Mr. Sussmann and Mr. Baker recalled that meeting in sworn testimony in ways that do not clearly dovetail with the indictment’s accusation.In a deposition before Congress in 2017, Mr. Sussmann testified that he had sought the meeting on behalf of a client who was a cybersecurity expert and had helped analyze the data. And in a deposition to Congress in 2018, Mr. Baker said he did not remember Mr. Sussmann “specifically saying that he was acting on behalf of a particular client.” More

  • in

    Trump Server's Connections to Alfa Bank Produces Fresh Conflict

    A recent indictment suggested that researchers who found strange internet links between a Russian bank and the Trump Organization did not really believe their own work. They are pushing back.WASHINGTON — The charge was narrow: John H. Durham, the special counsel appointed by the Trump administration to scour the Russia investigation, indicted a cybersecurity lawyer this month on a single count of lying to the F.B.I.But Mr. Durham used a 27-page indictment to lay out a far more expansive tale, one in which four computer scientists who were not charged in the case “exploited” their access to internet data to develop an explosive theory about cyberconnections in 2016 between Donald J. Trump’s company and a Kremlin-linked bank — a theory, he insinuated, they did not really believe.Mr. Durham’s version of events set off reverberations beyond the courtroom. Trump supporters seized on the indictment, saying it shows that suspicions about possible covert communications between Russia’s Alfa Bank and Mr. Trump’s company were a deliberate hoax by supporters of Hillary Clinton and portraying it as evidence that the entire Russia investigation was unwarranted.Emails obtained by The New York Times and interviews with people familiar with the matter, who spoke on the condition of anonymity to discuss issues being investigated by federal authorities, provide a fuller and more complex account of how a group of cyberexperts discovered the odd internet data and developed their hypothesis about what could explain it.At the same time, defense lawyers for the scientists say it is Mr. Durham’s indictment that is misleading. Their clients, they say, believed their hypothesis was a plausible explanation for the odd data they had uncovered — and still do.The Alfa Bank results “have been validated and are reproducible. The findings of the researchers were true then and remain true today; reports that these findings were innocuous or a hoax are simply wrong,” said Jody Westby and Mark Rasch, lawyers for David Dagon, a Georgia Institute of Technology data scientist and one of the researchers whom the indictment discussed but did not name.Steven A. Tyrrell, a lawyer for Rodney Joffe, an internet entrepreneur and another of the four data experts, said his client had a duty to share the information with the F.B.I. and that the indictment “gratuitously presents an incomplete and misleading picture” of his role.Mr. Durham’s indictment provided evidence that two participants in the matter — Mr. Joffe and Michael Sussmann, the cybersecurity lawyer accused of falsely saying he had no client when he brought the findings of the researchers to the F.B.I. — interacted with the Clinton campaign as they worked to bring their suspicions to journalists and federal agents.A spokesman for Mr. Durham declined to comment. The special counsel’s office issued a fresh grand jury subpoena to Mr. Sussmann’s former law firm, Perkins Coie, sometime after Mr. Sussmann was indicted on Sept. 16, in a development first reported on Thursday by CNN and confirmed by a person familiar with the matter. It is unclear whether the subpoena pertained to Alfa Bank or whether Mr. Durham has finished his investigation into that case.Mr. Durham uncovered law firm billing records showing that Mr. Sussmann, who represented the Democratic National Committee on issues related to Russia’s hacking of its servers, had logged his time on the Alfa Bank matter as work for the Clinton campaign. Mr. Sussmann has denied lying to the F.B.I. about who he was representing in coming forward with the Alfa Bank data, while saying he was representing only Mr. Joffe and not the campaign.Mr. Durham also found that Mr. Joffe had met with one of Mr. Sussmann’s law firm partners, Marc Elias, who was then the Clinton campaign’s general counsel, and researchers from Fusion GPS, an investigative firm Mr. Elias had commissioned to scrutinize Mr. Trump’s purported ties to Russia. Fusion GPS drafted a paper on Alfa Bank’s ties to the Kremlin that Mr. Sussmann also provided to the F.B.I.Mr. Durham was appointed in 2019 to scour the Russia investigation for any wrongdoing.Justice Department, via Associated PressIn the heat of the presidential race, Democrats quickly sought to capitalize on the research. On Sept. 15, four days before Mr. Sussmann met with the F.B.I. about the findings, Mr. Elias sent an email to the Clinton campaign manager, Robbie Mook, its communications director, Jennifer Palmieri, and its national security adviser, Jake Sullivan, whose subject line referred to an Alfa Bank article, the indictment said.Six weeks later, after Slate ran a lengthy article about the Alfa Bank suspicions, the Clinton campaign pounced. Mrs. Clinton’s Twitter feed linked to the article and ran an image stating the suspicions as fact, declaring, “It’s time for Trump to answer serious questions about his ties to Russia.”The F.B.I., which had already started its Trump-Russia investigation before it heard about the possible Trump-Alfa connections, quickly dismissed the suspicions, apparently concluding the interactions were probably caused by marketing emails sent by an outside firm using a domain registered to the Trump Organization. The report by the Russia special counsel, Robert S. Mueller III, ignored the issue.The data remains a mystery. A 2018 analysis commissioned by the Senate, made public this month, detailed technical reasons to doubt that marketing emails were the cause. A Senate report last year accepted the F.B.I.’s assessment that it was unlikely to have been a covert communications channel, but also said it had no good explanation for “the unusual activity.”Whatever caused the odd data, at issue in the wake of the indictment is whether Mr. Joffe and the other three computer scientists considered their own theory dubious and yet cynically went forward anyway, as Mr. Durham suggests, or whether they truly believed the data was alarming and put forward their hypothesis in good faith.Earlier articles on Alfa Bank, including in Slate and The New Yorker, did not name the researchers, and used pseudonyms like “Max” and “Tea Leaves” for two of them. Mr. Durham’s indictment did not name them, either.But three of their names have appeared among a list of data experts in a lawsuit brought by Alfa Bank, and Trump supporters have speculated online about their identities. The Times has confirmed them, and their lawyers provided statements defending their actions.The indictment’s “Originator-1” is April Lorenzen, chief data scientist at the information services firm Zetalytics. Her lawyer, Michael J. Connolly, said she has “dedicated her life to the critical work of thwarting dangerous cyberattacks on our country,” adding: “Any suggestion that she engaged in wrongdoing is unequivocally false.”The indictment’s “Researcher-1” is another computer scientist at Georgia Tech, Manos Antonakakis. “Researcher-2” is Mr. Dagon. And “Tech Executive-1” is Mr. Joffe, who in 2013 received the F.B.I. Director’s Award for helping crack a cybercrime case, and retired this month from Neustar, another information services company.In addition, the Alfa Bank suspicions were only half of what the researchers sought to bring to the government’s attention, according to several people familiar with the matter.Their other set of concerns centered on data suggesting that a YotaPhone — a Russian-made smartphone rarely seen in the United States — had been used from networks serving the White House, Trump Tower and Spectrum Health, a Michigan hospital company whose server had also interacted with the Trump server.Mr. Sussmann relayed their YotaPhone findings to counterintelligence officials at the C.I.A. in February 2017, the people said. It is not clear whether the government ever investigated them.The involvement of the researchers traces back to the spring of 2016. DARPA, the Pentagon’s research funding agency, wanted to commission data scientists to develop the use of so-called DNS logs, records of when servers have prepared to communicate with other servers over the internet, as a tool for hacking investigations.DARPA identified Georgia Tech as a potential recipient of funding and encouraged researchers there to develop examples. Mr. Antonakakis and Mr. Dagon reached out to Mr. Joffe to gain access to Neustar’s repository of DNS logs, people familiar with the matter said, and began sifting them.Separately, when the news broke in June 2016 that Russia had hacked the Democratic National Committee’s servers, Mr. Dagon and Ms. Lorenzen began talking at a conference about whether such data might uncover other election-related hacking.Ms. Lorenzen eventually noticed an odd pattern: a server called mail1.trump-email.com appeared to be communicating almost exclusively with servers at Alfa Bank and Spectrum Health. She shared her findings with Mr. Dagon, the people said, and they both discussed it with Mr. Joffe.As a candidate in 2016, President Trump publicly called for Russia to hack Hillary Clinton.Todd Heisler/The New York Times“Half the time I stop myself and wonder: am I really seeing evidence of espionage on behalf of a presidential candidate?” Mr. Dagon wrote in an email to Mr. Joffe on July 29, after WikiLeaks made public stolen Democratic emails timed to disrupt the party’s convention and Mr. Trump urged Russia to hack Mrs. Clinton. By early August, the researchers had combined forces and were increasingly focusing on the Alfa Bank data, the people said. Mr. Joffe reached out to his lawyer, Mr. Sussmann, who would take the researchers’ data and hypothesis to the F.B.I. on Sept. 19, 2016.Defense lawyers contend the indictment presented a skewed portrait of their clients’ thinking by selectively quoting from their emails.The indictment quotes August emails from Ms. Lorenzen and Mr. Antonakakis worrying that they might not know if someone had faked the DNS data. But people familiar with the matter said the indictment omitted later discussion of reasons to doubt any attempt to spoof the overall pattern could go undetected.The indictment says Mr. Joffe sent an email on Aug. 21 urging more research about Mr. Trump, which he stated could “give the base of a very useful narrative,” while also expressing a belief that the Trump server at issue was “a red herring” and they should ignore it because it had been used by the mass-marketing company.The full email provides context: Mr. Trump had claimed he had no dealings in Russia and yet many links appeared to exist, Mr. Joffe noted, citing an article that discussed aspirations to build a Trump Tower in Moscow. Despite the “red herring” line, the same email also showed that Mr. Joffe nevertheless remained suspicious about Alfa Bank, proposing a deeper hunt in the data “for the anomalies that we believe exist.”He wrote: “If we can show possible email communication between” any Trump server and an Alfa Bank server “that has occurred in the last few weeks, we have the beginning of a narrative,” adding that such communications with any “Russian or Ukrainian financial institutions would give the base of a very useful narrative.”Mr. Tyrrell, his lawyer, said that research in the weeks that followed, omitted by the indictment, had yielded evidence that the specific subsidiary server in apparent contact with Alfa Bank had not been used to send bulk marketing emails. That further discussion, he said, changed his client’s mind about whether it was a red herring.“The quotation of the ‘red herring’ email is deeply misleading,” he said, adding: “The research process is iterative and this is exactly how it should work. Their efforts culminated in the well-supported conclusions that were ultimately delivered to the F.B.I.”Michael E. Sussmann during a cybersecurity conference in 2016. He was charged by Mr. Durham with lying to the F.B.I.via C-SPANThe indictment also quoted from emails in mid-September, when the researchers were discussing a paper on their suspicions that Mr. Sussmann would soon take to the F.B.I. It says Mr. Joffe asked if the paper’s hypothesis would strike security experts as a “plausible explanation.”The paper’s conclusion was somewhat qualified, an email shows, saying “there were other possible explanations,” but the only “plausible” one was that Alfa Bank and the Trump Organization had taken steps “to obfuscate their communications.”The indictment suggested Ms. Lorenzen’s reaction to the paper was guarded, describing an email from her as “stating, in part, that it was ‘plausible’ in the ‘narrow scope’ defined by” Mr. Joffe. But the text of her email displays enthusiasm.“In the narrow scope of what you have defined above, I agree wholeheartedly that it is plausible,” she wrote, adding: “If the white paper intends to say that there are communications between at least Alfa and Trump, which are being intentionally hidden by Alfa and Trump I absolutely believe that is the case,” her email said.The indictment cited emails by Mr. Antonakakis in August in which he flagged holes and noted they disliked Mr. Trump, and in September in which he approvingly noted that the paper did not get into a technical issue that specialists would raise.Mr. Antonakakis’ lawyer, Mark E. Schamel, said his client had provided “feedback on an early draft of data that was cause for additional investigation.” And, he said, their hypothesis “to this day, remains a plausible working theory.”The indictment also suggests Mr. Dagon’s support for the paper’s hypothesis was qualified, describing his email response as “acknowledging that questions remained, but stating, in substance and in part, that the paper should be shared with government officials.”The text of that email shows Mr. Dagon was forcefully supportive. He proposed editing the paper to declare as “fact” that it was clear “that there are hidden communications between Trump and Alfa Bank,” and said he believed the findings met the probable cause standard to open a criminal investigation.“Hopefully the intended audience are officials with subpoena powers, who can investigate the purpose” of the apparent Alfa Bank connection, Mr. Dagon wrote.In the end, Mr. Durham came to investigate them. More

  • in

    Michael Sussmann, Lawyer Accused of Lying in F.B.I. Meeting, Pleads Not Guilty

    A prominent cybersecurity lawyer pleaded not guilty on Friday to a charge of lying to the F.B.I. during a meeting five years ago about possible links between Donald J. Trump and Russia.The lawyer, Michael A. Sussmann, appeared before a magistrate judge in Washington, where he was indicted a day earlier. After a brief hearing, he was released on certain conditions, including travel restrictions.The indictment centers on whether Mr. Sussmann lied about who he was representing at a September 2016 meeting with a top F.B.I. lawyer. At that meeting, Mr. Sussmann provided analysis by cybersecurity researchers who said that unusual internet data might indicate a covert communications channel between computer servers associated with the Trump Organization and with Alfa Bank, a Kremlin-linked financial institution.The indictment says Mr. Sussmann falsely told the F.B.I. lawyer that he had no clients, but he was really representing both a technology executive and the Hillary Clinton campaign. Mr. Sussmann’s lawyers deny that he ever said he had no clients, and contend that he was there on behalf of only the executive and not Mrs. Clinton’s campaign.The F.B.I. looked into the concerns about Alfa Bank but found insufficient evidence to support them, and the special counsel who later took over the Russia investigation, Robert S. Mueller III, ignored the matter in his final report.Mr. Sussmann is a former computer crimes prosecutor who worked for the Justice Department for 12 years. In 2016, he represented the Democratic National Committee on issues related to Russia’s hacking of its servers.Mr. Sussmann’s lawyers have accused the special counsel, John H. Durham, of seeking an indictment of their client for political reasons. Mr. Durham was tapped in 2019 by Trump administration officials to review the F.B.I.’s investigation after the president and his allies cast doubt on its legitimacy and the Justice Department’s inspector general found major problems with one aspect of the inquiry — wiretapping surveillance applications — and in one related instance, criminal conduct.In the weeks before the presidential election, then-Attorney General William P. Barr appointed Mr. Durham as special counsel, ensuring the inquiry would continue no matter who won the White House. In a news release announcing the indictment on Thursday, the Justice Department said Mr. Durham’s investigation was continuing. More

  • in

    Trump-Era Special Counsel Secures Indictment of Lawyer for Firm With Democratic Ties

    The defendant, Michael Sussmann, is accused of lying to the F.B.I. in a meeting about Trump and Russia. He denies wrongdoing.WASHINGTON — The special counsel appointed by the Trump administration to scrutinize the Russia investigation obtained a grand jury indictment on Thursday of a prominent cybersecurity lawyer, accusing him of lying to the F.B.I. five years ago during a meeting about Donald J. Trump and Russia.The indictment secured by the special counsel, John H. Durham, also made public his findings about an episode in which cybersecurity researchers identified unusual internet data in 2016 that they said suggested the possibility of a covert communications channel between the Trump Organization and Alfa Bank, a Kremlin-linked financial institution.He concluded that the Clinton campaign covertly helped push those suspicions to the F.B.I. and reporters, the indictment shows. The F.B.I. looked into the questions about Alfa Bank but dismissed them as unfounded, and the special counsel who later took over the Russia investigation, Robert S. Mueller III, ignored the matter in his final report.The charging of the lawyer, Michael A. Sussmann, had been expected. He is accused of falsely telling a top F.B.I. lawyer that he was not representing any client at the meeting about those suspicions. Prosecutors contend that he was instead representing both a technology executive and the Hillary Clinton campaign.“Sussmann’s false statement misled the F.B.I. general counsel and other F.B.I. personnel concerning the political nature of his work and deprived the F.B.I. of information that might have permitted it more fully to assess and uncover the origins of the relevant data and technical analysis, including the identities and motivations of Sussmann’s clients,” the indictment said.Mr. Sussmann’s defense lawyers, Sean Berkowitz and Michael Bosworth, have denied the accusation, insisting that he did not say he had no client and maintaining that the evidence against him is weak. They also denied that the question of who Mr. Sussmann was working for was material, saying the FB.I. would have investigated the matter regardless.“Michael Sussmann was indicted today because of politics, not facts,” they said on Thursday. “The special counsel appears to be using this indictment to advance a conspiracy theory he has chosen not to actually charge. This case represents the opposite of everything the Department of Justice is supposed to stand for. Mr. Sussmann will fight this baseless and politically inspired prosecution.”A former computer crimes prosecutor who worked for the Justice Department for 12 years, Mr. Sussmann in 2016 represented the Democratic National Committee on issues related to Russia’s hacking of its servers.He has been a cybersecurity lawyer for 16 years at the law firm Perkins Coie, which has deep ties to the Democratic Party. A colleague of Mr. Sussmann’s, Marc Elias, was the general counsel to the Clinton campaign. He left the law firm last month.The firm said in a statement on Thursday that Mr. Sussmann had also departed: “In light of the special counsel’s action today, Michael Sussmann, who has been on leave from the firm, offered his resignation from the firm in order to focus on his legal defense, and the firm accepted it.”The charge against him centers on a Sept. 19, 2016, meeting with the F.B.I. lawyer, James A. Baker, in which Mr. Sussmann relayed concerns about the odd internet data. Cybersecurity researchers had said it might be evidence of clandestine communications channel between computer servers associated with the Trump Organization and with Russia’s Alfa Bank.The case against Mr. Sussmann turns on Mr. Baker’s recollection that Mr. Sussmann told him he was not at the meeting on behalf of any client — which Mr. Sussmann denies saying. There were no witnesses to their conversation.The indictment says Mr. Baker later briefed another F.B.I. official — apparently Bill Priestap, the bureau’s top counterintelligence official — about the meeting, and that Mr. Priestap’s notes say Mr. Baker recounted that Mr. Sussmann said he was “not doing this for any client.” (It is not clear whether such notes would be admissible at a trial.)In 2017, Mr. Sussmann testified under oath to Congress that he was representing the unnamed technology executive, and his legal team agrees that executive was his client at the meeting — but the only one.Internal law firm billing records, however, show that Mr. Sussmann had been logging his time on Alfa Bank matters to the Clinton campaign, the indictment says, contending that the campaign was his client, too. Those records are said to also show that Mr. Sussmann met or spoke with Mr. Elias about Alfa Bank repeatedly.Seeking to head off any indictment, Mr. Sussmann’s defense lawyers had argued to the Justice Department that the billing records were misleading and that he was not at the meeting at the direction or on behalf of the Clinton campaign, according to people familiar with the case. They also denied that the records could be fairly interpreted as showing that he billed the meeting with Mr. Baker to the campaign, as the indictment accuses him.Mr. Durham is known to have been closely scrutinizing the Alfa Bank episode since last fall, including using a grand jury to subpoena documents and question witnesses in ways that suggested he was pursuing a theory that the data had been manipulated or the analysis of it knowingly torqued.The 27-page indictment disclosed much of what he found, including quoting extensively from internal communications of unnamed researchers.The unidentified technology executive whom Mr. Sussmann represented was not the first researcher to scrutinize the data. But his company had access to large amounts of internet data, and he came to play an important role in driving the research and analysis, which he told Mr. Sussmann about around July 2016, the indictment said.In August of that year, the technology executive outlined to other researchers the goal of the effort, saying that unspecified “VIPs” wanted to find “true” information that would merit closer scrutiny. Noting that Mr. Trump had claimed he had no interactions with Russian financial institutions, the executive wrote that data suggesting that was false “would be jackpot” and would “give the base of a very useful narrative.”The executive also wrote: “Being able to provide evidence of *anything* that shows an attempt to behave badly in relation to this, the VIPs would be happy. They’re looking for a true story that could be used as the basis for closer examination.”But one of the researchers working on the project worried that their analysis had weaknesses and that suggested they all shared anti-Trump sentiment.“The only thing that drive[s] us at this point is that we just do not like” Trump, the indictment quoted one unnamed researcher as writing. “This will not fly in eyes of public scrutiny. Folks, I am afraid we have tunnel vision. Time to regroup?”In early September, the indictment said, Mr. Sussmann met with a New York Times reporter who would later draft a story about Alfa Bank, and also began work on a so-called white paper that would summarize and explain the researchers’ data and analysis, billing the time to the Clinton campaign.On Sept. 12, the indictment said, Mr. Sussmann called Mr. Elias, the Clinton campaign lawyer, and spoke about his “efforts to communicate” with the Times reporter about the Alfa Bank allegations. Both billed the call to the campaign. And three days later, Mr. Elias exchanged emails with top campaign officials about the matter.In the meantime, on Sept. 14, five days before Mr. Sussmann met with the F.B.I., the technology executive emailed three researchers helping him with data. The executive sought to ensure the analysis they were assembling would strike security experts as simply “plausible,” even if it fell short of demonstrably true, prosecutors said.Mr. Sussmann also continued to push the Alfa Bank story to reporters. A month before the election, as Times editors were weighing whether to publish an article the reporter had drafted, Mr. Sussmann told him he should show the editors an opinion essay saying the paper’s investigative reporters had not published as many stories regarding Mr. Trump as other media outlets, the indictment said.Michael E. Sussmann, a lawyer from the firm Perkins Coie, during a cybersecurity conference in 2016.via C-SPANAttorney General William P. Barr appointed Mr. Durham in May 2019 to scour the Russia investigation for any wrongdoing. Both Mr. Trump and Mr. Barr stoked expectations among Mr. Trump’s supporters that the prosecutors would uncover grave offenses by high-level government officials and support claims that the Russia investigation was a plot concocted by the so-called deep state to sabotage Mr. Trump.To date, Mr. Durham’s investigation has fallen short of those expectations. Out of office, Mr. Trump has repeatedly issued statements fuming, “Where’s Durham?”The current attorney general, Merrick B. Garland, said at his confirmation hearing in February that he would let Mr. Durham continue to work and told Congress in July that he agreed with Mr. Barr’s earlier direction that Mr. Durham should eventually submit a report in a form that could be made public.Funding for most Justice Department operations, like much of the federal government, is controlled by an annual budget that covers a fiscal year that ends on Sept. 30. Spokesmen for Mr. Garland and Mr. Durham have declined to answer questions about whether Mr. Durham’s office has funding approval to continue operating beyond this month.But in announcing the indictment of Mr. Sussmann, the Justice Department said, “The special counsel’s investigation is ongoing.” More