Hacked, Leaked, Reported: Journalistic Practices and the Logics of Disclosure in a Turbulent Cyber Landscape

Journalists increasingly report on data that surface through direct hacks, hack-and-leak operations, cybercrime leaks, and large-scale data dumps. In this environment, the motives and ethical boundaries of hacker sources are often unclear, blurring the lines between crime, espionage and hacktivism. This ambiguity creates crucial editorial and ethical challenges, especially when journalists receive data obtained through cyberattacks and offered for its political or informational value. More complex than more traditional investigations involving whistleblowers or other controversial but familiar source relationships, these reporting scenarios define a new reality for journalists covering cyber-related issues and, increasingly, other topics. This paper examines how journalists navigate these dilemmas by analyzing their editorial choices, investigative techniques, and verification processes. It draws on qualitative interviews with expert journalists in the US, Europe, and the UK who routinely work with hacked materials and interact with hacker sources across beats such as technology, cybersecurity, conflict, and politics. The article aims to illuminate how journalists manage relationships with hacker sources, assess the credibility and origin of digital leaks, and adopt transparency measures when reporting on them. Overall, the paper highlights emerging but increasingly central practices shaping journalism in an era where reporting on and from cyberspace and through cyber-derived sources has become essential.