Cambridge Analytica, Facebook and the Kremlin

Chapter 11 of our series on how Russia attacked the 2016 U.S. election to help Trump win.

Last week, we explored how the Kremlin’s hackers struck at the heart of the Democratic Party, stealing a vast cache of data that was weaponized to tilt the 2016 election toward Donald Trump. This week, we examine the networks, platforms, and private actors that shaped the digital infrastructure on which Russia would later launch its most extensive and successful intelligence operation since the Cold War.

Years before the first phishing email reached Hillary Clinton Campaign Chairman John Podesta, and long before Russian intelligence exfiltrated a single document, a series of parallel developments was quietly taking shape beneath the surface. Western tech executives were actively cultivating strategic relationships with the Kremlin, opening channels that would prove significant in the years to come.

In London, a British data firm was constructing a psychological profiling machine on a scale never before seen, blending commercial design with techniques drawn from military and behavioral science. At the same time, Russian intelligence services were institutionalizing their influence apparatus, transforming ad hoc online operations into a disciplined, state-backed infrastructure designed for long-term political interference and hybrid warfare. And surrounding it all, transnational oligarchic financial networks were embedding themselves into companies and platforms that would soon play decisive roles in reshaping politics and societies across the West.

Among the companies in this emerging nexus were Cambridge Analytica and its parent, SCL Group — entities positioned at the intersection of data, power, and influence.

SCL, Cambridge Analytica, and the Ownership Web

Behind Cambridge Analytica was SCL Group, a British psychological-operations outfit that specialized in behavioral profiling and strategic communications. For years, SCL operated in the shadows of the defense and intelligence world, taking on military and government work that fused data science with influence operations. Internally, its executives described their work as “psychological warfare” — the application of influence techniques to shape perceptions and behavior at scale. What distinguished SCL was not only the nature of its work but the structure of its ownership: the company’s shares and board representation were, at points in time, linked to London financiers whose networks overlapped with figures operating in or adjacent to Kremlin-aligned financial networks. Its founder, Nigel Oakes, grew up mingling with British royalty and once said of his business practices, “We use the same techniques as Aristotle and Hitler... We appeal to people on an emotional level to get them to agree on a functional level.”

Julian Wheatland, later Cambridge Analytica’s CEO, joined SCL’s board as a representative tied to Vincent and Robert Tchenguiz — controversial Iranian-British property tycoons and former investors in SCL whose opaque offshore structures and aggressive financial schemes had long drawn scrutiny in London’s energy and finance circles. The brothers later became embroiled in a scandal involving the Israeli private intelligence firm Black Cube, which they hired during a legal battle with the UK Serious Fraud Office. Black Cube operatives posed as investors and journalists to infiltrate the investigation — a covert operation that exposed the Tchenguiz network’s willingness to deploy espionage tactics to protect its interests. Black Cube would later surface again in the United States, targeting journalists, including the journalist Ronan Farrow, in an effort to discredit his investigation into Harvey Weinstein’s sexual misconduct.

The Tchenguiz brothers overlapped with figures close to Dmytro Firtash, the Ukrainian gas intermediary and Kremlin operative whose business empire controlled a critical junction between the state-controlled Russian natural gas giant Gazprom and Europe. In London, Firtash’s associates were tied to Tchenguiz-controlled entities and Firtash’s Group DF.

U.S. authorities long viewed Firtash as a conduit for Kremlin influence. In an April 2018 letter, Senator Roger Wicker described Firtash as a “direct agent of the Kremlin,” alleging that he was using proceeds from “ongoing corruption” to delay his extradition to Chicago, where he has been under federal indictment since 2014. Firtash has been repeatedly identified in U.S. court filings and intelligence assessments as a mafia-aligned oligarch embedded in Kremlin operations, operating at the intersection of political influence, energy monopolies, and organized crime. He was also a longtime partner of Paul Manafort, who served as Trump’s campaign manager during the 2016 election.

Firtash resurfaced during the 2020 election, when Trump’s operatives sought damaging information on Joe Biden and his son Hunter from Russian intelligence operatives, in an effort to discredit him during the election. Rudolph Giuliani’s team reached out to Firtash’s network, signaling that legal assistance in his U.S. extradition case might be possible in exchange for information on the Bidens.

From this network, Cambridge Analytica was spun off in 2013 as SCL’s American political arm, where at one point it was headquartered at 1211 Avenue of the Americas – the same address that houses Rupert Murdoch’s empire, including the headquarters of Fox News. According to the Senate Intelligence Committee, the firm emerged from conversations between SCL Group director (and later CEO of Cambridge Analytica) Alexander Nix, Breitbart News Executive Chairman (and later Trump campaign strategist) Steve Bannon, and Republican megadonor Robert Mercer, who supplied the funding and political backing to bring SCL’s psychological profiling methods into U.S. elections. By 2014, Cambridge Analytica was active in dozens of congressional and state races. And by 2016, it had shifted its focus from working for Ted Cruz to Donald Trump, embedding itself inside the Republican campaign apparatus just as the presidential race intensified.

Mercer’s investment — and Bannon’s strategic interest — then transformed Cambridge Analytica from a niche operation into a central pillar of Republican campaign infrastructure. Whatever the internal disputes over which datasets or models ultimately powered the Trump campaign apparatus, Mercer’s money and Bannon’s strategic direction embedded the firm inside the party’s machinery just as the 2016 race intensified.

Zuckerberg, Milner, and Yandex

Prime Minister Dmitri A. Medvedev, left, met with Mark Zuckerberg, chairman and CEO of Facebook, at Medvedev’s Gorky residence outside Moscow. Credit: Pool photo by Yekaterina Shtukina

The story of how Russian networks penetrated the digital platforms that would later be weaponized for election interference also runs through Facebook.

In 2011, Facebook Chairman and CEO Mark Zuckerberg and then-Russian Prime Minister Dmitry Medvedev reportedly met on the sidelines of the e-G8 forum in Deauville, France. During their 2012 meeting in Moscow, Medvedev recalled the earlier encounter, saying: “You said you felt a little unusual in this company. In any case, we had an interesting discussion, although not about every issue. That meeting was a long time ago, at least according to the modern pace of life – over a year ago in fact. I can tell you that Russia has been busy since then. You probably know that apart from oil, gas, gold and diamonds, Russia also has an IT industry.”

In October 2012, shortly after Facebook went public, Zuckerberg traveled to Moscow for a highly publicized visit. His first stop was Medvedev’s residence at Gorky. The two posed for photographs, and Zuckerberg presented Medvedev with a gray T-shirt printed with his Facebook URL. Behind the smiles, Medvedev urged Zuckerberg to open a Facebook research center in Russia and cautioned him against poaching Russian engineers. The timing was notable: the Kremlin had just weathered the largest wave of protests since the 1990s, many of which were organized through Facebook. Rather than banning the platform outright, Russian officials moved to cultivate influence with its leadership. According to Medvedev’s press office, the two men even joked about Facebook’s importance in the upcoming U.S. presidential campaign — an exchange that, in hindsight, foreshadowed the platform’s role in the 2016 election.

During the same trip, Medvedev’s press secretary said that Medvedev and Zuckerberg would also discuss Russian-based startups, and that Deputy Prime Ministers Vladislav Surkov and Arkady Dvorkovich were expected to attend. Surkov was the Kremlin’s chief political engineer, responsible for creating fake opposition parties and constructing the parallel reality that underpins Putin’s authoritarian system, while Dvorkovich would later reappear in 2016, reportedly meeting Trump campaign adviser Carter Page during his Moscow trip.

These were not isolated encounters but part of a sustained channel between Facebook leadership and Kremlin power brokers. By the time Russian operatives began exploiting Facebook’s advertising systems and algorithms, Moscow had already spent years cultivating these relationships.

As the Kremlin pushed to project its economic power abroad, Russian oligarchs and state-linked financiers began pouring money into U.S. tech companies. Yuri Milner, a Russian venture capitalist with longstanding ties to Vladimir Putin’s inner circle, used his investment company DST Global to embed Russian capital deep inside Silicon Valley. A former World Bank analyst, Milner rose to prominence through Mail.ru, one of Russia’s largest internet companies, and became closely involved in the Kremlin’s “modernization” initiatives during Medvedev’s presidency, which sought to align state-backed capital with emerging tech sectors.

In 2009, DST invested $200 million in Facebook, securing nearly a 2 percent stake and positioning Milner as a key foreign player in the company’s growth. Two years later, in 2011, DST bought shares in Twitter on the secondary market. Part of that funding came from VTB, a state-controlled state bank deeply intertwined with Russian intelligence and later sanctioned by the United States over Russia’s 2014 annexation of Crimea and 2022 invasion of all of Ukraine.

Milner’s financial reach extended into Trump’s orbit as well. In 2015, one of his investment vehicles funneled $850,000 into Cadre, Jared Kushner’s real estate startup — a move later revealed as part of a broader Kremlin-linked financing scheme that channeled Russian state-backed capital into major U.S. tech firms and Trump’s inner circle.

Around the same period, Facebook struck a deal with Yandex, Russia’s dominant search engine, and granted it privileged access to Facebook’s “Friend Finder” API, giving it a direct line into the platform’s user network data. Shortly after the deal was struck, Yandex confirmed that it was handing confidential information to the FSB, including data on donors to Alexey Navalny’s anti-corruption site. By 2014, as Russia was waging information warfare against Ukraine during the EuroMaidan protests and preparing to invade Ukraine, Facebook expanded the partnership, granting Yandex access to its “firehose” of public data for users in Russia, Ukraine, and other CIS states — an unfiltered stream of posts, likes, and activity. By extending this level of access to a Kremlin-compliant company already cooperating with Russian security services, Facebook effectively gave Russian intelligence unprecedented visibility into regional and cross-border social networks at the exact moment Moscow was building the digital architecture of its disinformation and influence operations.

Inside the Cambridge Analytica Operation

While oligarchic capital and platform structures were being shaped in London and Silicon Valley, Cambridge Analytica was quietly assembling a psychological targeting system designed to plug directly into the heart of Western elections.

In 2013, Cambridge academic Aleksandr Kogan launched thisisyourdigitallife, a personality quiz app that harvested data not only from users but also from their entire Facebook friend network. Under Facebook’s permissive API rules at the time, this single app vacuumed up information from tens of millions of profiles — including likes, location data, relationship graphs, and personality traits inferred from online behavior. Kogan passed the full dataset to Cambridge Analytica, which used it as the raw material for its psychographic models.

The firm then fused this Facebook data with state voter rolls, consumer marketing databases, property records, credit files, and the Republican National Committee’s voter files. Using machine learning, Cambridge Analytica classified individuals along the “OCEAN” personality model — Openness, Conscientiousness, Extraversion, Agreeableness, and Neuroticism —assigning psychological scores that could predict how specific people would respond to different kinds of messages. These models didn’t just segment voters demographically but mapped their emotional triggers.

In practice, this meant Cambridge Analytica could identify whom to target, and how. Voters flagged as anxious were fed ads emphasizing threats and security; those identified as conscientious received messages highlighting law and order. More volatile segments could be nudged with provocative cultural content. All of this fed into automated microtargeting workflows that pushed tailored messages across Facebook, Google, YouTube, and programmatic ad exchanges. Campaign strategists could now reach voters at an industrial scale with psychologically tuned messages invisible to the broader public.

The company first tested these techniques in support of Ted Cruz, running granular experiments in early primary states to measure how different psychological appeals affected behavior. When Cruz faltered, Cambridge Analytica pivoted to Donald Trump’s campaign. It embedded staff inside Trump’s digital headquarters, integrating its psychographic models with the RNC’s voter data systems. Steve Bannon, then the company’s vice president, ensured that its psychological profiling methods became central to the campaign’s strategy.

Behind the scenes, Cambridge Analytica’s technical work was supported by AggregateIQ, a Canadian firm closely linked to SCL. AggregateIQ built much of the software infrastructure, including voter data platforms and targeting tools used not just in the U.S. but also in Brexit campaigns. These tools enabled campaigns to upload raw voter data, score individuals psychographically, and deploy tailored messaging at scale with little oversight.

Mercer’s money and Bannon’s backing transformed Cambridge Analytica from a niche consultancy into a core component of the Republican campaign machine. Whatever internal disputes persisted over which datasets or models ultimately powered Trump’s digital operation, the firm’s techniques—mass data integration, psychographic modeling, and precision behavioral manipulation — became baked into the party’s playbook.

Sam Patten had long operated in the same circles as Paul Manafort, who spent more than a decade advising pro-Kremlin Ukrainian politicians, including Kremlin puppet Viktor Yanukovych, the former president. Patten and Manafort collaborated on projects for Yanukovych’s Party of Regions, where Patten served as a political consultant and Konstantin Kilimnik —described by U.S. authorities as a Russian intelligence operative — functioned as Manafort’s right-hand man in Kyiv. Also, in the early 2000s, Patten worked in Moscow, along with Kilimnik. This same network of operatives would later be directly involved in Trump’s 2016 campaign through data operations, political consulting, and influence operations.

In February 2015, Patten and Kilimnik co-founded Begemot Ventures International, a Washington, D.C.–based consulting firm. The company’s work and networks overlapped with Cambridge Analytica’s ecosystem, effectively bridging foreign political operations and U.S. data infrastructure. Patten was a “trusted senior consultant” to SCL Group and reportedly performed various services for Cambridge Analytica. Patten would later plead guilty to funneling $50,000 in foreign money from a Ukrainian client into Trump’s inaugural committee.

By 2016, Cambridge Analytica’s data operation and Facebook’s ad infrastructure had fused into a single targeting machine inside the Trump campaign, as Facebook became embedded within the campaign’s digital core. Under aide Brad Parscale’s direction, the campaign built its media nerve center, “Project Alamo,” in San Antonio. There, staff from Facebook, Google, and Twitter worked side by side with the campaign’s team. Facebook’s role went far beyond offering advice; it embedded employees who actively optimized ad strategies in real time, helping the campaign fine-tune messaging and target audiences with surgical precision.

As The New Yorker reported, Parscale approached Facebook as a weapon — leveraging the platform’s reach and data infrastructure to maximum political effect. Trump’s team embraced this synergy far more aggressively than Clinton’s, conducting thousands of A/B tests per day and funneling real-time feedback back into Cambridge Analytica’s models. The campaign used “dark posts” — microtargeted Facebook ads that were invisible to anyone outside their target groups — to suppress turnout among likely Democratic voters and motivate key Republican segments in battleground states.

By the final stretch of the 2016 race, Cambridge Analytica’s apparatus was running at full capacity. Its psychographic models were integrated with Facebook’s ad systems, Trump’s voter files, and the RNC’s data infrastructure. Parscale’s team pushed out thousands of ads, Cambridge Analytica refined the psychological hooks, and Facebook’s embedded staff optimized delivery for maximum impact. The combined system was built to locate emotional pressure points, exploit them, and do so invisibly — utilizing the data of more than 50 million unsuspecting Facebook users.

Leaked internal documents later revealed that Cambridge Analytica operated in 68 countries, applying the same toolkit of psychographic profiling, algorithmic targeting, and voter manipulation across the globe. It functioned as a private political intelligence and influence apparatus — an outsourced psyops capability for hire, built to weaponize data at scale. Even after the scandal broke and the company formally collapsed, its methods endured, absorbed into mainstream campaign playbooks and replicated by other actors worldwide.

Russia’s Fingerprints and WikiLeaks

Cambridge Analytica’s orbit repeatedly intersected with Russian interests. Aleksandr Kogan, the Cambridge University academic who operated as an outside contractor for SCL Group and Cambridge Analytica through his company Global Science Research, harvested tens of millions of Facebook profiles via his personality quiz app. He held an affiliation with St. Petersburg State University and received Russian government grants to study social networks. Kogan has denied sharing data with Russian authorities, but the overlap raised clear counterintelligence alarms.

In 2014 and 2015, executives from Cambridge Analytica’s parent company SCL met with officials from Russian oil giant Lukoil. Whistleblowers later said these meetings were not focused on energy, but on U.S. political influence techniques and voter data. Lukoil’s leadership, including CEO Vagit Alekperov, maintained close ties with oligarch Aras Agalarov, who hosted Trump’s 2013 Miss Universe pageant in Moscow. Lukoil’s vice president attended that event and was in the VIP section.

By June 2016, as Russian military intelligence prepared to weaponize the DNC and Podesta email troves through Guccifer 2.0 and WikiLeaks, Cambridge Analytica CEO Alexander Nix reached out directly to WikiLeaks’ Julian Assange, offering help to “organize” the material. Assange confirmed the outreach but said that he declined the overture. After the election, a Cambridge Analytica director visited Assange in February 2017, while Brittany Kaiser, a director at the firm who visited Assange while he was ensconced at the Ecuadorian embassy, claimed that she quietly channeled cryptocurrency and donations to WikiLeaks.

Taken together, these overlapping channels formed a dense transnational network linking Western data operations, Russian intelligence cutouts, oligarchic capital, and WikiLeaks — the distribution channel for material hacked by Russian intelligence. As we detailed in Chapter 9, WikiLeaks played a pivotal role in laundering hacked information into the American political mainstream, amplifying Moscow’s operation through the veneer of transparency. The Senate Intelligence Committee would later describe Cambridge Analytica’s links to Russian-linked entities, including Lukoil and WikiLeaks, as presenting “counterintelligence concerns” for the United States.

Prigozhin’s Translator Project

While Cambridge Analytica was building its psychological targeting engine in the West, Russian intelligence was assembling its own operational arm in St. Petersburg — one designed to weaponize social media platforms.

In April 2014, the Internet Research Agency (IRA) — financed and controlled by Yevgeny Prigozhin’s Concord group — created a new department known internally as the Translator Project (Проект Переводчики). Its mission was to conduct covert information operations in foreign languages, focusing primarily on the United States.

The Translator Project operated through Glavset LLC, a Concord front company at the same address as the IRA. Mikhail Bystrov oversaw the project, Maria and Robert Bovda led English-language teams, and Elena Khusyaynova managed budgets and logistics. Strategic direction flowed up to Prigozhin, who personally approved major content themes.

Between March and August 2015, the project recruited 80–90 English-speaking staff, trained in American slang, race relations, and current events. Internal manuals instructed employees to “act as if you live in America,” refining their ability to mimic authentic U.S. voices and avoid linguistic giveaways.

By 2015, the Translator Project was targeting U.S. audiences directly. Trolls operated coordinated accounts on Facebook, Twitter, Instagram, and YouTube, using VPNs and proxy servers to mask their location. Internal IRA memos outlined key narratives: racial tensions and police shootings, anti-immigration themes, pro-gun and nationalist messaging, anti-Clinton and anti-Obama attacks framed through corruption and weakness, and “traditional values” paired with anti-LBGTQ rhetoric.

Fake pages launched during this period—including Blacktivist, Heart of Texas, Secured Borders, and Being Patriotic — would later become some of the most viral assets of 2016. By December 2015, English-language content from IRA trolls reached three to four million Americans per week through organic engagement alone.

Concord accountants began submitting monthly reports titled “U.S. election project” as early as May 2015, detailing ad buys, VPN infrastructure, and reconnaissance trips to U.S. cities to collect intelligence. Internal correspondence captured Prigozhin boasting that his “information soldiers” could “enter any foreign conversation.” U.S. intelligence later confirmed that by mid-2015, Translator Project content was already testing pro-Trump and anti-Clinton narratives—months before Trump announced his candidacy.

The Translator Project provided a structured, well-funded framework for Russia’s online influence operations. By the time GRU hackers breached Democratic Party networks, the psychological battlefield had already been mapped and seeded. As we outlined in Chapter 7, the Internet Research Agency marked the point where Russia’s domestic disinformation apparatus evolved into a global offensive weapon aimed squarely at the American electorate.

By mid-2016, three operations had locked into place, distinct in structure but increasingly synchronized in their effects. The Kremlin’s campaign was fully operational: IRA troll operators were saturating U.S. social media with divisive and anti-Clinton narratives while GRU hackers quietly penetrated Democratic networks, exfiltrating politically sensitive material and staging it for release. Inside Trump Tower and in San Antonio, Cambridge Analytica’s psychological targeting engine was wired directly into the campaign’s core, fusing harvested Facebook data, RNC voter files, and psychographic models into a precise and strategic influence weapon. And looming over it all, Facebook’s advertising systems provided the amplification channels that allowed each of these efforts to converge with remarkable efficiency.

These were separate operations moving in parallel, but they began to function like components of a single machine. Russian intelligence stole and weaponized information; troll farms seeded narratives and probed cultural fault lines; Cambridge Analytica microtargeted voters with psychological precision; Facebook’s algorithms drove the content into millions of feeds, invisibly and at scale; and WikiLeaks acted as the laundering channel, injecting stolen material into the political mainstream under the guise of transparency. What took shape was a fused ecosystem — state power, private influence operators, social media platforms, and information cutouts aligning to wage a coordinated operation to get Trump elected and into the White House. By the time Russian intelligence breached the DNC, the battlefield had already been mapped, the infrastructure assembled, and the vectors of exploitation blown wide open.