In the long and uneasy dance between power and deception, Prime Minister Andy Burnham became the latest senior British official to be briefly misled by an impersonator — this time, someone posing as Susie Wiles, chief of staff to US President Donald Trump. The breach, though described as limited in consequence, joins a lengthening sequence of sophisticated hoaxes targeting the British government, each one revealing that the architecture of trust underpinning diplomatic communication remains more fragile than official assurances suggest. That such incidents recur despite repeated pledges of rob
UK PM Burnham duped by Trump aide impersonator in latest security breach
The impersonators understand the relationships between officials
Mark
Why does it matter that Burnham exchanged messages with an imposter if nothing significant was shared?
Mimi
Because the fact that he was fooled at all tells you something about the attack surface. If the prime minister can be duped, so can anyone. And the imposter got close enough to be believed—that's the real vulnerability.
Mark
But the government says it reported the messages quickly once they got suspicious. Isn't that the system working?
Mimi
It's the system catching itself after the fact. The question is: what would have happened if Burnham hadn't become suspicious? How many messages would have been exchanged? What information might have been requested?
Mark
The White House said Wiles' phone wasn't hacked this time. Does that mean the threat is contained?
Mimi
No. It means this particular impersonator didn't need to hack her phone. They just needed her name and the knowledge that Burnham might believe a message from her. That's easier than hacking.
Mark
Why keep targeting these officials if the attacks keep failing?
Mimi
They're not all failing. Cameron fell for it. Wallace and Patel fell for it. Burnham almost did. The impersonators are learning what works, refining their approach. Eventually they'll find someone who doesn't get suspicious.
Mark
What's the pattern you see across all these incidents?
Mimi
The impersonators understand the relationships between officials—who talks to whom, when, and why. They use that knowledge to make the impersonation credible. And each time, the government treats it as an isolated incident rather than a symptom of a systemic problem.
Mark
If the government has "robust procedures," why are cabinet ministers' phone numbers still on public websites?
Mimi
That's the contradiction at the heart of this. They claim security while leaving the front door unlocked. It suggests the procedures exist on paper, but the actual practice is inconsistent.
O Pulso
- An impersonator posing as Trump's chief of staff Susie Wiles successfully initiated a message exchange with Prime Minister Burnham before suspicion finally took hold.
- Downing Street's refusal to disclose the platform used, the timing, or the number of messages sent has deepened public unease about the true extent of the breach.
- The incident lands against an already troubled backdrop — three cabinet ministers' personal mobile numbers were found listed on publicly accessible websites, compounding the sense of systemic exposure.
- Wiles herself has been a repeated target of hostile cyber operations, including an Iranian espionage campaign in 2024 and a phone hack in 2025 that was used to impersonate her to US senators and executives.
- Government officials insist 'robust procedures' are in place, but a clear pattern — Cameron duped in 2024, Wallace and Patel in 2022, Burnham now — suggests the gap between assurance and reality is widening, not closing.
In the long and uneasy dance between power and deception, Prime Minister Andy Burnham became the latest senior British official to be briefly misled by an impersonator — this time, someone posing as Susie Wiles, chief of staff to US President Donald Trump. The breach, though described as limited in consequence, joins a lengthening sequence of sophisticated hoaxes targeting the British government, each one revealing that the architecture of trust underpinning diplomatic communication remains more fragile than official assurances suggest. That such incidents recur despite repeated pledges of robust security speaks less to individual failure than to a structural vulnerability that no single procedure has yet resolved.
Prime Minister Andy Burnham was deceived this summer by someone impersonating Susie Wiles, chief of staff to US President Donald Trump, exchanging a handful of messages before growing suspicious. The government has since confirmed that nothing of significance was shared and that the matter was promptly reported to the appropriate authorities — but Downing Street has refused to say when it happened, how many messages were sent, or which platform was used, citing national security concerns.
The incident carries additional layers of complexity because Wiles is herself no stranger to being impersonated. Her personal device was hacked in May of the previous year, with the intruder using her contacts to message US senators, governors, and business leaders. A White House official was quick to clarify that the Burnham episode had nothing to do with any new compromise of Wiles' phone.
The breach arrives as Downing Street scrambles to remove the personal mobile numbers of three cabinet ministers — Wes Streeting, Alex Norris, and Chris Bryant — from websites where they had been publicly listed, adding to a picture of communications security under strain.
This is not unfamiliar territory for British officialdom. In 2024, David Cameron was deceived by someone posing as former Ukrainian President Petro Poroshenko — a hoax made credible by Cameron's genuine prior relationship with Poroshenko. In 2022, both Ben Wallace and Priti Patel took calls via Microsoft Teams from an impersonator claiming to be Ukraine's prime minister, a ruse Wallace attributed to Russian interference.
What the accumulating record reveals is not a series of isolated lapses but a persistent structural vulnerability. Those behind these hoaxes demonstrate a sophisticated understanding of diplomatic relationships, communication channels, and the assumptions officials make about trusted contacts. Each incident has been met with reassurances; none has yet produced the reforms that would make the next one less likely.
Prime Minister Andy Burnham fell victim to an impersonation scheme this summer, exchanging messages with someone claiming to represent Susie Wiles, the chief of staff to US President Donald Trump. The breach, first disclosed by Politico, marks another chapter in a growing pattern of sophisticated hoaxes targeting senior British officials—incidents that have exposed persistent vulnerabilities in government communications security despite repeated assurances of robust safeguards.
According to officials who spoke to news outlets, Burnham engaged in a brief message exchange with the imposter before suspicion set in. The government later characterized the interaction as involving only "a few messages" and stressed that "no messages of significance" were shared. Once officials grew wary of the contact's legitimacy, the messages were "quickly reported to the appropriate authorities." Downing Street has since refused to elaborate on the incident, citing national security concerns. The prime minister's office would not disclose when the messages occurred, how many were actually sent, or which platform—WhatsApp or another service—was used for the exchange.
A White House official moved quickly to distance Wiles from any breach of her own security, telling the BBC that the latest impersonation "had nothing to do" with her phone being compromised. This distinction matters because Wiles' personal device was indeed hacked in May of the previous year, an incident the FBI investigated. During that earlier breach, an impersonator or impersonators accessed her contacts and used them to message other prominent American figures, including US senators, governors, and top business executives. Wiles herself has been a repeated target of hostile cyber operations; in 2024, she was among those pursued by a cyber espionage unit linked to Iran's Revolutionary Guards.
The Burnham incident arrives amid a broader security crisis within the British government. Downing Street is currently working to remove the personal mobile numbers of three cabinet ministers—Defence Secretary Wes Streeting, Justice Secretary Alex Norris, and Northern Ireland Secretary Chris Bryant—from publicly accessible websites where they had been posted. A government spokesperson responded by noting that the administration maintains "robust procedures in place to ensure the security of sensitive information," a claim that rings hollow given the accumulating evidence.
This is not the first time a British government figure has been duped by an impersonator. In 2024, then-Foreign Secretary David Cameron received both a hoax call and text messages from someone posing as former Ukrainian President Petro Poroshenko. Cameron had met with the actual Poroshenko multiple times during his tenure as prime minister, lending the impersonation credibility. The Foreign Office chose to publicly release details of the exchange, fearing the correspondence could be "manipulated" if kept private. Two years earlier, in 2022, Defence Secretary Ben Wallace and Home Secretary Priti Patel both received calls via Microsoft Teams from an imposter claiming to be Ukraine's then-prime minister, Denys Shmyhal. Wallace attributed the hoax to Russian "dirty tricks," while a Ministry of Defence source noted the video call was "fairly sophisticated" and had come through another government department, which enhanced its plausibility.
What emerges from this sequence of breaches is a portrait of government communications systems that remain vulnerable to determined impersonators, regardless of the sophistication of the attack or the seniority of the target. The impersonators have shown they understand the rhythms of international diplomacy, the relationships between officials, and the communication channels those officials use. They have successfully exploited the assumption that a message from a known contact, arriving through an official channel, must be genuine. Each incident has been treated as isolated; each time, officials have assured the public that procedures are in place. Yet the pattern persists, suggesting that assurance and reality have drifted apart.
Citações Notáveis
No messages of significance were exchanged and the texts were quickly reported to the appropriate authorities once they were believed to be suspicious— Government sources
We do not comment on national security matters— Government spokesperson
Quer a matéria completa?
Leia o original em BBC News ↗
Politics & Governance