Learn

284 articlesCategory: All
Whistleblowers

Risk that a whistleblower can be inferred from the content

In whistleblowing, even if the name is hidden, the source may be inferred from the content.

Which department is it about? Which meeting did the person know about? Which materials did the person see? When did the events happen? What wording could only be known from a certain position?

People inside the organization know more context than outside readers.

For that reason, the more specific the whistleblowing content is, the more the candidate set may narrow.

The content itself can show the source

Whistleblowing content includes the source of the information.

A specific meeting, internal document, statement by a person in a specific role, procedure known only to the person responsible, or layout at the work site. Information like this shows who could have known it.

Content cluePerson who may be suspected
Meeting detailsAttendees, document creators, minute takers
Internal department exchangesDepartment members, managers
Specific system screenPeople with access rights
Details of on-site workOn-site staff, supervisors
Internal email wordingRecipients, forwarders, administrators

Even if information is sent anonymously, if the information range is narrow, there will be fewer candidates.

The organization sees it differently from outside readers. Text that looks like an ordinary explanation to outsiders may tell people inside the organization that "only a few people know this meeting" or "only this department can see this screen." For that reason, a whistleblowing statement needs to be considered not as it appears to general readers, but as it appears to investigators inside the organization.

In whistleblowing, the value of the information and the secrecy of its source come into conflict. Without specificity, the problem is hard to communicate. But if the specificity is too strong, it becomes easier to trace back to the whistleblower. Managing this balance is important.

Timelines narrow the candidate set

Timelines are strong clues.

When the timing of when the material was viewed, when the meeting happened, when the problem became known, and when it reached the outside lines up, the other side can compare it with logs.

Timeline informationWhat it may be checked against
When materials were viewedFile access logs
Immediately after a meetingAttendees and minute takers
When printing or photographing happenedPrinters, entry and exit records, surveillance cameras
Send timeNetwork logs and device operation
Publication dateStarting point for an internal investigation

Even when a timeline needs to be included in the content, check whether the level of detail leads back to the source or whistleblower.

Timelines are information that organizations can easily compare with logs. The time a file was opened, the time someone entered a meeting room, the time a printer was used, the time someone logged in to an internal system, the time an email was received. Depending on the organization, these may remain in multiple logs.

Even expressions such as "right after the meeting," "the day after the materials were distributed," or "Friday night" can narrow the candidate set. Even when an accurate period is necessary, check whether the detail is narrow enough to lead back to the whistleblower.

Writing style and emotion can also become clues

A whistleblowing statement shows characteristics of the person who wrote it.

Use of specialized terms, internal terminology, ways of expressing anger, punctuation, explanation order, and frequently used phrases. The more a person's writing is usually read inside the organization, the more they may be inferred from writing style.

Writing characteristicRisk
Specialized termsJob type or department becomes visible
Internal names for thingsAffiliation or generation may be inferred
Emotional expressionConnects with past remarks or dissatisfaction
Explanation orderShows the person's work position
Writing styleChecked against usual email or documents

It is important to communicate the content accurately.

However, writing that strongly shows the author's personal habits weakens anonymity.

People who regularly write email, reports, meeting minutes, or chat inside an organization need particular caution. People around them know how they write. Frequently used turns of phrase, punctuation, bullet list style, choice of specialized terms, and ways of showing anger become clues.

When changing writing style, do not add unnatural decoration. Reduce personal habits instead. Reduce emotional expression. Avoid internal catchphrases. Do not add more detailed background explanation than necessary. Reduce words that show your position. In this way, reduce the sense of the specific person behind the writing.

Blurring too much makes it hard to communicate

If everything is blurred to avoid inference from the content, the meaning of the whistleblowing becomes weaker.

What matters is preserving the factual core while adjusting details that lead back to the whistleblower.

Information to adjustHow to think about it
Department nameUse a higher-level category if necessary
DateUse a period if the exact date is unnecessary
QuotePreserve the meaning while weakening personal verbal habits
Document nameUse the type if the specific name is unnecessary
Job titleBroaden the range if it narrows to one person

It is worth consulting the submission recipient or a specialist about how specific the content should be.

When adjusting content, separate the factual core from details that lead to identification. The nature of the misconduct or danger, its impact, the systems involved, and the type of evidence are important. On the other hand, who heard it at which seat and when, which device it was viewed on, and which staff member it was received from may narrow the whistleblower.

The necessary level of specificity also changes depending on the submission recipient. News organizations, lawyers, regulators, and support organizations have different information needs and different approaches to protection. It is important to separate information for a public statement from information given privately to a trusted adviser or submission recipient.

Evidence files also retain source clues

Not only the whistleblowing content, but also the evidence files can retain source clues.

The creator name in a PDF, editors in an Office file, watermarks from printing, filenames, screenshot screen size, device name, internal system display, and menus that show access rights. These can be more direct clues than the content itself.

Evidence file clueWhat may be inferred
File metadataCreator, organization name, edit history
ScreenshotDevice, permissions, screen size, notifications
Printed materialPrinter, print time, distribution scope
Internal system screenAccess rights, department, role
FilenameWork name, date, responsible person

In whistleblowing, check not only the text, but the whole set of materials. If necessary, consult a specialist or trusted submission recipient and reduce information that leads back to the whistleblower before handling it.

Separate public information and private information

In whistleblowing, not everything needs to be included in a public statement. Separate public information used to inform a wide audience from private information given to trusted parties for investigation or verification.

A public statement can include the outline of the problem, social impact, the range that can be verified, and necessary background. At the same time, details only the whistleblower could know, exact times, internal system screens, conversations among a small number of people, and the route by which materials were obtained need careful handling before publication.

Type of informationHow to handle it
Outline of the problemDefine what can be made public
Existence of evidenceShow only the type if necessary
Specific materialsLimit them to a trusted submission recipient
Acquisition routeDo not publish it because it leads back to the whistleblower
Small-group conversationsReduce the level of detail because they narrow the candidate set

If this separation is not made, a text meant to inform readers may also mix in information that identifies the whistleblower. In whistleblowing, it is necessary to think about communicating accurately and protecting the source at the same time.

Summary

In whistleblowing, even if the name is hidden, the source may be inferred from the content.

Meetings, departments, materials, timelines, systems, work sites, and writing style become clues that show the whistleblower's position.

If the content is blurred too much, the meaning of the whistleblowing becomes weaker.

However, overly specific information narrows the candidate set.

What matters is preserving the factual core while adjusting details that lead back to the whistleblower.

Related tools

Anonymous communication

Tor Project

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://www.torproject.org/

Open external site
Whistleblower submission

SecureDrop

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://securedrop.org/

Open external site
Whistleblower platform

GlobaLeaks

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://globaleaks.org/

Open external site

Related articles