Cosko was ordered held Thursday at his first court appearance by U.S. Magistrate Deborah A. Robinson of the District pending a detention hearing.
Cosko was arrested Wednesday by U.S. Capitol Police, who said he was caught sneaking into the offices of Sen. Maggie Hassan (D-N.H.) after 10 p.m. Tuesday and using an aide’s computer and log-in, according to court filings and people familiar with the case.
Another aide recognized Cosko as being a person who had been forced to resign from Hassan’s office last May, ordered him to leave and called police, according to a police affidavit.
That aide minutes later received a threatening email with the subject “I own Everything” and a text stating, “If you tell anyone I will leak it all. Emails signal conversations gmails. Senators children’s health information and socials,” Capitol Police Capt. Jason R. Bell alleged in a nine-page arrest affidavit for Cosko.
Hassan spokesman Aaron Jacobs said Cosko “was asked to resign for failing to follow office procedures. We did not have reason to believe that he posed a risk.”
The arrest affidavit said five senators were doxed — or had private or identifying information made public on the Internet — when an anonymous Wikipedia user edited their pages to add phone numbers and home addresses. The information was quickly removed after the doxing was discovered and aides contacted authorities.
Data on three senators was posted shortly before 6 p.m. on Sept. 27 and on two others just before 6 p.m. on Oct. 1, police said. The court filing did not name any lawmakers, but online records show the senators included GOP Senate Judiciary Committee members Lindsey O. Graham (S.C.), Mike Lee (Utah) and Orrin G. Hatch (Utah).
One of the five edits included the statements, “He dares call for an investigation of ME?!?!?!?” and “I am the Golden God,” as well as “We are malicious and hostile” and “Send us bitcoins,” police said.
Cosko did not speak during a 15-minute hearing Thursday, and was patted reassuringly on the shoulder several times by his attorney Brian Stolarz.
Stolarz told reporters: “In this political climate, everyone wants to jump to conclusions. We need to put the conspiracy theories aside and focus on the allegations.”
Police allegedly traced one of the Sept. 27 postings to a House of Representatives computer that was accessed by a person with Cosko’s user identification and password at about 5:45 p.m. The other Wikipedia edits were traced to devices connected to open House and Senate guest wireless networks, police said.
“The investigation will continue and additional charges may be forthcoming,” Capitol Police spokeswoman Eva Malecki said after the arrest.
Cosko worked as an unpaid fellow from August until his arrest with the office of U.S. Rep. Sheila Jackson Lee (D-Tex.), which said it ended his fellowship and is cooperating in the investigation.
Before that, Cosko worked for about 17 months as a low-level aide to Hassan, earning about $23,000 over one six-month period, according to the Legistorm congressional disclosure site, and previously was employed by then-Sen. Barbara Boxer (D-Calif.).
Cosko’s LinkedIn profile said he is a graduate student at George Washington University, where he received his bachelor’s degree, and worked from January 2016 to May 2018 as an intern, press assistant and legislative correspondent/systems administrator assisting senior Senate staffers on matters before the Commerce and Homeland Security committees, including cybersecurity issues.
Cosko has no connection to the office of Rep. Maxine Waters (D-Calif.). Waters last week issued a statement condemning online conspiracy theories targeting one of her staffers for the doxing, saying Capitol Police and internal computer specialists determined that an IP address cited online did not belong to her office or anyone on her staff.
Waters’s chief of staff, Twaun Samuel, said the aide has received threatening phone calls and emails and had to move from her home the past week.