Peter Thiel's 'Dialog' Society Has 222 Members. A GitHub Repo Just Published the List.

The Leak: A Directory in the Page Source of dialog.org

WIRED security reporters Dell Cameron and Yulia Almazova confirmed the leak on June 16, 2026 at 4:21 PM EDT, citing internal records from Dialog that were "left exposed online" and independently verified by the WIRED reporting team.^[1] The directory in the page source of dialog.org was first revealed by the Swiss hacktivist maia arson crimew, who told WIRED the directory surfaced via an anonymous tip. WIRED independently verified the contents. A source separately provided WIRED with the registration list for the 2026 retreat, which names 222 people and records what the list describes as each registrant's membership status and attendee type, including "active member" and "guest."^[1]

The Hacker News thread for the WIRED story landed 73 points and 8 comments at the 02:09 UTC morning-cycle scan on June 17, and compounded to 115 points and 15 comments by 09:14 UTC the same day. The growth rate over the 7-hour window is the biggest compound on a state-aligned-power-network story in the 12-hour scan window, and the engagement-justified signal that the morning-cycle "monitor or write" call on the story was correctly resolved as a write.^[4] Separately, a second Hacker News submission (HN id 48566326) appeared at 05:58 UTC on June 17, 2026 with the title "Peter Thiel's private society attendance list leaked via hard-coded HTML." The submission linked to github.com/nzaki-dev/dialog, the public GitHub repository created by an independent developer the same day. The submission compounded to 36 points and 9 comments by 09:14 UTC on June 17.^[3]

The two Hacker News threads are independent submissions that converge on the same source. WIRED's reporting is the editorial lead. The GitHub repository is the technical disclosure: the captured dialog.org HTML, preserved on a public repository, with a directory listing of the 113 named members in the source, a Wayback Machine link to the captured page, and a plain-text "I am unaware of any nefarious activity by the organisation but find it interesting how many influential individuals were part of the society" framing from the repository owner. The repository owner is not the same person as maia arson crimew. The two disclosures are independent; the GitHub repo preserves the captured HTML but does not include the Airtable access tokens that WIRED said it would not publish.^[2][1]

The Leaker: maia arson crimew and the nzaki-dev Repository

maia arson crimew is the Swiss hacktivist who has spent five years surfacing data exposures at the boundary between state power and corporate surveillance. The 2021 No Fly List exposure was the first major disclosure: crimew found a copy of the U.S. government's No Fly List on an unsecured CommuteAir server and reported it. The 2021 Verkada surveillance-camera breach was the second: crimew and a collective gained access to a Verkada client dashboard exposing live feeds from more than 150,000 cameras, including cameras inside hospitals, prisons, and Tesla factories. The Dialog disclosure is the third.^[1]

The pattern across the three disclosures is the same. The data was on a server that was supposed to be private, and was not. The exposed data was on a system that had been marketed as secure, and was not. The disclosure was to a journalist, and the journalist verified. The Dialog disclosure is the most consequential of the three by the standard of who is on the list. The No Fly List was a U.S. government list of people barred from air travel; the Verkada breach was a corporate surveillance platform with cameras inside buildings. The Dialog list is a directory of the people who run the surveillance state, the data-broker industry, the AI labs, and the financial-data oversight committees, and the list is in the same page source as a private members directory that was supposed to be off-the-record.^[1]

The nzaki-dev repository is the technical companion disclosure. The repository owner captured the dialog.org HTML on June 16, 2026, the same day the WIRED story broke, and preserved it in a public GitHub repository. The README is plain-spoken: "I am unaware of any nefarious activity by the organisation but find it interesting how many influential individuals were part of the society and would simply like to preserve the attendance list here in this repository." The repository includes a directory listing of 113 named members extracted from the captured page, and a Wayback Machine link to the captured page. The repository does not include the Airtable access tokens, the personal home cities, the biographies, or the private access tokens that WIRED said it would not publish. The two disclosures are independent and complementary: WIRED has the editorial lead and the verification; the GitHub repo has the captured HTML and the public record.^[2]

The structural disclosure is the page-source directory. The dialog.org website is a near-empty marketing page. The directory was embedded in the page's HTML source code, and was served to any visitor who viewed the page source or hit the page with no JavaScript rendering. A separate Dialog page, at app.dialog.org, presents a sign-in screen for "Dialog Global 2026," outside Dublin. The page invites any visitor to sign in by email or Google account and presents no terms of service, no notice that the application is restricted to members, and no indication that an invitation was required. The discipline imposed on the Dialog participants was, per the leak, off the record, nonobvious, and concise; the same discipline did not extend to the website.^[1]

The Roster: 222 People Across the State, the AI Labs, the Data Brokers, and the Senate

The 2026 retreat registration list reads as a cross-section of the institutional power that runs the U.S. data economy. The list includes General Alexus Grynkewich, NATO supreme allied commander Europe and the head of U.S. European Command, recorded on the leaked list as having attended Dialog gatherings since 2021. The list includes Treasury Secretary Scott Bessent, whose department writes the rules on financial data. The list includes Senator Ted Cruz, chairman of the Senate Commerce, Science, and Transportation Committee, which oversees the FTC and its data-privacy authority. The list includes Palantir cofounder Joe Lonsdale, whose software runs case management for ICE and data fusion for the Pentagon and the intelligence community, in the same society as Army Secretary Dan Driscoll and Representative Jim Himes, the ranking member of the House Intelligence Committee, which oversees the agencies Palantir contracts with. The list includes Dialog chairman Auren Hoffman, the founder of SafeGraph and LiveRamp, two of the most important suppliers in the consumer location-data and identity-resolution markets.^[1]

The GitHub repository's directory of 113 named members reads the same way. The directory includes the founders of OpenAI (Greg Brockman), the president of Xbox (Sarah Bond), the co-founder of Quora (Adam D'Angelo), the CEO of Renaissance Technologies (Peter Brown), the CEO of TIAA (Thasunda Brown Duckett), the co-CEO of Atlassian (Mike Cannon-Brookes), the CEO of Intuit (Scott Cook), the director of the Mercatus Center (Tyler Cowen), a former governor of Indiana (Mitch Daniels), a former U.S. Attorney for the Southern District of New York (Preet Bharara), a Nobel laureate economist at the University of Chicago (Roger Myerson), the CEO of the Anti-Defamation League (Jonathan Greenblatt), the president of the Cato Institute (Peter Goettler), the executive director of the Charles Koch Foundation (Ryan Stowers), the CEO of Mercury (Immad Akhund), the founder of the King Faisal Foundation and a former Saudi Minister of Intelligence (Turki Al Faisal Al Saud), the Ambassador of Saudi Arabia to the United States (Reema Al-Saud), a former governor of the Federal Reserve and current member of the Bank of England's Financial Policy Committee (Randy Kroszner), a former general counsel and acting chief of staff of the DEA (Hallie Hoffman), and a cluster of Google and Google DeepMind executives including Tom Lue, who leads global affairs for the company's frontier AI division.^[2]

WIRED also named figures absent from the public 113-person directory but on the 222-person registration list: a former Fed governor on the Bank of England's Financial Policy Committee (Randy Kroszner), a former general counsel and acting chief of staff of the DEA (Hallie Hoffman), the ADL CEO (Jonathan Greenblatt), the Cato Institute president (Peter Goettler), the Charles Koch Foundation executive director (Ryan Stowers), a Nobel laureate economist at the University of Chicago (Roger Myerson), and one working journalist (Souad Mekhennet, a national security correspondent for The Washington Post, listed as running an event called "Ulysses Book Club").^[1]

The 222-person registration list is not the same as the public 113-person directory. The 113-person directory was embedded in the dialog.org page source. The 222-person registration list was provided to WIRED by a separate source. The list records membership status, attendee type, every retreat the person has attended, a biography, a home city, and a private access token. WIRED is not publishing the tokens, which function as login credentials for the Dialog member app, or the personalized account links that contain them. The records sit in Airtable, a commercial database. The leak exposed all of the above except the access tokens.^[1]

The Power Network: The Inverse of the Typical Privacy Frame

The typical privacy story on this site is the leak of personal data on individuals who cannot defend themselves. A toll-transponder database exposes the trip records of ordinary drivers. A data broker exposes the home address of every gun permit holder in a state. A cannabis-club vendor exposes 985,000 photo IDs of people who were trying to keep their cannabis use private. The Dialog leak is the inverse. The data is on a power network that has spent two decades declining to disclose its members, and the leak exposes the network itself.^[1]

The list intersects with the surveillance industry, the data-broker industry, the AI-lab leadership, and the Trump administration in a single off-the-record gathering. The Dialog chairman is the founder of two of the largest consumer location-data and identity-resolution companies in the U.S. The list includes sitting U.S. senators who chair the committees that oversee the FTC and the House Intelligence Committee. The list includes the head of U.S. European Command, whose portfolio includes the European theater of NATO. The list includes senior officials whose departments write the rules on the data economy. The list includes the founders of the AI labs whose models the U.S. government is now classifying as "vital" infrastructure. The story is not a single power-network disclosure. It is the convergence of four power-network stories on a single attendee list.^[1]

The session topics confirm the framing. The program of off-the-record sessions includes "Bring Back Nuclear," "Navigating WWIII," and "Battlefield Technologies," alongside "Money (Does?) Buy Happiness," "How's Your Sex Life?", "Build-a-Cult" (moderated by the founder of Pray.com), and "Build-a-Party" (run by a former White House national security official). The pattern is the same one that has surfaced on past Dialog retreats: assigned seating, moderated sessions, and a rule that nothing said is for attribution. The discipline imposed on the participants is the privacy guarantee that the website failed to impose on itself. The registration list also exposes the personal data of the members. That data includes their political leanings, their home cities, and their "looking for love" status. The leaked intake form also asked for a list of personal talents; the answers the leak captured included funhouse construction, accent imitation, backcountry skiing, urban exploration, meditative and psychedelic inquiry into the nature of reality, compassion and existential dread, and dinner parties, keeping secrets, and remembering birthdays.^[1]

The same week that the Dialog list landed, the State of Surveillance site has tracked the Anthropic Fable 5 export-control directive, the DOJ xAI "vital" filing, the Anthropic Fable 5 day-5 Stratechery "Safety Superpower" critique, and the Anthropic Fable 5 day-3 EU Commission de-escalation. The Dialog list is the AI-power-network story of the cycle, and the AI-power-network story of the week. The intersection is not coincidental. The Dialog list names OpenAI's Greg Brockman, Google DeepMind's Tom Lue, and other senior AI-lab executives in the same gathering as the senior Trump-administration officials who classify their models as "vital." The off-the-record "Navigating WWIII" and "Battlefield Technologies" sessions are the conversation the public is not supposed to see, and the public is now seeing the names of the people in the room.^[5][6]

No One Is Talking. That Is the Story.

None of the individuals named in the WIRED story responded to requests for comment. Raffi Grinberg, who lists himself as Dialog's executive director on his LinkedIn profile and is the author of the self-help book "How to Be a Grown-Up," did not respond to a request for comment. The Dialog organization has not published a public statement on the leak at the time of writing. The structural fix appears to have been a removal of the directory from the page source after the WIRED story landed; the Airtable database access controls, the app.dialog.org sign-in surface, and the dating.dialog.org matchmaking data have not been the subject of a published post-mortem or a security disclosure.^[1]

The no-comments posture is the on-the-record signature of the off-the-record culture. Dialog has spent two decades declining to disclose its members, declining to disclose its program, and declining to disclose its session topics. The default is silence. The leak has not changed the default. The named individuals on the list have a personal incentive to stay silent, because confirmation is the loss of plausible deniability. The Dialog organization has an institutional incentive to stay silent, because confirmation is the loss of the off-the-record guarantee that is the society's selling point. The structural exposure path is the page source of the marketing page, and the page source is now removed; the silence is the second-line defense.^[1]

The pattern across the three maia arson crimew disclosures is the same on the institutional response. The No Fly List disclosure prompted a U.S. government statement acknowledging the server was unsecured and declining to confirm the list's contents. The Verkada breach prompted a Verkada statement acknowledging the camera access and tightening the security controls. The Dialog disclosure has prompted no statement, no post-mortem, and no published fix. The no-comment posture is the strongest signal of the leak's significance. The organizations that have something to say, say it. The organizations that have no comment, are the ones whose members are on the list.^[1]

What changes the no-comments posture is the same thing that has changed similar postures in past leaks: a press question that is specific enough that the silence is itself the answer. The first U.S. senator on the list to face a press question is the breaking point. The first EU or Irish data-protection inquiry (the 2026 retreat is in Ireland; the Irish Data Protection Commission has jurisdiction over the dialog.org processing of EU personal data) is the second. The first call to revoke General Grynkewich's clearance or reassign his portfolio on the basis of off-the-record attendance at a private gathering whose session topics include "Navigating WWIII" and "Battlefield Technologies" is the third. The list is on the record. The silence is on the record. The list is the more durable record.^[1]

What It Means for You

If you are a reader who has been on the State of Surveillance site before, the Dialog leak is the inverse of the typical privacy frame. The personal-data exposures the site covers (toll transponders, data brokers, photo IDs at cannabis clubs, the FBI's subpoena-driven unmasking of anonymized accounts) are about individuals whose data is on systems they cannot see. The Dialog leak is about people whose data is on a system they were told was invisible. The asymmetry of the disclosure is the story.^[1]

If you are a journalist or a researcher working the AI-power-network beat, the Dialog list is the source-of-record cross-reference. The 113-name GitHub directory and the 222-name registration list are the cross-check for any claim that a senior AI-lab executive, a sitting Trump administration official, a U.S. senator with FTC or House Intelligence Committee jurisdiction, or a data-broker founder is or is not in the off-the-record AI-policy conversation. The list is incomplete (it is one society, one retreat, one moment). The list is the most concrete source-of-record on the AI-power-network overlap that has surfaced in 2026.^[2][1]

If you care about the FTC's data-privacy authority, the Irish Data Protection Commission's jurisdiction, or the EU AI Act's high-risk-system classifications, the list is the audit trail. The named individuals on the list include the chairman of the Senate Commerce Committee (which oversees the FTC), the ranking member of the House Intelligence Committee (which oversees the agencies Palantir contracts with), and the head of U.S. European Command (whose NATO portfolio intersects with the EU AI Act and the Irish data-protection regime). The off-the-record "Navigating WWIII" and "Battlefield Technologies" sessions are the conversation the public is not supposed to see. The public is now seeing the names of the people in the room, and the jurisdictions their decisions will land in.^[1]

If you are a developer, a security researcher, or a person whose work touches the page-source exposure class, the Dialog leak is the textbook case. A near-empty marketing page, a hard-coded directory in the page source, no terms of service, no invitation requirement, no access control, and an Airtable backend with private access tokens that function as login credentials. The fix was a page-source removal, not a structural hardening. The exposure class (the hard-coded directory in the page source of a near-empty marketing page) is the same one that has surfaced in the toll-transponder records, the data-broker opt-out pages, and the cannabis-club vendor systems. The audit pattern is the same: check the page source, check the Wayback Machine, check the unauthenticated endpoints, check the Airtable or Notion or Airtable-style backend that was supposed to be internal.^[2][1]

Sources

1. WIRED: "Leak Exposes Members of Peter Thiel's Secretive 'Dialog' Society" (Dell Cameron and Yulia Almazova, June 16, 2026, 4:21 PM EDT, the primary reporting on the Dialog internal-records leak, the 113-person public directory in the dialog.org page source, the 222-person 2026 retreat registration list, the August 12-16 retreat near Dublin, the General Alexus Grynkewich NATO supreme allied commander Europe / U.S. European Command attendance since 2021, the Auren Hoffman Dialog chairman / SafeGraph / LiveRamp detail, the Treasury Secretary Scott Bessent detail, the Senator Ted Cruz Senate Commerce Committee detail, the Palantir cofounder Joe Lonsdale ICE-Pentagon-IC detail, the Army Secretary Dan Driscoll detail, the Rep. Jim Himes House Intelligence Committee detail, the maia arson crimew attribution for the original directory disclosure, the WIRED independent verification, the Airtable access tokens detail, the access tokens not published policy, the session topics including Bring Back Nuclear / Navigating WWIII / Battlefield Technologies / Build-a-Cult / Build-a-Party, the dating.dialog.org matchmaking app, the political-leaning and looking-for-love form fields, the no-comments-from-named-individuals baseline, and the page-source removal as the apparent fix)
2. GitHub: "nzaki-dev/dialog" (the public repository preserving the captured dialog.org HTML of June 16, 2026, the README explaining the captured HTML and the "I am unaware of any nefarious activity" framing, the 113-member directory in the README listing the named members, the Wayback Machine link to the captured page, and the no-Airtable-tokens inclusion policy)
3. Hacker News: "Peter Thiel's private society attendance list leaked via hard-coded HTML" (news.ycombinator.com, HN id 48566326, 36 points and 9 comments at 09:14 UTC June 17, 2026, the github.com/nzaki-dev/dialog submission, the 05:58 UTC June 17, 2026 submission time, the technical disclosure of the hard-coded HTML exposure class, and the comment-thread analysis of the captured page)
4. Hacker News: "Leak Exposes Members of Peter Thiel's Secretive 'Dialog' Society" (news.ycombinator.com, HN id 48561816, 73 points and 8 comments at 02:09 UTC June 17, 2026, 115 points and 15 comments at 09:14 UTC June 17, 2026, the 20:46 UTC June 16, 2026 submission time, the 4.21 PM EDT WIRED publication, the 12-hour scan window engagement compound, and the comment-thread analysis of the 222-person list)
5. State of Surveillance: "Anthropic Fable 5: Mythos 5, Day 5: Stratechery's Safety Superpower Critique" (the Stratechery "Safety Superpower" piece, the Anthropic export-control dimension, the AI-as-state-infrastructure frame, and the same AI-power-network beat as the Dialog disclosure)
6. State of Surveillance: "DOJ Calls xAI 'Vital' to National Security in NAACP Lawsuit" (the DOJ xAI "vital" filing, the AI-as-state-infrastructure frame, the same AI-power-network beat as the Dialog disclosure, and the structural-critique dimension of the Trump-administration AI policy)
7. State of Surveillance: "Palantir's Elite ICE Targeting App and the Confidence-Score Architecture of Mass Deportation" (the Palantir ICE targeting app, the case-management work for ICE, the data-fusion work for the Pentagon and intelligence community, the Palantir cofounder Joe Lonsdale on the Dialog list, and the institutional-power-and-surveillance-industry overlap)
8. State of Surveillance: "The Data-Broker Loophole: How the Government Buys Your Data Without a Warrant" (the data-broker industry explainer, the SafeGraph and LiveRamp characterization, the FTC and Treasury Department oversight of the consumer data economy, the Dialog chairman Auren Hoffman connection, and the structural-critique dimension of the data-broker regulatory framework)