The email grab β€” first codenamed “Dancing Panda” by U.S. officials, and then “Legion Amethyst” β€” was detected in April 2010, according to a top secret NSA briefing from 2014. The intrusion into personal emails was still active at the time of the briefing and, according to the senior official, is still going on.