News · Insider threat

Insider threat and counterintelligence

Insider threat programs, espionage and mishandling cases, and counterintelligence advisories that matter to cleared facilities.

4 articles · newest October 31, 2026 · RSS feed

· WRAL

NC government contractor accused of releasing top-secret information, FBI investigates

The FBI arrested a former contractor employee who had supported Army Special Operations Command at Fort Bragg, the Justice Department announced on October 30. The indictment charges the former employee, who held a Top Secret clearance with SCI access while working for a security and emergency management services company, with unlawfully transmitting and retaining national defense information and with theft of government property. Prosecutors allege that classified images of military operations were posted to social media, that national defense information was kept at a residence, and that night vision equipment reported missing from the command was recovered there. The case shows how a cleared contractor employee's social media activity and property accountability can surface as insider threat indicators long after the conduct begins.

· InsideNoVa

Gainesville man with top security clearance pleads guilty in North Korean remote-employment scheme

A Virginia man who worked for a defense contractor in mid-2025 while holding an active Top Secret clearance pleaded guilty in federal court in Alexandria to conspiracy to commit wire fraud. According to the United States Attorney's Office, he let foreign individuals use his identity and a third person's identity to apply for remote jobs, received company-issued laptops at his home, and enabled remote access from outside the country, producing nine job offers from American companies, including government contractors. Prosecutors say the scheme supported North Korea's effort to place IT workers inside foreign companies to evade sanctions and raise money. Sentencing is set for January 28, and the case is a reminder that laptop-farm facilitation can involve cleared personnel and target cleared contractors as victims.

Al Jazeera

US jails two Chinese nationals for spying

Two Chinese nationals were each sentenced to 30 months in prison and three years of supervised release after pleading guilty to acting as agents of China's Ministry of State Security without notifying the Attorney General, the Justice Department said on October 31. Court documents describe a scheme running since at least May 2021 in which the pair arranged dead-drop cash payments of 10,000 and 20,000 dollars, photographed a naval facility, military recruits and active-duty sailors, and compiled biographical information on military personnel as potential recruitment targets. The Assistant Attorney General for National Security described the operation as a long-running effort to support Chinese intelligence recruitment inside the United States. The case gives security officers a current example of recruitment tradecraft for insider threat and counterintelligence briefings.

· Patch

PWC Defense Contractor Abused Top Secret Clearance In Foreign IT Jobs Scheme: DOJ

A Prince William County, Virginia, defense contractor who held a top secret clearance pleaded guilty in federal court to conspiracy to commit wire fraud for letting foreign nationals use his identity and credentials to apply for remote jobs, prosecutors said. According to federal prosecutors in the Eastern District of Virginia, the scheme produced 88 fraudulent applications and at least nine job offers between June and October 2025, with employer-issued laptops shipped to the contractor’s home and opened to remote access from abroad. Prosecutors said the wages flowed overseas in a pattern the government associates with North Korean IT workers, though the contractor was reportedly unaware of any such link. The case, with sentencing set for January, shows why cleared employers should confirm that the person on the phone, on video and at onboarding is the same one.

Summaries on this page are produced automatically and nobody reviews them before they post. Read the original before acting on it, and report a correction if a summary is wrong. About the news page.