Staff Reports
The Department of Justice dropped a bomb this week: federal agents arrested the U.S. CEO of a digital forensics company and a Russian national, saying the company quietly remained controlled and its software built by Russians while selling tools to U.S. law enforcement. If true, this was not a clever hack. It was paperwork that worked like a Trojan horse.
DOJ’s bombshell: arrests, seizures, and a fraud charge
Federal prosecutors say Lee Reiber, the CEO of Oxygen Forensics, and Oleg Davydov, a Russian national, were arrested on a complaint charging conspiracy to commit wire fraud. The Justice Department alleges five Russian nationals actually owned and controlled the Virginia company through an offshore holding company, and that key parts of the software were developed and managed in Russia. Authorities also seized corporate bank accounts and dozens of domains and infrastructure tied to the company, and the U.S. is seeking extradition for the Russian national arrested abroad.
How prosecutors say the scheme worked
The complaint paints a simple picture: company paperwork showed a U.S. outfit, but behind the scenes the decision making, code development, and signatory power were in Russian hands. Reiber allegedly certified to multiple federal buyers that no foreign person controlled the company, even as contractors say Russian owners set pay, overruled payments, and controlled accounts. The product was sold to federal customers including the Secret Service’s training arm and other law‑enforcement units under those certifications.
Why this matters for supply‑chain and national security
This is not just a bookkeeping scandal. Digital‑forensics tools touch phones, cloud accounts, and crime scenes. If Moscow had control over the people writing and managing that code, it is reasonable to worry about both access and influence — even though the DOJ complaint does not allege malicious code or a backdoor. The bigger point is a failure of procurement checks: federal officers accepted certifications at face value instead of verifying who really owned and ran the company.
Fixes we need and a blunt final thought
Agencies must stop trusting unchecked paper. DoD, DHS, and other buyers need stronger vetting rules, mandatory provenance checks on software development, and real audits for foreign ties — not just a signature saying “all clear.” Congress should demand answers and a review of contracts tied to this vendor. If Americans expect national security to mean anything, we cannot let “signed paperwork” be the same thing as real security.
