US agencies bought forensics tools from Russian-linked firm supplying FSB
DoJ alleges Virginia-based Oxygen Forensics concealed Russian ownership while selling to DHS and Pentagon
1Dual-use software supply chain
Oxygen Forensics sold digital investigation tools to multiple US defense and homeland security agencies while allegedly being controlled by Russian nationals. The same development team in Russia reportedly supplied similar software to Russian security agencies like FSB through a different company. This created a parallel supply chain where identical forensic capabilities were delivered to adversarial governments.
2Concealed ownership structure
Prosecutors allege five Russian owners masked their control through a Cyprus holding company while making key decisions. After 2022 Ukraine sanctions, they removed themselves from corporate filings but retained financial control, including CEO compensation approval and payment veto power. The Virginia entity presented itself as fully American to government buyers.
3Critical government customers
Oxygen's US clients included DHS investigative units, the Secret Service's forensics institute, and Department of Defense components. Meanwhile, its Russian counterpart MKO Systems reportedly sold to FSB, Investigative Committee and Interior Ministry. The DoJ emphasizes this didn't involve malware but shows identical tools used by opposing security services.
4Sanctions-era deception
As sanctions tightened post-2022, the alleged concealment intensified. CEO Reiber reportedly warned owners about media exposure jeopardizing a NCFI contract, which was ultimately awarded in 2024. Until March 2026, Reiber allegedly falsely claimed no Russian involvement in development, while prosecutors say Russian teams actually built and managed the software.
5Law enforcement actions
Authorities arrested CEO Reiber in Idaho and developer Davydov at Heathrow Airport en route to Istanbul. The US seized 57 domains, corporate accounts and infrastructure. Charges focus on wire fraud conspiracy for allegedly misleading government buyers about Russian control and development locations, not software functionality.
6Contracting vulnerabilities
The case reveals gaps in US government vendor vetting, as Oxygen maintained contracts despite media inquiries about Russian ties. Prosecutors highlight how ownership structures can obscure foreign control, with the Cyprus entity providing plausible deniability while Russian principals retained actual decision-making authority.
7Industry implications
The charges could prompt stricter scrutiny of software supply chains, especially for forensic tools used in sensitive investigations. The dual-use nature of such technology - equally valuable to allies and adversaries - creates unique security challenges that current procurement processes may not adequately address.
8Legal consequences
Reiber and Davydov face up to 20 years if convicted, with the DoJ seeking Davydov's extradition from UK. The case establishes precedent for prosecuting sanctions evasion through corporate structures in the tech sector, where software development locations and ownership can be deliberately obscured.