DOJ Charges Oxygen Forensics Execs With Hiding Russian Ownership
The charges mark the first criminal prosecution of executives for concealing Russian ownership of software sold to DOD, DHS, and FBI after Ukraine-related sanctions took effect.
TL;DR
DOJ arrested Oxygen Forensics CEO Lee Reiber and CTO Oleg Davydov on wire fraud conspiracy charges for allegedly concealing that five Russian nationals owned and controlled the company. DHS components including the Secret Service and NCFI, along with DOD and the FBI, bought the firm's digital forensics software after Reiber certified no foreign ownership existed. The same software, sold under a different name, was purchased by Russia's FSB. DOJ seized 57 domains and corporate bank accounts on September 20; both men face up to 20 years.
The Department of Justice unsealed charges Wednesday against two principals of Oxygen Forensics, a digital forensics firm whose software federal law enforcement and defense agencies used to extract data from phones and other devices. CEO Lee Reiber, 55, of Boise, Idaho, and CTO Oleg Davydov, 52, a Moscow resident arrested in London, are charged with conspiracy to commit wire fraud. The indictment alleges that Reiber told federal agencies the company's software was developed in the United States when in fact five Russian nationals, including Davydov, owned and controlled the firm and its code was written in Russia. DOJ said there's no evidence the software contained malicious code or was used to exfiltrate data. The crime is the lie itself.
The scheme took shape after Russia's February 2022 invasion. Sanctions prompted Oxygen to scrub the Russian nationals from its corporate filings and install Reiber as CEO and chairman in March 2022. But the owners continued to set Reiber's compensation and hold signatory authority over bank accounts. In September 2024, Reiber certified to the National Computer Forensics Institute that Oxygen had no foreign ownership, securing a five-year deal. Meanwhile, a separate Davydov company sold the same software to Russia's FSB and other internal security agencies.
This case signals a shift: DOJ is now willing to prosecute individuals for concealing foreign ownership in the federal software supply chain, a departure from the asset-seizure approach of prior cases. The seizure of 57 domains and bank accounts on September 20, followed by the arrests two days later, suggests a coordinated enforcement timeline. For contractors and agencies still running Oxygen products, the immediate question isn't whether the software is compromised. DOJ found no evidence of that. It's whether procurement certifications from other vendors with opaque ownership structures can be trusted without independent verification. The indictment leaves one question conspicuously open: will any federal procurement official who accepted those certifications face scrutiny of their own?
Published ·Deep Fathom