Russian Control of US Forensics Firm Exposed
DOJ alleges secret Russian ownership of a US digital forensics firm, raising sector implications on contract security and deal terms.

The Justice Department charged Oxygen Forensics CEO Lee Reiber and Moscow-based Oleg Davydov with wire fraud conspiracy on Thursday, alleging they concealed Russian ownership of a digital forensics company that sold software to the Secret Service and other federal agencies.
The case raises immediate supply-chain security concerns for the government-contracting sector, where vendors must certify foreign-ownership status to win sensitive federal work - certifications prosecutors say Reiber signed falsely at least twice.
Key Takeaways
- Reiber and Davydov face up to 20 years in prison if convicted.
- Oxygen secured a five-year, $12 million Secret Service contract in 2024.
- Investigators seized corporate bank accounts and roughly 57 web domains.
Contract Value & Sector Context
Oxygen Forensics, headquartered in Alexandria, Virginia, supplied digital extraction and analysis software to clients including the U.S. Secret Service, Homeland Security Investigations and the Department of War - agencies that handle some of the most sensitive data in the federal government. 1 The company is privately held and does not trade on public markets, but the case carries broad implications for publicly listed government-IT contractors whose contract pipelines depend on rigorous foreign-ownership vetting.
The alleged scheme highlights a vulnerability in the federal vendor-certification process that rivals in the defense and cybersecurity contracting space - companies whose valuations are partly underwritten by the integrity of that same certification regime - will be watching closely.
Detailed Analysis of the Alleged Fraud
According to a criminal complaint filed in the Central District of California, Davydov and four other Russian nationals owned Oxygen through a Cyprus holding company, while a Russia-based development team wrote the software Davydov directed. 1 Reiber joined the firm in 2015 and was elevated to CEO in March 2022, weeks before Russian owners' names were scrubbed from public corporate filings following the expansion of U.S. sanctions after Moscow's invasion of Ukraine.
Prosecutors allege the Russian owners continued to set Reiber's compensation, overrule him on payments and retain signatory authority over the company's bank accounts - making him, in the government's framing, a figurehead. 2 In December 2022 and again in October 2023, Reiber signed government paperwork certifying the company had no "immediate or highest-level owner," according to the complaint.
That second certification came just one month before a reporter questioned Reiber about Oxygen's Russian connections. In emails cited by investigators, Reiber allegedly warned Davydov and two other Russian owners that media coverage "could destroy this entire opportunity" and said "the current existence of this company hangs in the balance." 2
Despite that warning, the Secret Service's National Computer Forensics Institute awarded Oxygen a five-year, $12 million contract for its software in September 2024. As recently as March 2026, Reiber allegedly denied any Russian involvement in the software's development during a recorded call with undercover agents posing as Homeland Security officials. 1
Whistleblower Angle & Legal Crossfire
The government's allegations closely mirror claims made by Max Weissberg, a former Oxygen employee, in a YouTube video published in February 2026 - months before the arrests became public. 1 Weissberg said the company was "secretly controlled" by a Russian firm with "close ties to the Kremlin" and that Reiber was "paid to hide the truth."
Oxygen Forensics sued Weissberg for defamation in August 2026 in federal court in Virginia, calling the video part of a retaliatory campaign. The criminal complaint, filed weeks later, validated many of the same claims Oxygen had publicly disputed. 3
Arrests, Extradition & Asset Seizure
Reiber, 55, was arrested Sunday in Boise, Idaho, and released on bond; he is expected to be arraigned in Los Angeles federal court in the coming weeks. Davydov, 52, of Moscow, was arrested the same day at London's Heathrow Airport as he prepared to board a flight to Istanbul - U.S. authorities said they intend to seek extradition. 1
Investigators seized Oxygen's corporate bank accounts and approximately 57 of its web domains under a warrant issued Sept. 19. The U.S. Department of Commerce's Bureau of Industry and Security is leading the investigation with assistance from the Department of War Office.
"All defendants are presumed innocent unless proven guilty in court," said Ciaran McEvoy, public information officer at the U.S. Attorney's Office for the Central District of California. 1
The complaint explicitly noted it does not allege the software contained malicious code or was used to gain unauthorized access to any customer systems - a distinction that may limit immediate operational disruption for affected agencies but does not resolve the counterintelligence exposure the ownership structure created.
Conclusion
The Oxygen Forensics case sets a stark precedent for government-IT procurement: falsified foreign-ownership certifications can attract criminal wire-fraud charges carrying 20-year maximum sentences, and post-sanction restructuring that removes names from public filings will not shield executives if underlying control relationships remain intact. Investors in publicly traded federal-contracting firms should monitor whether this case accelerates stricter ownership-verification requirements - an outcome that could raise compliance costs across the sector but also reward well-governed incumbents.
Not investment advice. For informational purposes only.
References
- Anniek Bao and Dan Mangan (2026-09-25). "Virginia tech firm's CEO, Russian national charged with hiding firm's Russian ties from U.S. government"
- Ross O'Keefe (2026-09-23). "Sinister network of Russian agents busted in Cold War-style plot to infiltrate the US Secret Service using American tech CEO"
- Benjamin Murdoch (2026-09-24). "Russian-linked software sold to US government as CEO allegedly hid Russian control - two now arrested"