Federal prosecutors just exposed a massive blind spot in American procurement security. The CEO of a Virginia-based digital forensics firm and a Russian national were arrested on charges of conspiring to commit wire fraud after allegedly concealing Russian ownership and foreign software development while securing lucrative U.S. government contracts.
If you think federal agencies have a tight grip on who supplies their mission-critical tools, this case proves otherwise.
How the Scheme Worked Behind the Scenes
Oxygen Forensics builds specialized software used by law enforcement to extract and analyze data from phones, cloud backups, and digital devices. Its client roster included heavy hitters like the U.S. Secret Service, Homeland Security Investigations, and the Department of Defense.
The catch? Prosecutors state that the firm was secretly controlled by five Russian nationals, including co-founder Oleg Davydov, through a holding company based in Cyprus. Meanwhile, the actual code was being written and managed by a development team sitting in Russia.
When Washington ramped up sanctions following the invasion of Ukraine in 2022, alarm bells should have gone off. Instead, the company executed a corporate shuffle. Lee Reiber stepped in as the American CEO, public filings were scrubbed of Russian names, and the underlying Russian entity changed its name to MKO-Systems LLC to stay under the radar.
Behind closed doors, the real owners kept calling the shots. They set Reiber's compensation, controlled corporate bank accounts, and maintained ultimate authority over operations.
The Paper Trail of False Certifications
Federal contractors can't just lie about foreign ownership, so the conspiracy relied on continuous, deliberate misrepresentation. According to the Department of Justice, Reiber repeatedly signed official government documents swearing that Oxygen Forensics was entirely independent with zero foreign control.
The stakes were clear from internal communications. When public reporting threatened to expose the connection, Reiber warned his partners that the revelation would destroy their business prospects and that the company’s very survival hung in the balance. That pressure didn't stop them; it just made them bolder. In early 2024, the company secured a five-year, $12 million contract with the Secret Service training division.
To maintain the illusion, prosecutors reveal that Reiber initiated a parallel software build on U.S. cloud infrastructure. His explicit goal? To claim that the work was happening domestically while the core engineering team continued operating out of Russia.
Why This Case is Different
It is vital to note what the government is not claiming. Investigators haven't found any evidence that the software contained malicious code, backdoors, or that it was weaponized to compromise federal data.
The core offense centers on deception, fraud, and circumventing federal rules designed to protect sensitive supply chains from foreign adversaries. Even without active sabotage, the mere fact that a foreign-controlled entity with ties to Russian security agencies could quietly supply forensic tools to top-tier U.S. national security bodies highlights a systemic vulnerability.
The fallout was swift. U.S. authorities arrested Reiber in Boise, Idaho, while Davydov was intercepted at London Heathrow Airport ahead of a flight to Istanbul. Federal judges also authorized the seizure of corporate bank accounts alongside roughly 57 web domains and associated digital infrastructure. Both defendants now face up to 20 years in federal prison.
Procurement officers and tech executives must learn from this enforcement action. Relying on self-reported compliance forms without independent background verification on ultimate beneficial ownership leaves organizations completely exposed to federal prosecution and severe regulatory penalties. Audit your vendors thoroughly or expect the Department of Justice to do it for you.
