---
title: Insider threat: DOJ charges a CIA contractor with passing classified reports to a romantic partner who published them on Substack | ctxsec
url: https://ctxsec.com/items/doj-cia-contractor-brinksman-ndi-leak-arrest
description: ""
status: "confirmed (DOJ Office of Public Affairs press release 26-1256, Oct 23); charges are allegations"
published: 2026-10-23
---

> 

[← Industry News](/industry) · [markdown](/items/doj-cia-contractor-brinksman-ndi-leak-arrest.md)

confirmed (DOJ Office of Public Affairs press release 26-1256, Oct 23); charges are allegations

2026-10-23

### Insider threat: DOJ charges a CIA contractor with passing classified reports to a romantic partner who published them on Substack

The FBI arrested **Ian A. Brinksman**, 42, of Washington, D.C., on Oct 23. He is charged by criminal complaint with unlawfully transmitting national defense information. According to DOJ, he worked for a U.S. government agency from 2020 and then, from 2022, as a systems-integration developer for a contractor to that agency. He held Top Secret/SCI access. Prosecutors allege he obtained classified reports outside his duties and gave them to a partner who ran a Substack publication and had posted 'I also accept leaks.' CIA Director Ratcliffe said the arrest followed a referral from the agency.

The lesson for defenders is a familiar insider-risk control: watch for access to records **outside a user's job scope**, not just for bulk exfiltration. Charges in a complaint are allegations, and the defendant is presumed innocent.

Sources: [DOJ OPA press release (Oct 23)](https://www.justice.gov/opa/pr/us-government-contractor-arrested-allegedly-leaking-national-defense-information) · [Criminal complaint affidavit (filed Oct 23)](https://www.justice.gov/opa/media/1468496/dl?inline=)