ILC Dover, ILC Astrospace pay $13 million to settle U.S. cybersecurity fraud claims

Traders Union
All News
Business & Wealth
Companies
ILC Dover cybersecurity settlement

Highlights

ILC Dover and ILC Astrospace will pay $13 million to resolve DOJ allegations of violating federal contract cybersecurity standards from January 2018 to October 2024.
The companies allegedly failed to meet NIST SP 800-171/800-53 compliance, maintain adequate security plans, and improperly used third-party cloud storage without FedRAMP-equivalent protections.
Whistleblower Philip Root will receive $2.35 million, and the case emphasizes heightened enforcement risk for contractors on cybersecurity, cloud compliance, and defense sector documentation standards.

Settlement covers years of alleged contract noncompliance

As reported by U.S. Department of Justice, the settlement resolves allegations that the Delaware-based contractors violated the False Claims Act by seeking payment on federal contracts while knowing they had not met required cybersecurity standards.

The allegations span from January 2018 to October 2024 and include failures to fully implement required controls under NIST SP 800-171 and 800-53, maintain and periodically update system security plans, and develop plans of action and milestones to address security deficiencies. The Justice Department also alleges that from February 2023 to October 2024 the companies used a third-party cloud provider to store controlled unclassified information without ensuring security protections equivalent to the FedRAMP Moderate baseline and compliance with Department of Defense cyber incident requirements.

Prosecutors further allege that ILC Astrospace did not submit any current assessment to the Department of Defense on its implementation of NIST SP 800-171 controls from November 2020 to October 2024, while ILC Dover did not submit an assessment that was current and based on the review standards required by the DoD assessment methodology. Assistant Attorney General Brett A. Shumate said the government will continue to pursue contractors and subcontractors that fail to honor cybersecurity commitments in federal agreements.

Whistleblower payout and wider sector implications

The case also resolves a whistleblower lawsuit filed under the False Claims Act by Philip Root, ILC's former Director of Cybersecurity. Under the settlement, Root is set to receive $2.35 million as his share of the recovery.

Officials from the U.S. Attorney's Office for the District of Delaware, the Department of Defense Office of Inspector General, Army CID and NASA's Office of Inspector General say the case underscores the financial and operational risks for contractors handling defense and aerospace information. For companies across the sector, the outcome reinforces that cybersecurity controls, cloud compliance, reporting procedures and documentation standards are being treated as contractual obligations with direct enforcement consequences.

The Justice Department says the resolution stems from a coordinated effort involving its Civil Division's Commercial Litigation Branch, Fraud Section, the U.S. Attorney's Office for the District of Delaware, and multiple investigative agencies, including NASA OIG, DCIS, Army CID, the Navy Criminal Investigative Service, the Air Force Office of Special Investigations and the General Services Administration Office of Inspector General.

Our earlier article on the surge in global cybersecurity funding highlighted how Q3 saw total investment climb to $6.8 billion, driven by fewer but much larger late-stage rounds—especially in AI-focused and identity security. We also noted accelerating consolidation via major acquisitions, underscoring how capital continues to flow into cybersecurity even as scrutiny and risk management demands across the industry intensify.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.