An interesting case of the sensitive U.S military data that may have been leaked to China, Russia, Iran and other nations.

← Back to Blog

An interesting case of the sensitive U.S military data that may have been leaked to China, Russia, Iran and other nations.

The U.S State Department has concluded a $200 million settlement with defense contractor RTC, formally Raytheon Technologies over charges related to the handling of military secrets and sensitive data bout the F-22, F35 and B-2. A fine that has been disclosed in its July 2024 second quarter earnings.

What is interesting is that the ITAR breach relates in the main to the RTX staff carrying unsecured work laptops to countries as far back as 2017. Laptops that contained a range of “defense articles” tied to critical US military programs, such as the Aegis Ballistic Missile Defense System, the B-2 Spirit bomber, the F/A-18 E/F Super Hornet, the F-35 Lightning II, and the Boeing E-3 AWACS.

In 2023 RTX revealed that it had improperly exported technical data related to the F-22 raptor to Chinese employees at Collins Shanghai facility.

One wonders the compliance to not only ITAR security controls but also DFARS 252.204-7012 and NIST security practices. While DFARS maybe a lower standard of compliance, as it relates to CUI data. Security of laptops is covered. If one does not secure ITAR sensitive data is one securing data covered under DFARS?

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation #dfars #itar

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7236090489928585216