A CIA contractor with a Top Secret clearance was arrested by the FBI on Friday. Prosecutors say he pulled classified reports he had no business reading and passed them to a romantic partner who posted them online.
His name is Ian A. Brinksman, he is 42, and he lives in Washington, D.C. He is charged by criminal complaint with unlawfully transmitting national defense information under the Espionage Act, the Justice Department announced. The FBI arrested him after searching his home, following a referral from the CIA. Charges in a complaint are allegations, and he is presumed innocent until proven guilty.
What the CIA Contractor Is Accused Of
According to the FBI agent’s sworn affidavit, Brinksman went to work for a federal agency based in Virginia around 2020. In September 2022, he moved to a private company that does contract work for that same agency. His job was systems integration, which included moving data between classified and unclassified systems. He held a Top Secret clearance with access to Sensitive Compartmented Information, the most tightly controlled category of intelligence.
Meanwhile, he was in a relationship with a writer who runs a Substack publication on Congress, war and political economy. In a September fundraising post, she said she had “published reporting based on classified” agency assessments. In a public social media comment, she wrote, “I also accept leaks.” The writer is not named in the court papers, and she has not been charged.
The Pattern in the Affidavit
The FBI affidavit lays out five episodes between March and October 2026. Each one follows the same shape. Brinksman and the writer talk by phone. He opens a Top Secret report in a classified database. Badge records show him leaving the secure facility, followed by more calls. Within days, an article with similar content appears on her Substack.
The first example is March 11. She called him at 8:41 a.m. He opened the report at 9:09 a.m. and again at 10:01 a.m. She posted an article with similar content that same day. The other four followed on May 12 and 13, May 26 and 28, July 28 and 29, and between August 24 and October 5. In each case, an official with authority to classify the material confirmed the article contained classified information from the report.
Agents also point to phone records showing more than 800 calls or attempted calls between the two so far in 2026. Employees at his workplace are not allowed to bring phones inside, and the agent wrote that the short breaks in the badge records would have given him time to reach his car and call her. Agency records also show he was one of no more than six people who opened that Substack page from the facility between March and October, and the only one who read all five articles and also opened all five reports. On October 10, agents found that several pages had been torn out of a notebook left on his desk.
Above all, the agency says none of the five reports fell within the scope of his job. Material marked Top Secret is, by definition, information whose release “reasonably could be expected to cause exceptionally grave damage” to national security.
Why This CIA Contractor Case Matters
Some will call the leaker a whistleblower. That does not hold up. A whistleblower reports wrongdoing to an inspector general or to Congress through lawful channels. By contrast, this case alleges secrets were handed to a partner for publication, with no legal process at all. Brinksman also signed a nondisclosure agreement in December 2025 warning that unauthorized disclosure could violate federal criminal law, and he completed classification training in March 2026, the affidavit says.
Leaks like this put real people at risk. Intelligence sources, officers overseas and ongoing operations all depend on secrets staying secret. In wartime especially, a single exposed report can tell an enemy what we know and how we learned it.
CIA Director John Ratcliffe put it plainly. “There is absolutely zero tolerance for leaking,” he said. FBI Director Kash Patel called protecting America’s secrets “a top counterintelligence priority.” Attorney General Todd Blanche said the affidavit describes a contractor “who exempted himself from a federal law governing the protection of classified information.”
A Question About Access Controls
There is a second lesson here, and it is about the government itself. According to the affidavit, Brinksman asked for access to the classified database in 2022 and first used it on August 11 that year. The five reports he allegedly opened in 2026 were outside his job, yet he could still open them, more than once in some cases. The agency’s records did eventually reveal the pattern, which is to its credit. But “need to know” is supposed to be enforced before secrets leave the building, not reconstructed afterward.
Congress should ask how many contractors have broad database access that their jobs do not require, and whether access reviews are catching it. Keeping secrets is a management job as much as a law enforcement one.
How Past Leak Cases Turned Out
This is not new territory. In 2018, former NSA contractor Reality Winner was sentenced to 63 months in prison for giving a Top Secret report to a news outlet, which prosecutors called the longest sentence ever imposed for an unauthorized disclosure to the media. In 2024, former Air National Guardsman Jack Teixeira was sentenced to 15 years for posting classified military documents online.
Those cases cut across administrations and politics. Winner was prosecuted under Trump, Teixeira under Biden. The lesson is consistent: people trusted with the nation’s secrets do not get to decide on their own which ones the public should see.
Equal Justice Means Prosecuting Leaks
Conservatives have long asked for one standard of justice for everyone. That standard has to cover classified leaks too, no matter who benefits from them. Assistant Attorney General John Eisenberg said the alleged conduct “is not carelessness. It is a betrayal of his oath.”
We said the same about another federal probe this week when the DOJ opened an investigation into Corey Lewandowski. The law should apply to everyone, and the facts should decide the case. That also means the government has to prove what it alleges. A pattern of phone calls and database access is strong circumstantial evidence, but it is not yet a conviction.
What Comes Next
For now, the CIA contractor faces a single count under 18 U.S.C. 793(d), which carries up to 10 years in prison. The case will be prosecuted in the Eastern District of Virginia, UPI reported, by the National Security Division and the U.S. Attorney’s Office there.
- Detention. Whether a judge keeps him in custody before trial, or releases him on conditions.
- An indictment. Whether a grand jury formally indicts him, and whether more counts are added.
- The writer. Whether prosecutors take any action involving the person who published the material. That would raise hard First Amendment questions.
- Damage assessment. Whether the intelligence community says anything publicly about what was exposed.
Expect a broader fight, too. Washington will argue again over where journalism ends and receiving stolen secrets begins. Conservatives should hold a clear line: the person who swore the oath and broke it is the one who must answer first.
Update (November 2026)
Added November 2026. At an October 27 hearing, a magistrate judge found probable cause but granted Brinksman’s request for release on conditions over the government’s objection. Prosecutors filed an emergency appeal, and on October 28 U.S. District Judge Anthony Trenga denied it and affirmed the release order, according to the court docket. For a related case, see our coverage of the Pentagon leak firing of Brett Sylvia.
Sources
- U.S. Department of Justice: Contractor arrested for allegedly leaking national defense information
- FBI affidavit in support of criminal complaint, U.S. v. Brinksman (PDF)
- UPI: Contractor arrested for leaking classified information
- CourtListener: United States v. Brinksman, 1:26-mj-00423 (E.D. Va.) docket
- 18 U.S.C. § 793: Gathering, transmitting or losing defense information
- U.S. Attorney’s Office, S.D. Ga. (2018): Statement on sentencing of Reality Winner
- AP (2024): Jack Teixeira sentenced to 15 years
