The FBI has arrested a CIA contractor accused of reaching into classified intelligence systems, pulling TOP-SECRET reports that had nothing to do with his job and feeding the information to his journalist girlfriend for publication on Substack.
Ian A. Brinksman, 42, was taken into custody after agents searched his Washington, D.C., home.
He now faces a federal charge of unlawfully transmitting national-defense information.
According to prosecutors, this was not one careless conversation. The criminal complaint describes a months-long pattern involving five intelligence reports, repeated phone contact and online stories that allegedly carried classified information from those reports.
The Justice Department announced the arrest and made clear why it views the alleged conduct as a direct threat to American security:
U.S. Government Contractor Arrested for Allegedly Leaking National Defense Information
“National defense information is classified to protect the American people from bad actors around the world who wish to do us harm,” said @AGToddBlanche. “The details alleged in this… pic.twitter.com/86BfOmQUkx
— U.S. Department of Justice (@TheJusticeDept) October 23, 2026
The Justice Department says Brinksman worked for a federal agency beginning in 2020 before becoming a systems-integration developer for a contractor supporting that same agency in 2022. CIA Director John Ratcliffe identified the agency as the CIA and said it referred the alleged unauthorized disclosures to the FBI.
Brinksman held a Top Secret clearance with Sensitive Compartmented Information access. Prosecutors allege that he used that access to obtain some of the country’s most tightly guarded material and passed it to a romantic partner who intended to publish it.
The partner is identified in the official complaint only as “Individual 1,” a writer who operates an independent publication on Substack. The filing says her own fundraising pitch claimed that she had published reporting based on classified CIA assessments.
The bureau’s warning was blunt: protecting American secrets remains a top counterintelligence priority.
The FBI affidavit traces five alleged leak sequences using classified-database records, phone logs, badge swipes, emails and publication dates. It says Brinksman worked inside a secure facility where personal phones were prohibited and his ordinary duties involved moving data between classified and unclassified systems.
Investigators say Individual 1 called Brinksman on March 11. Less than an hour later, he accessed a TOP-SECRET report twice.
A Substack article published that day allegedly contained classified information reflecting the same report. An original classification authority reviewed the article and confirmed the alleged overlap, according to the filing.
The complaint describes similar sequences in May, July and October: phone calls, access to reports marked TOP SECRET, short trips outside the secure facility, more calls and then publication of articles with overlapping information.
Investigators say the brief exits gave Brinksman enough time to reach a personal phone kept outside the secure workspace. The complaint does not rely on timing alone; it also cites the content overlap between the reports and the published articles.
None of the five reports was within the scope of Brinksman’s work, according to the agency. All five carried TS/SCI markings—the classification reserved for material whose unauthorized disclosure could cause exceptionally grave damage to national security.
Phone records cited by the FBI show more than 800 calls or attempted calls between Brinksman and Individual 1 during 2026.
Agency records also showed that Brinksman was among no more than six people who accessed the Substack publication from the federal facility during the period under review. Investigators say he was the only one who both viewed all five articles and accessed all five underlying reports.
The FBI’s own public alert put the arrest and the alleged publication chain on the record:
Then there is the notebook.
Law enforcement reviewed a notebook left on Brinksman’s desk and found that corners had been torn from several pages. The FBI agent wrote that people sometimes take notes so they can later pass along verbatim or near-verbatim information.
The affidavit also cites an earlier email in which Brinksman allegedly told a friend that the journalist he was dating had gone independent and that he had been helping get her foreign-policy venture off the ground.
Investigators documented one separate article the pair allegedly edited together through a shared Google document. The government said it had not identified classified material in that particular article at the time of the filing.
The charged conduct is the alleged willful transmission of national-defense information to someone not entitled to receive it.
Attorney General Todd Blanche said the Justice Department will keep prosecuting people who leak classified information and put national security at risk. Ratcliffe said there is zero tolerance for unauthorized disclosures that endanger intelligence sources, operations and CIA officers.
Brinksman is charged by criminal complaint, and the allegations must still be proven in court. He is presumed innocent unless and until a jury finds otherwise.
But the evidence described by the FBI is not vague. It is a timeline built from classified-database logs, phone records, badge swipes, emails, publication dates and the defendant’s own workplace access.
If prosecutors prove their case, an insider used extraordinary access to funnel America’s secrets into a girlfriend’s publishing operation rather than use lawful whistleblower channels.
The allegation is a national-security betrayal, and the FBI says it finally caught up with the man behind it.
Continue reading...
[ H/T WLT Report ]
