FBI Arrests a CIA Contractor With Top Secret Clearance on Charges of Leaking Classified Reports to a Journalist
The FBI arrested a CIA contractor on October 23, 2026, on a charge that he passed classified national defense information to a journalist he was dating. The Justice Department named him as Ian A. Brinksman, 42, of Washington, DC, and charged him by criminal complaint with unlawfully transmitting national defense information, an Espionage Act offense.
The case started inside the agency. CIA Director John Ratcliffe said the FBI made the arrest “following a referral from the Agency.” The FBI’s Chicago Field Office led the investigation, with help from the Washington Field Office. Brinksman held a Top Secret clearance with access to sensitive compartmented information. He had worked since 2020 for a government agency in the Eastern District of Virginia and, from 2022, as a systems integration developer for a contractor to that agency.
Prosecutors from the National Security Division’s counterintelligence section, the Eastern District of Virginia and the District of Columbia are on the case. The charge is an allegation. Brinksman is presumed innocent unless proven guilty.
Photo: Carol M. Highsmith, Library of Congress, public domain via Wikimedia Commons
What the FBI affidavit lays out
The complaint was filed in the Eastern District of Virginia, Alexandria Division, under 18 U.S.C. 793(d). That section carries up to 10 years in prison per count. The affidavit doesn’t name the agency. It calls it “the relevant U.S. government agency” and describes a classified intelligence repository that Brinksman first got into on August 11, 2022.
The core of the government’s case is a timeline. The affidavit identifies five Top Secret reports that Brinksman opened between March and October 2026. The agency says none of them was within the scope of his work. Each was followed by an article from his partner, on March 11, May 13, May 28, July 29 and October 5. For every one of the five, an original classification authority has confirmed that the article contains classified information reflecting the matching report.
The affidavit counts more than 800 calls or attempted calls between the two so far in 2026. The agent alleges Brinksman used a personal phone, likely from his car, in short windows after reading reports. Agents also found a notebook on his desk with pages torn out. The Justice Department release adds that his partner had posted on social media that she accepts leaks.
Assistant Attorney General for National Security John Eisenberg said Brinksman “reached far outside his own duties” for the material. If proven, he said, it’s “a grave violation of the Espionage Act.”
A long record of leak prosecutions
The Espionage Act dates from 1917. It makes no distinction between selling secrets to a foreign power and handing them to a reporter, and the Justice Department has used it against leakers for decades.
Two recent ones set the range. Asif Rahman, a former CIA analyst, printed two Top Secret documents in October 2024 about an ally’s planned action against an adversary, photographed them and sent them on. They were on social media the next day. He pleaded guilty and got 37 months on June 11, 2025. Jack Teixeira, a Massachusetts Air National Guardsman who posted classified material on Discord, pleaded guilty and was sentenced to 15 years in November 2024.
The Brinksman case sits closer to the press than either of those. The material allegedly went to a person who published it. That matters because of a policy change. On April 25, 2025, the Attorney General rescinded the 2021 and 2022 limits on seeking journalists’ records in leak investigations. Prosecutors can again ask for subpoenas, court orders and search warrants aimed at reporters, with Attorney General approval and as a last resort. The current complaint charges only the contractor.
Attorney General Todd Blanche said the department “will continue prosecuting individuals who leak classified information.” Ratcliffe said there is “absolutely zero tolerance for leaking.”
The question for the intelligence committees
The affidavit is also an audit record, and that’s where oversight comes in. The agency’s own systems logged every access. A contractor pulled reports outside his job from March to October, and five articles appeared, before anyone made an arrest. The agency could identify each report and match it to each article. What the filing doesn’t show is when someone first noticed.
That is a question for the House and Senate intelligence committees, which oversee CIA security and the contractor workforce. Need-to-know rules are supposed to keep a systems developer out of finished intelligence he has no reason to read. Access logs only help if someone reads them in time.
The office that sets clearance policy across the intelligence community has its own staffing problem. ODNI has been cut to about half its size since January 2025. Its director is the government’s security executive agent, the official in charge of how clearances are granted and checked.
The FBI made the arrest. The harder question is why it took five articles.