On Friday, the FBI apprehended Ian Brinksman, a contractor for the CIA, under charges of unlawfully transmitting national defense information. This 42-year-old was arrested after a search of his residence in Washington D.C.
According to reports from the Justice Department, Brinksman began his tenure in 2020 at a U.S. government agency in Virginia. In September 2022, he transitioned to a role as a systems integration developer for a private contractor, referred to as “Company 1,” which supported that very agency.
Details of the Investigation
During his employment, he held a Top Secret security clearance, granting him access to Sensitive Compartmented Information (SCI). CIA Director John Ratcliffe confirmed that Brinksman “provided services to CIA,” and the ongoing investigation was initiated following a referral from the agency.
A sworn affidavit from Special Agent John W. Althen indicates that Brinksman maintained a personal relationship with someone called “Individual 1,” known for a Substack publication that reports on Congress, war, and political economy. A fundraising piece from September 2026 disclosed that “over the past year [Individual 1 has] published reporting based on classified [relevant U.S. government agency] assessments that I believe the public deserves to know about.”
Individual 1’s online presence included a public remark stating, “I also accept leaks.” Phone records revealed that there were over 800 calls or attempted calls exchanged between Brinksman and Individual 1 throughout 2026. A report from Reuters later corroborated that quoted fundraising language with a post from the Capital & Empire newsletter, which likely identified Individual 1 as journalist Aída Chávez.
Aída Chávez, however, is not mentioned within the criminal complaint.
POLL: Should Trump’s DOJ Prosecute Jack Smith?
NEW: Meet Ian Brinksman, 42, a Washington, DC-based government contractor arrested by the FBI today for allegedly leaking TOP SECRET national defense information to a romantic partner who published classified material on Substack.
His LinkedIn lists Deloitte, national… pic.twitter.com/KDhCBCvsrH
— Kaelan Deese (@KaelanDC) October 24, 2026
The affidavit outlines five instances from March to October 2026 where Brinksman accessed classified intelligence marked as Top Secret and SCI from a secured database, indicating actions beyond his duties.
In each instance, investigators noted contact with Individual 1 right before or after accessing the information, resulting in the publication of a related Substack article shortly thereafter.
An original classification authority confirmed that these articles contained sensitive information corresponding to the classified reports, some at the Top Secret level. Notably, on March 11, 2026, Individual 1 contacted Brinksman at about 8:41 a.m., followed by the latter accessing a Top Secret report an hour later, after which an article matching this information was released on the same day.
Prosecutors highlighted that Brinksman was among only a handful of individuals who accessed the relevant Substack page from within the government facility during that time.
U.S. Attorney General Todd Blanche emphasized, “National defense information is classified to protect the American people from bad actors. The behaviors outlined in this affidavit showcase the actions of a government contractor who disregarded federal laws designed to safeguard classified information. The DOJ is committed to prosecuting those who leak classified details, jeopardizing national security.”
