US IT Contractor Pleads Guilty to Espionage, Leaked Top Secret Files to Ethiopia
Abraham Teklu Lemma, a 53-year-old naturalized US citizen and IT help desk technician holding Top Secret clearance, pleaded guilty to espionage charges for transmitting classified US government documents to Ethiopian officials over more than two years. Lemma worked across the National Reconnaissance Office, US Department of State (DoS), and Department of Justice (DoJ) between 2019 and 2023, exploiting his authorized 'downdraft' access to move files between classified and unclassified systems. He copied material from at least 133 intelligence reports without authorization, burned over 100 documents to CD/DVDs mislabeled as unclassified, and smuggled them out of a Sensitive Compartmented Information Facility (SCIF). Prosecutors say Lemma shared the information—including maps, military compound details, and logistics data—with senior Ethiopian political, military, and intelligence officials via an encrypted messaging app, and that this intelligence was used in active military operations. He has agreed to a prison sentence of 120 to 262 months.
Detalhes técnicos
Lemma allegedly removed classification markings from downloaded files before burning them to discs with green labels, normally reserved for unclassified material, allowing him to carry them out of the SCIF in his jacket pocket. He also took handwritten notes from classified screens for later transmission. Investigators found that Ethiopian officials remotely accessed personal storage drives where Lemma kept copies of classified files between April and June 2023. Financial records showed bank deposits exceeding $66,000 linked to his activity, including an incident where he discouraged a bank from filing a mandatory currency transaction report.
Remediação
The case underscores insider threat risks tied to excessive 'downdraft' data-transfer privileges and insufficient monitoring of SCIF media handling and classification marking removal. The FBI's Counterintelligence and Espionage Division stated it will continue pursuing individuals and foreign intelligence services involved in similar activity.
Linha do tempo
-
US IT Contractor Pleads Guilty to Espionage, Leaked Top Secret Files to Ethiopia
ler a análise desta fonte ocultar
Abraham Teklu Lemma, a 53-year-old naturalized US citizen and IT help desk technician holding Top Secret clearance, pleaded guilty to espionage charges for transmitting classified US government documents to Ethiopian officials over more than two years. Lemma worked across the National Reconnaissance Office, US Department of State (DoS), and Department of Justice (DoJ) between 2019 and 2023, exploiting his authorized 'downdraft' access to move files between classified and unclassified systems. He copied material from at least 133 intelligence reports without authorization, burned over 100 documents to CD/DVDs mislabeled as unclassified, and smuggled them out of a Sensitive Compartmented Information Facility (SCIF). Prosecutors say Lemma shared the information—including maps, military compound details, and logistics data—with senior Ethiopian political, military, and intelligence officials via an encrypted messaging app, and that this intelligence was used in active military operations. He has agreed to a prison sentence of 120 to 262 months.
Technical Details
Lemma allegedly removed classification markings from downloaded files before burning them to discs with green labels, normally reserved for unclassified material, allowing him to carry them out of the SCIF in his jacket pocket. He also took handwritten notes from classified screens for later transmission. Investigators found that Ethiopian officials remotely accessed personal storage drives where Lemma kept copies of classified files between April and June 2023. Financial records showed bank deposits exceeding $66,000 linked to his activity, including an incident where he discouraged a bank from filing a mandatory currency transaction report.
Remediation
The case underscores insider threat risks tied to excessive 'downdraft' data-transfer privileges and insufficient monitoring of SCIF media handling and classification marking removal. The FBI's Counterintelligence and Espionage Division stated it will continue pursuing individuals and foreign intelligence services involved in similar activity.