Cyberscoop ILC Dover and Astrospace Settle $13M Cybersecurity Violations with U.S. Government
Article Content
- •ILC Dover and Astrospace agreed to a $13 million settlement for cybersecurity violations.
- •The companies failed to comply with cybersecurity requirements from 2018 to 2024.
- •A whistleblower will receive $2.35 million from the settlement proceeds.
ILC Dover LP and ILC Astrospace LLC have agreed to pay $13 million to resolve allegations of failing to meet cybersecurity requirements in contracts with the U.S. Department of the Army, Missile Defense Agency, and NASA. The violations occurred from January 2018 to October 2024, during which ILC allegedly submitted false claims for payment despite knowing they had not complied with cybersecurity obligations. Specific allegations include using a third-party company to store sensitive data without adequate security measures and failing to develop necessary security plans for their information systems. The settlement stems from a whistleblower complaint by Philip Root, the former director of cybersecurity at ILC, who will receive $2.35 million from the settlement. The case highlights the government's commitment to enforcing cybersecurity compliance among defense contractors.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track ILC Astrospace in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What specific cybersecurity requirements were violated?
Who is the whistleblower in this case?
What actions should defense contractors take following this case?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…