Federal prosecutors have charged an American tech CEO and a Russian national over a plot to hide their company’s ownership and access federal databases through contracts awarded under Biden.
Oxygen Forensics CEO Lee Reiber, 55, of Boise, Idaho, and Oleg Sergeyevich Davydov, 52, of Moscow, Russia, were arrested on charges of conspiracy to commit wire fraud.
The two are accused of “concealing from U.S. government agencies that their company was owned and controlled by Russian nationals and that its software was developed in Russia,” the Department of Justice announced on Wednesday.
Reiber and Davydov allegedly concealed from federal agencies that their company was owned and controlled by Russian nationals and “conspired to obtain contracts from federal agencies” to analyze data from US agencies.
The agencies affected included the Department of War and the Department of Homeland Security, including the “Secret Service and its National Computer Forensics Institute (NCFI); Homeland Security Investigations; and the DHS Office of Inspector General.”
Reiber allegedly represented to the government that the company had no foreign ownership or control and that its software was developed in the United States, when in fact five Russian nationals, including Davydov, owned and controlled the company and its software was developed in Russia.
The complaint does not allege that the software contained malicious code or that it was used to gain unauthorized access to any customer’s computer systems or data.
In a separate proceeding, a federal magistrate judge in the Central District of California on September 19 issued a warrant authorizing the seizure of corporate bank accounts, approximately 57 domains, and other cyberinfrastructure used in furtherance of the alleged acts. The domains and related infrastructure were seized on September 20.
According to an affidavit filed with the criminal complaint, from March 2022 to the present, Reiber, Davydov, and others conspired to obtain contracts from federal agencies through Oxygen Forensics Inc., a digital forensics company based in Alexandria, Virginia.
Digital forensic software is used to recover, preserve, and analyze electronic data from digital devices while keeping the original files unchanged.
The affidavit identifies the affected agencies as the U.S. Department of War and three components of the U.S. Department of Homeland Security (DHS). These components include the U.S. Secret Service and its National Computer Forensics Institute (NCFI); Homeland Security Investigations; and the DHS Office of Inspector General.
According to the affidavit, Oxygen Forensics held itself out to the U.S. government as being an independent, U.S.-based company. In fact, Davydov and four other Russian nationals owned and controlled the company through a holding company based in Cyprus.
The same five individuals also owned a Russian company, known until September 2022 as Oxygen Software LLC and now as MKO Systems LLC, which Davydov co-founded in 2000. The developers who wrote the software worked in Russia, and MKO sold the software in Russia under different product names to customers that reportedly included the Russian Federal Security Service (known as the FSB), the Russian Investigative Committee, and the Russian Ministry of Internal Affairs.
Davydov was the Russian company’s chief technology officer and was responsible for the development of its software. He helped establish Oxygen Forensics in Virginia in 2013. Reiber joined the company in August 2015.
After the United States imposed expanded sanctions on Russia in early 2022 in response to Russia’s invasion of Ukraine, Davydov, Reiber, and the Russian co-conspirators agreed to conceal Oxygen Forensics’ true ownership and the development of its software in Russia. Reiber was installed as the company’s CEO, president, and chairman of the board in March 2022. The Russian owners were then removed from the company’s public corporate filings.
The company’s Russian owners continued to make significant decisions and set Reiber’s compensation, overruled him on payments, and held signatory authority over the company’s bank accounts.
In December 2022 and October 2023, Reiber falsely certified to the U.S. government that Oxygen Forensics had no immediate or highest-level owner. According to the affidavit, in November 2023, a reporter asked Reiber about Oxygen Forensics’ ownership and its connection to the Russian company.
Reiber then wrote to Davydov and two other Russian owners that public reporting on the connection “could destroy this entire opportunity,” referring to a pending contract with the National Computer Forensics Institute, and that the “current existence of this company hangs in the balance.”
In September 2024, the NCFI awarded a five-year contract for the software. The award file included Reiber’s October 2023 certification that the company had no immediate or highest-level owner.
In July 2024, at Reiber’s direction, Oxygen Forensics certified to the Department of War that no foreign person had the power to control the appointment of the company’s directors or managers or to direct its other decisions or activities. As Reiber then knew, the company’s Russian owners were foreign persons who controlled its decisions and one of them had recently been appointed to its board under a Turkish identity.
Reiber and the Russian owners also concealed that the software was developed in Russia. In March 2026, Reiber told DHS personnel that no Russian was involved in developing the software and that no one in Russia had access to the environment in which it was built. Days later, Reiber authored a statement, published on the company’s website, declaring that the company had no development presence in any restricted jurisdiction. According to the complaint, the software was written and managed by a team in Russia under Davydov’s direction, in a cloud environment administered by one of the Russian owners.
A criminal complaint merely contains allegations. All defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law.
If convicted, each defendant would face a statutory maximum sentence of 20 years in federal prison.
The United States Department of Commerce’s Bureau of Industry and Security is investigating this matter with assistance from the Department of War Office of Inspector General Defense Criminal Investigative Service, Cyber Field Office. The Justice Department’s Office of International Affairs is assisting in the provisional arrest and anticipated extradition of Davydov.
Assistant United States Attorneys David C. Lachman of the Major Frauds Section and Joshua O. Mausner of the National Security Division are prosecuting this case. Assistant United States Attorney James E. Dochterman of the Asset Forfeiture and Recovery Section is handling the civil and criminal forfeitures of the seized property.