DIA IT Specialist Arrested for Allegedly Leaking Classified Intelligence to Foreign Government
A 28-year-old civilian IT specialist at the Defense Intelligence Agency (DIA), Nathan Vilas Laatsch, was arrested on May 29 in Northern Virginia for allegedly attempting to provide classified information to a foreign government. Laatsch, who had worked in the DIA’s Insider Threat Division since 2019, reportedly reached out to a foreign entity in March, citing misalignment with the Trump administration’s values as his motivation.
According to the Justice Department, Laatsch offered completed intelligence products, raw intelligence data, and other classified documents. After communicating with an undercover FBI agent, he exfiltrated data from his workspace and transcribed classified information onto a notepad. In early May, he delivered a thumb drive containing a sample of classified material to a prearranged location, later requesting foreign citizenship in exchange for further cooperation.
Over a 12-day period in May, Laatsch continued transcribing classified notes before arranging a second drop-off, where he was arrested. The case follows heightened warnings from U.S. intelligence agencies about foreign recruitment efforts targeting current and former government employees, particularly amid federal workforce disruptions.
Recent reports indicate that Russia and China have intensified efforts to recruit U.S. personnel with national security access, including through fake job offers from front companies. In April, the National Counterintelligence and Security Center, Defense Counterintelligence and Security Agency, and FBI issued a joint alert about foreign intelligence services—particularly China—posing as headhunters and think tanks to exploit individuals with government backgrounds.
Following Laatsch’s arrest, House Intelligence Committee Chairman Rick Crawford (R-AR) expressed concern over the growing counterintelligence threats across government agencies, emphasizing the need to safeguard intelligence institutions.
Source: https://therecord.media/defense-intelligence-agency-it-specialist-suspected-leak-foreign-government
Defense Intelligence Agency cybersecurity rating report: https://www.rankiteo.com/company/defense-intelligence-agency
"id": "DEF1766548743",
"linkid": "defense-intelligence-agency",
"type": "Breach",
"date": "5/2025",
"severity": "100",
"impact": "8",
"explanation": "Attack that could bring to a war"{'affected_entities': [{'customers_affected': 'U.S. national security '
'interests',
'industry': 'Defense, Intelligence',
'location': 'United States',
'name': 'Defense Intelligence Agency (DIA)',
'size': 'Large',
'type': 'Government Agency'}],
'attack_vector': 'Insider access, Physical exfiltration (thumb drive, notepad '
'transcription)',
'data_breach': {'data_exfiltration': 'Yes (thumb drive, notepad '
'transcription)',
'sensitivity_of_data': 'Top Secret/Classified',
'type_of_data_compromised': 'Classified intelligence '
'products, unprocessed '
'intelligence, assorted '
'classified documentation'},
'date_publicly_disclosed': '2024-05-30',
'description': 'A civilian IT specialist at the Defense Intelligence Agency '
'(DIA) was arrested for allegedly trying to hand over '
'classified information to a foreign government agent. Nathan '
"Vilas Laatsch, who worked in the DIA's Insider Threat "
'Division, offered completed intelligence products, '
'unprocessed intelligence, and other classified documentation '
'in exchange for foreign citizenship.',
'impact': {'brand_reputation_impact': 'Severe reputational damage to DIA and '
'U.S. intelligence community',
'data_compromised': 'Classified intelligence products, unprocessed '
'intelligence, assorted classified '
'documentation',
'legal_liabilities': 'Criminal charges, potential national '
'security consequences',
'operational_impact': 'Potential compromise of national security, '
"erosion of trust in DIA's Insider Threat "
'Division',
'systems_affected': 'DIA classified systems'},
'investigation_status': 'Ongoing (as of arrest)',
'motivation': 'Ideological disagreement with U.S. government, Desire for '
'foreign citizenship',
'post_incident_analysis': {'root_causes': 'Insider access to classified '
'systems, ideological motivation, '
'perceived lack of consequences for '
'exfiltration'},
'recommendations': 'Enhanced insider threat monitoring, stricter access '
'controls for classified systems, improved real-time '
'detection of data exfiltration attempts, increased '
'counterintelligence awareness training',
'references': [{'date_accessed': '2024-05-30',
'source': 'Department of Justice'},
{'date_accessed': '2024-05-30', 'source': 'CNN'},
{'date_accessed': '2024-05-30',
'source': 'House Permanent Select Committee on Intelligence'}],
'regulatory_compliance': {'legal_actions': 'Criminal prosecution by '
'Department of Justice',
'regulations_violated': 'Espionage Act, Potential '
'violations of classified '
'information handling '
'protocols'},
'response': {'communication_strategy': 'Public disclosure by Department of '
'Justice, statements from House '
'Intelligence Committee',
'containment_measures': 'Arrest of suspect, seizure of thumb '
'drive and classified materials',
'law_enforcement_notified': 'FBI, Department of Justice',
'third_party_assistance': 'FBI undercover operation'},
'stakeholder_advisories': 'Warnings issued by National Counterintelligence '
'and Security Center, Defense Counterintelligence '
'and Security Agency, and FBI about foreign '
'recruitment of U.S. government employees',
'threat_actor': 'Nathan Vilas Laatsch (DIA IT Specialist)',
'title': 'DIA IT Specialist Arrested for Attempting to Provide Classified '
'Information to Foreign Government',
'type': 'Insider Threat, Espionage',
'vulnerability_exploited': 'Insider access to classified systems, Lack of '
'real-time monitoring for data exfiltration'}