FBI arrests CIA contractor for leaking Top Secret intel to Substack

The Federal Bureau of Investigation arrested a 42-year-old Central Intelligence Agency contractor on Friday for allegedly passing Top Secret documents to a writer who published them on the internet. The U.S. Department of Justice announced the detention of Ian Brinksman, who worked for a government agency in Virginia from 2020 until a contractor took over his position in 2022.

Brinksman held Top Secret clearance with access to Sensitive Compartmented Information throughout his employment. CIA Director John Ratcliffe confirmed in a statement that Brinksman provided services to the agency as a contractor. The criminal complaint alleges he maintained a personal relationship with an unidentified woman, referred to as Individual 1, who wrote for the online platform Substack.

An email from Brinksman to a friend reveals he described this woman as a journalist focused on foreign policy. He told the friend he was helping her get that work off the ground. Security protocols at his workplace prohibited cellphones and personal electronics. Despite these rules, records show Brinksman entered the facility, accessed specific Top Secret reports, and left to call Individual 1.

The affidavit details a pattern of behavior where Individual 1 posted Substack articles shortly after speaking with Brinksman. These articles contained information matching the classified reports he accessed. The Department of Justice accuses Brinksman of sharing material from at least five Top Secret intelligence reports. None of these reports fell within the scope of his assigned work.

The leaked material allegedly included assessments that could cause exceptionally grave damage to U.S. national security. The topics covered Israel, U.S. relations with Israel, and the ongoing war with Iran. While the FBI and DOJ have not named Individual 1, analysis by The Jerusalem Post links the details to American journalist Aida Chavez. Her writing for the Substack publication Capital & Empire cites sources described as confidential U.S. intelligence assessments and classified CIA analyses on dates matching the alleged leaks.

Chavez has not been charged with any offenses and the investigation has not officially linked her to the case. The affidavit lists specific dates when Individual 1 published articles containing the classified information Brinksman allegedly shared. The DOJ noted that the material reasonably could be expected to cause serious harm if released to the public.

Brinksman’s arrest marks a specific instance of classified data moving from a secure facility to an online platform. The documents involved spanned multiple intelligence assessments related to the Middle East. The case highlights the security challenges surrounding contractor access to sensitive information in a digital age.