Former US Intelligence Employee Admits Trying to Hand Classified Secrets to Foreign Government

• A former Defense Intelligence Agency employee has pleaded guilty to attempting to transmit classified national defence information to a foreign government. The case exposes the compliance risk created when trusted insiders misuse privileged access, and why insider threat controls remain as important as traditional cybersecurity defences.

Defense Intelligence Agency, DIA with the Defense Intelligence Agency, DIA, pleaded guilty on August 26 to transmitting national defence information, according to the US Department of Justice.

Laatsch had worked for the DIA since 2019 and held a Top-Secret security clearance. He was also assigned to the agency’s Insider Threat Division, giving the case an uncomfortable dimension for an organisation whose job includes identifying precisely this type of risk.

According to court documents, Laatsch contacted what he believed was a representative of a foreign government and offered to provide classified information. The FBI operation that followed allegedly resulted in Laatsch providing documents containing information classified at the Secret and Top-Secret levels.

He was arrested in May 2025 after allegedly attempting to deliver additional classified material at a prearranged location in northern Virginia.

The original complaint said Laatsch had expressed disagreement with the US administration and offered to provide intelligence products and other classified documentation. Investigators said he later sought citizenship in the foreign country in exchange for continuing to provide information.

The case is now moving from allegation to conviction through his guilty plea.

Compliance Analysis

This is an insider risk case, but it is also a governance case.

Laatsch reportedly had access to highly sensitive information because his role required it. The fundamental control question is therefore not whether the government should have trusted employees with classified information. It is whether access can be limited, monitored and withdrawn quickly enough when an employee becomes a risk.

That principle applies well beyond intelligence agencies.

Banks, technology companies, defence contractors and government departments routinely give employees access to sensitive customer, commercial or national security information. The greater the privilege, the greater the potential damage when that privilege is abused.

The case also demonstrates why insider threat programmes cannot rely entirely on background screening and security clearances. A clearance establishes eligibility for access. It does not guarantee future loyalty or sound judgement.

For compliance teams, the warning is clear. Privileged access needs continuing oversight. Unusual downloads, attempts to remove information, unexplained contact with foreign actors, policy violations and behavioural changes can become important indicators when assessed lawfully and proportionately.

Compliance Takeaway: Sensitive information controls should assume that authorised users can become unauthorised threats. Strong access management, activity monitoring, insider threat detection, rapid revocation procedures and clear reporting channels are essential. The objective is not to distrust every employee. It is to ensure that one trusted employee cannot quietly walk away with an organisation’s most valuable information.