ILC Dover reaches $13 million settlement over cybersecurity claims
Aerospace and defense contractor ILC Dover has agreed to pay $13 million to resolve allegations that it failed to maintain mandated cybersecurity controls required for federal government contracts.
ILC Dover and its affiliate, ILC Astrospace, have agreed to a $13 million settlement to resolve claims brought under the False Claims Act. The agreement follows allegations that the company provided false representations to the U.S. government regarding its compliance with mandatory cybersecurity standards for protecting sensitive data.
This settlement marks the largest recovery to date under the Department of Justice’s Civil Cybersecurity Fraud initiative. The case originated from a 2025 whistleblower complaint, which alleged that ILC Dover failed to implement NIST SP 800-171 controls and misrepresented its internal security posture to the Department of Defense. Specifically, the allegations included the use of inadequate cloud-based services and the submission of inflated cybersecurity assessment scores.
ILC Dover, a subsidiary acquired by Ingersoll Rand in 2024, provides specialized equipment to NASA and the U.S. military. Federal officials stated that the enforcement action underscores the necessity for defense contractors to strictly adhere to cybersecurity contractual obligations. The resolution effectively closes the investigation without further litigation.