Harold Thomas Martin III, a Booz Allen Hamilton contractor assigned to the NSA's Tailored Access Operations unit from 2012 to 2015 and later to the Pentagon's Office of Acquisition, Technology and Logistics, was arrested on August 31, 2016 after the FBI traced him while investigating the Shadow Brokers leak of NSA hacking tools. A SWAT raid on his Glen Burnie, Maryland home recovered more than 50 terabytes of classified material amassed over roughly two decades and originating from the CIA, NSA, U.S. Cyber Command, the Department of Defense, and the National Reconnaissance Office — stored in his residence, an unlocked shed, and his personal vehicle. Investigators were unable to determine whether the motive was espionage or digital hoarding, since prosecutors said there was no evidence Martin ever accessed the files after taking them, and he was never definitively linked to the Shadow Brokers dump that triggered the probe. The FBI was alerted after Martin used a Twitter account, @HAL_999999999, to message the Russian security firm Kaspersky Lab, which in turn notified the NSA. On July 19, 2019 he pleaded guilty to willful retention of national defense information under 18 U.S.C. § 793, and was sentenced to nine years in prison, three years of supervised release, and a $250,000 fine, underscoring systemic weaknesses in insider-threat controls at U.S. intelligence contractors.
Blog
Insights on AI security and development
Learn how to protect your code, understand AI risks, and build secure workflows with expert insights.

