Cybersecurity and the False Claims Act
Overview
Crowell helps companies that do business with the government respond to the U.S. Department of Justice’s (DOJ) recent efforts to use the False Claims Act (FCA) in addressing alleged cybersecurity noncompliance through its Civil Cyber-Fraud Initiative. We have been at the forefront of this issue since its inception, and are one of the only firms that is a leader in all relevant practice areas: FCA investigations and litigation; Cybersecurity; and Government Contracts.
Contacts
Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 5 min read | 10.06.25
From Yellow Jackets to Red Flags: DOJ Stings Georgia Tech for Alleged Cybersecurity Noncompliance
On September 30, 2025, the Department of Justice (DOJ) announced that Georgia Tech Research Corporation (GTRC) agreed to pay $875,000 to settle allegations that it violated the False Claims Act (FCA) and federal common law by failing to meet cybersecurity requirements under certain Air Force and Defense Advanced Research Projects Agency (DARPA) contracts. The settlement adds to the growing list of recoveries under DOJ’s Civil Cyber-Fraud Initiative and is yet another example of DOJ’s ongoing enforcement focus on cybersecurity obligations for federal contractors handling sensitive government information. The settlement also provides insight into how government contractors may challenge FCA liability when faced with allegations of cybersecurity noncompliance.
Client Alert | 3 min read | 08.26.25
Firm News | 11 min read | 06.05.25
Client Alert | 2 min read | 06.26.24
Another One: It Pays to Consult the DOJ under the Civil Cyber Fraud Initiative
Representative Matters
- Represented a health care contractor in an FCA investigation conducted by DOJ’s Civil Fraud section, a U.S. Attorney’s Office, and the Offices of Inspector General for the Department of Defense. We defended our client against allegations of fraudulently certifying compliance with various cybersecurity requirements in contracts for administering federal health care programs.
- Representing a global technology company in connection with an FCA investigation run jointly by DOJ’s Civil Fraud Section, the U.S. Attorney for the Eastern District of California, and the California Attorney General’s Office. The investigation concerns compliance with cybersecurity requirements in an $800 million government contract and related government contracts.
- Represented the Chief Information Security Officer of a company which recently settled an FCA Civil Cyber-Fraud Initiative matter initiated by a qui tam complaint regarding the company’s compliance with a state-level cybersecurity contract.
- Represented a space technology provider with contracts with the Department of Defense, NASA, and other federal agencies in myriad cybersecurity-related matters, including an FCA Civil Cyber-Fraud Initiative qui tam matter involving allegations that the company misrepresented its compliance with cybersecurity requirements in certain government contracts. Conducted an external cybersecurity assessment of the company’s NIST SP 800-171 and CMMC compliance.
Contacts
Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 5 min read | 10.06.25
From Yellow Jackets to Red Flags: DOJ Stings Georgia Tech for Alleged Cybersecurity Noncompliance
On September 30, 2025, the Department of Justice (DOJ) announced that Georgia Tech Research Corporation (GTRC) agreed to pay $875,000 to settle allegations that it violated the False Claims Act (FCA) and federal common law by failing to meet cybersecurity requirements under certain Air Force and Defense Advanced Research Projects Agency (DARPA) contracts. The settlement adds to the growing list of recoveries under DOJ’s Civil Cyber-Fraud Initiative and is yet another example of DOJ’s ongoing enforcement focus on cybersecurity obligations for federal contractors handling sensitive government information. The settlement also provides insight into how government contractors may challenge FCA liability when faced with allegations of cybersecurity noncompliance.
Client Alert | 3 min read | 08.26.25
Firm News | 11 min read | 06.05.25
Client Alert | 2 min read | 06.26.24
Another One: It Pays to Consult the DOJ under the Civil Cyber Fraud Initiative
Insights
Professionals
Insights
Client Alert | 5 min read | 10.06.25
From Yellow Jackets to Red Flags: DOJ Stings Georgia Tech for Alleged Cybersecurity Noncompliance
On September 30, 2025, the Department of Justice (DOJ) announced that Georgia Tech Research Corporation (GTRC) agreed to pay $875,000 to settle allegations that it violated the False Claims Act (FCA) and federal common law by failing to meet cybersecurity requirements under certain Air Force and Defense Advanced Research Projects Agency (DARPA) contracts. The settlement adds to the growing list of recoveries under DOJ’s Civil Cyber-Fraud Initiative and is yet another example of DOJ’s ongoing enforcement focus on cybersecurity obligations for federal contractors handling sensitive government information. The settlement also provides insight into how government contractors may challenge FCA liability when faced with allegations of cybersecurity noncompliance.
Client Alert | 3 min read | 08.26.25
Firm News | 11 min read | 06.05.25
Client Alert | 2 min read | 06.26.24
Another One: It Pays to Consult the DOJ under the Civil Cyber Fraud Initiative
Contacts
Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 5 min read | 10.06.25
From Yellow Jackets to Red Flags: DOJ Stings Georgia Tech for Alleged Cybersecurity Noncompliance
On September 30, 2025, the Department of Justice (DOJ) announced that Georgia Tech Research Corporation (GTRC) agreed to pay $875,000 to settle allegations that it violated the False Claims Act (FCA) and federal common law by failing to meet cybersecurity requirements under certain Air Force and Defense Advanced Research Projects Agency (DARPA) contracts. The settlement adds to the growing list of recoveries under DOJ’s Civil Cyber-Fraud Initiative and is yet another example of DOJ’s ongoing enforcement focus on cybersecurity obligations for federal contractors handling sensitive government information. The settlement also provides insight into how government contractors may challenge FCA liability when faced with allegations of cybersecurity noncompliance.
Client Alert | 3 min read | 08.26.25
Firm News | 11 min read | 06.05.25
Client Alert | 2 min read | 06.26.24
Another One: It Pays to Consult the DOJ under the Civil Cyber Fraud Initiative