In a significant development that has raised alarms across the digital forensics community, U.S. and British authorities apprehended the chief executive officer and chief technology officer of Oxygen Forensics, a software firm known for its phone hacking technologies widely utilized by law enforcement and criminal investigators. The arrests were initiated after federal prosecutors accused the executives of deliberately concealing the firm’s connections to Russia.

Oleg Sergeyevich Davydov, the 52-year-old CTO and owner of the Moscow-based firm, was detained at London Heathrow Airport while en route to Istanbul. Meanwhile, Lee Reiber, the 55-year-old CEO based in Boise, Idaho, was arrested in his home state. Reiber was later released on bond shortly thereafter. Both executives now face serious charges, including conspiracy to commit wire fraud, specifically for allegedly hiding the Russian nationality of five key leaders and the fact that the company’s software, employed by various federal agencies for extracting data from smartphones, was developed behind the Iron Curtain.

Interestingly, the complaint from federal authorities clarified that there was no assertion that the software itself contained any malicious code or that it had been utilized to unlawfully access any customer’s data or computer systems. Nonetheless, the implications of these arrests are profound given the sensitive nature of the software utilized in investigative contexts.

The investigations into Oxygen Forensics have reportedly been ongoing since approximately May 2025. While the Russian origins of the company have been a point of concern within digital forensic circles for some time, many practitioners have maintained that they were aware of the firm’s background from the outset. Heather Barnhart, head of faculty, and curriculum director Lee Crognale from the Sans Institute acknowledged that there has always been transparency within certain expert communities regarding the company’s historical ties to Russia.

The allegations against Reiber suggest a pattern of deceit; he purportedly represented that the ownership of the company was traced back to Cyprus, while in reality, Davydov, along with other Russian nationals, held ownership and control of the enterprise. Following the imposition of sanctions on Russia, such ownership became especially problematic for Oxygen Forensics. Prosecutors revealed that Reiber issued a warning to Davydov in November 2023, indicating that public disclosures about the company’s true ownership could jeopardize its future, emphasizing that “the current existence of this company hangs in the balance.”

Financially, the stakes are high. Federal contract data indicates that the U.S. government has invested upwards of $5.6 million on Oxygen’s forensic technologies since 2011, with the Department of Homeland Security alone accounting for $2.7 million. The software is widely deployed across a range of federal agencies as well as state and local law enforcement entities, underscoring its critical role in modern investigative procedures.

A notable contract, estimated at $12 million over five years, was awarded by the U.S. Secret Service National Computer Forensics Institute, cementing Oxygen Forensics’ position as a major tool in the arsenal of digital forensics, often introduced in training programs for state and local police.

Davydov originally launched the Russian company, then known as Oxygen Software, back in 2000, before later rebranding to MKO-Systems in 2022. The foundation of a U.S. subsidiary took place in 2013, and Davydov was listed as its vice president in corporate documents until geopolitical tensions escalated with the Russian invasion of Ukraine in 2022.

Remarkably, just weeks before their arrests, Oxygen Forensics initiated a defamation lawsuit against a former employee, who reportedly claimed that the company was under the control of the Russian Federal Security Service. Independent investigations earlier this year also spotlighted an individual named Eduard Benderskiy, listed in the context of Oxygen Forensics, who has been identified by British police as a former high-ranking official within Russia’s FSB and sanctioned by U.S. authorities for facilitating connections between a notorious hacking group and Russian intelligence operatives.

Experts within the industry have weighed in on the situation, asserting that the use of foreign-made forensic tools is not inherently problematic, provided that vendors are transparent about their origins. However, this latest criminal complaint may lead to greater scrutiny on the validity of evidence produced by Oxygen Forensics’ tools in ongoing and future cases. Authorities have advised that investigators ensure sound practices are adhered to, such as validating and documenting results with multiple tools, to mitigate potential challenges in the courtroom. In the end, no allegations have been made that would suggest inaccuracies in the results yielded by their software, leaving the industry to grapple with the implications of these arrests long into the future.