iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
David J. Rush, 49, of Ashburn, Virginia, pleaded guilty on October 6, 2026, to defrauding the U.S. government of approximately $193,590,400. According to the Department of Justice, Rush reached a senior federal position by lying about his education and military experience, then created fictitious government authorities, including a Special Access Program, to obtain public money and move it to himself.
Some headlines describe this as a “$190 million” fraud by a “CIA officer” who was “developing hacking tools.” The Justice Department’s account supports the fraud and the dollar figure. It does not name the CIA as his employer, and the hacking-tool detail comes only from a secondary report. The sections below separate those points.
How the scheme worked
The Justice Department’s announcement, published October 6, 2026 and updated October 7, 2026, describes three linked steps: getting into a senior role, inventing the authority to release money, and converting the money into assets.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Getting into a senior role
Rush held a senior executive-level position with a federal agency and a Top Secret/Sensitive Compartmented Information (TS/SCI) clearance. DOJ says he obtained the position in part by lying about his education and military experience. The clearance matters to the case because it gave him a level of trust and access that a typical employee would not have, which is why the Justice Department frames the conduct as misuse of a position of public trust rather than a theft of classified material. No espionage charge is part of the plea.
#1 Best Overall
Inventing government authority
DOJ says Rush created fictitious government authorities, including a fabricated Special Access Program. A Special Access Program is a real category of heightened-security government program, which made a fake one harder for colleagues to question. Using that cover, the scheme obtained approximately $193,590,400 in U.S. government funds.
Turning the money into assets
DOJ says Rush acquired gold bars and directed approximately $145 million in wire transfers, which were ultimately used to buy luxury real estate, luxury watches, and at least one car. The gold cost the government approximately $46 million. These two figures are components of the total, not a complete arithmetic breakdown. The Justice Department states the overall total separately.
| Component (as stated by DOJ) | Approximate amount | Note |
|---|---|---|
| Wire transfers directed by Rush | $145 million | Ultimately used to buy real estate, watches and a car |
| Gold bars acquired | $46 million | Approximate cost to the government |
| Total fraudulently obtained | $193,590,400 | Stated separately; not a sum of the components above |
What investigators recovered
The FBI executed a search on May 19, 2026. The Justice Department reports the following items were recovered:
Free tools Windows power users keep installed
One-click scans. No signup required.
| Item | Amount or count | Status in the case |
|---|---|---|
| Gold bars | 298 | Recovered in the May 19, 2026 search |
| U.S. cash | Approximately $2,106,550 | Recovered in the May 19, 2026 search |
| Euro cash | €104,795 | Recovered in the May 19, 2026 search |
| Luxury watches | Numerous recovered; 30 included in the agreed forfeiture | Forfeiture agreed under the plea |
| 2026 BMW Alpina vehicles | Two included in the agreed forfeiture | DOJ says at least one was valued at approximately $172,000 |
The Justice Department says Rush agreed to forfeit these specified assets. Forfeiture is a civil-style transfer of property to the government and is separate from the prison sentence a judge will impose.
Rank #3
CIA Director John Ratcliffe is quoted in the announcement: “Following an internal investigation that identified potential crimes, CIA immediately referred this matter to the FBI.” FBI Director Kash Patel is quoted: “This plea demonstrates the FBI’s commitment to protecting the public’s trust; and that no government position, security clearance, or access to government resources places anyone above the law.”
What the headline gets right and where it goes further
The dollar figure
The official total is approximately $193,590,400, which rounds to about $194 million. The Justice Department describes the loss as approximately $194 million. A “$190 million” headline is a loose rounding that understates the figure by about $3.6 million, so the more accurate version is $193.6 million.
The employing agency
The Justice Department describes Rush as a former federal employee and says he held a senior position with a “federal agency.” It does not name the agency in its case narrative. The CIA appears in the announcement because Director Ratcliffe’s statement says the agency referred the matter to the FBI after an internal investigation. TechRadar, in a report published October 8, 2026, calls Rush a former CIA official. That characterization is attributed to that report and has not been confirmed in the Justice Department’s own text.
The hacking tools
The claim that Rush was developing hacking tools appears in the TechRadar report. It does not appear in the Justice Department announcement, which describes the fraud, the fabricated authorities and the assets. Until the charging or plea documents are reviewed, it should be attributed to that report rather than stated as a case fact.
Best Value
What happens next
| Stage | Status | Date or limit |
|---|---|---|
| Guilty plea | Entered | October 6, 2026 |
| Forfeiture | Rush agreed to forfeit specified assets | Listed in the plea agreement |
| Sentencing | Scheduled | January 28, 2027 |
| Maximum prison term | Statutory ceiling | 20 years |
| Actual sentence | Not yet imposed | Set by the judge after statutory factors and the Sentencing Guidelines |
A guilty plea is not a sentence. The 20-year figure is the maximum the law allows, and the judge will decide the actual term at the January 28, 2027 hearing.
Where to check the court record
The Justice Department states that the plea agreement and related court documents are available through the U.S. District Court for the Eastern District of Virginia or on PACER under Case No. 1:26-cr-00185. Those documents are the place to verify the agency description, any role for the hacking-tool claim, and the exact language of the forfeiture terms.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
