Ian Brinksman charged: how the FBI traced a leak to a Substack newsletter

Federal authorities arrested Ian A. Brinksman, 42, a Washington, D.C.-based government contractor, on Friday, October 23, 2026, following an FBI search of his residence, the Department of Justice announced. Brinksman was charged via criminal complaint with unlawfully transmitting national defense information.

Investigators allege Brinksman used his position of trust and access to sensitive government systems to obtain and share classified material with his girlfriend, who writes an online publication on Substack. The sources describe him only as a government contractor and an employee of a third-party company that provided services to a government agency. No specific job title or employer name is given, and the agency involved is not named.

The DOJ release cited a September 2026 fundraising article reportedly published by "Individual 1" claiming she had "published reporting based on classified [relevant U.S. government agency] assessments," and a social media post stating, "I also accept leaks." Quotes in the affidavit match posts to the Capital & Empire Substack, written by Aida Chavez, according to reporting. Chavez did not immediately respond to a request for comment.

The sources do not specify the date of the alleged leak. They reference the September 2026 fundraising article but do not date the transmission itself. It is also unknown how the FBI identified Brinksman as the alleged source, what specific classified material is alleged to have been transmitted, and which agency it pertained to.

The case sits at the intersection of national security, insider threat enforcement, and independent media. It tests how the justice system treats alleged leaks routed through a romantic partner to a subscription publication, and what it signals about DOJ's willingness to pursue contractors with trusted access. The unusual conduit at the center — a government contractor allegedly passing national defense information to a romantic partner who runs a Substack publication — raises questions about how classified material moves through trusted-access insiders into independent media.