Mission · Method · Terms · Privacy · Corrections
About
Mission
INSIDE THE THREAT documents insider cases from the record outward. We read the indictments, plea agreements, judgments, inspector general reports and FBI files, and we report what they show about the person in the seat: what that person could reach, what they did with it, and which control would have caught it. We do not run stings, we do not edit material to deceive, we do not entrap anyone, and we do not publish what we cannot source. Every case file cites public records, and any press source is labeled secondary, every correction is logged in the open, and every case file states its legal status as of the day we checked it. We name the institutions that failed, and we put the people who refused to be recruited on the record next to the people who were. The public interest is served by the truth told carefully, not by the loudest version of it.
The three actors, and the fourth file
| Label | Definition |
|---|---|
| WITTING | Knew the rules and broke them on purpose: for money, ideology, ego or a foreign service. |
| UNWITTING | Used by someone else. Did the job as instructed, and the job was the attack. |
| IGNORANT | No malice and no buyer. Did not grasp the risk, or ignored it, and exposed what they were trusted to protect. |
| TARGETED, REFUSED | Approached to betray, said no and reported it. These files exist because refusals are part of the record too. |
These labels are our editorial classification, not legal findings. A court decides guilt. We decide which file a case belongs in, and every story says why.
Method
- Primary sources first. Court filings, DOJ, U.S. Attorney and FBI releases, inspector general reports, congressional committee reports and official clemency records. Press coverage is used only when we cannot avoid it, and then it is labeled secondary.
- Case files, not dramatizations. Stories are written as dossiers: lede, fact rail, sourced timeline, document drawer and an analysis of what would have stopped it. There is no invented dialogue and no imagined scenes. If we ever publish a reconstruction, it carries a RECONSTRUCTION banner at the top, footnotes every factual line, and puts the dramatized material in italics.
- Quotes are checked word for word against the source text before publication.
- Status is dated. Legal status changes through appeals, remands, resentencings and pardons. Each case file shows the status, the date we checked it and the document that supports it.
- People not charged are not named. When the government uses "Company-1" or "a multinational technology company," so do we. Victims are not named unless the record names them and the naming serves the story.
- Archives. At publication, each source gets a Wayback Machine snapshot, linked next to the original wherever one exists.
- Images are honest. Cover photographs are illustrative unless marked EVIDENCE. No photograph of an identifiable real person stands in for a defendant. Image licenses are listed in the credits file.
Legal-status labels
| Label on the site | Meaning |
|---|---|
| CHARGED / ALLEGED | An indictment, complaint or information has been filed. Nothing is proven. |
| PLEADED GUILTY · [SENTENCE] | Guilty plea entered. The sentence shown comes from the judgment or the DOJ release cited. |
| CONVICTED · [SENTENCE] | Guilty verdict at trial. |
| VACATED / REMANDED | A higher court set the result aside or sent it back. The page names the court and the date. |
| PARDONED / COMMUTED | Executive clemency, cited to the Pardon Attorney or White House record. |
| CIVIL · CLOSED | A civil case that ended in a judgment or settlement. This is not a criminal finding. |
| NO PROSECUTION · ADMINISTRATIVE | Prosecutors declined, and the record is an administrative or inspector general review. |
Membership and access
- What anyone can read without an account: the cover, the header, the legal-status box, the fact rail, the start of the timeline and about the first 60 percent of every story. Source lists are never gated. A claim you cannot check is not worth publishing.
- What signing in unlocks: the rest of the story, the full sourced timeline, the document drawer with links to the original filings, the "What would have stopped it" analysis and the related case files.
- What it costs: nothing. Membership is free. An account lets us keep the site sustainable and lets members follow cases as their status changes. There is no paid tier.
- How sign-in works: Membership is free. Create an account with your email and a password, or continue with Google or X. There is no paid tier. We do not sell the address, share it, or use it for advertising.
Terms of use, in plain language
- Read, cite and link freely. Quote short passages with attribution and a link.
- Do not republish whole stories or our original graphics without written permission.
- Court records and U.S. government documents are public. Our summaries and analysis are ours. Third-party images carry their own licenses, listed in the credits.
- Nothing here is legal advice, and nothing here is an accusation beyond what the cited record states.
- Do not use this site to harass anyone named in it. Named defendants have served, are serving or are contesting sentences, and their legal status is shown for that reason.
- One account per person. Accounts used for scraping or abuse may be closed.
These terms are a working draft until the owner approves them.
Privacy
- Account: when you create an account we store your email address and display name (or the basic profile Google or X shares with us if you use them), a hashed password if you use email and password, and a session cookie that keeps you signed in. We do not sell or share this data, we do not run ad trackers, and you can ask for your account to be deleted at [email protected].
- Do not send us classified or protected information. We do not want it, we will not publish it, and sending it may be a crime. Send public records, docket numbers and corrections.
Corrections
We correct errors of fact openly. A corrected story carries a dated note that says what changed, and every correction is entered in the public corrections log. A correction is never silent, and a case file is never quietly deleted. When a legal status changes, the status box shows the new date and source.
To report an error, send the page, the claim and the primary record that contradicts it.
Corrections log (pre-publication fact-check, Oct 2026)
| Case | Claim | Verdict | Finding |
|---|---|---|---|
| rimasauskas-bec | Victim companies named from press reports (v1 plan) | CORRECTED | DOJ names them only as "a multinational technology company and a multinational online social media company". Press identifications must be attributed. |
| kriuchkov | Targeted company named from press reports | CORRECTED | Not in the DOJ release or the judgment. Press-reported only (AP link returns 403 to automated fetch). Use "a Nevada company" or attribute to press. |
| twitter-2020 | Employees were phone spear-phished (v1 plan) | UNVERIFIABLE | Attributed to the NYDFS report, which blocks automated access. DOJ says only "technical breaches and social engineering." Re-read NYDFS in a normal browser before publishing. |
| twitter-2020 | Final outcomes for Sheppard, Fazeli, and the juvenile | UNVERIFIABLE | Not checked against primary sources in this pass. Describe them as charged/alleged only. |
| winner | 63-month sentence, cited to the USAO statement | CORRECTED | The USAO statement doesn't state the term. The citation moved to the judgment (Doc. 327). |
| tesla-v-tripp | Status "ALLEGATION / ongoing" (v1) | CORRECTED | Closed by a stipulated judgment: $400,000 damages plus $25,000 sanctions. Tripp "does not contest" Tesla's contentions. |
| (plan) | An insider-sabotage story idea (details withheld) | REMOVED | No primary source found. |
| levandowski | Clemency status open (v1) | CORRECTED | Pardon granted Jan 19, 2021, per the DOJ Pardon Attorney list. |
| xiaorong-you | Status: serving 168 months (v1) | CORRECTED | The sentence was vacated by the 6th Cir. (2023). Intended loss was redetermined at $30.45M, with resentencing Sept 16, 2024. |
| xiaorong-you | Resentence: 168 months and $200,000 fine reinstated | UNVERIFIABLE (primary) | Reported by WCYB (secondary). The amended judgment was not found on free sources. |
| paige-thompson | Status: time served plus probation (v1) | CORRECTED | Vacated by the 9th Cir. (Mar 17, 2025). Resentenced Oct 29, 2025 (Dkt. 462/463). |
| abouammo | Status: serving 42 months (v1) | CORRECTED | Sentence vacated (9th Cir. 2024). Resentenced to time served (June 26, 2025). Supreme Court reversed on §1519 venue (June 11, 2026). |
| abouammo | Proceedings after the July 13, 2026 Supreme Court judgment | UNVERIFIABLE | Not checked (CourtListener rate-limited the build box). |
| hanssen | Espionage began in 1985 | CORRECTED (nuance) | The FBI page says 1985, but DOJ OIG dates the first episode to Nov 1979. Cite both. |
| snowden | Status of the criminal charges | UNVERIFIABLE | DOJ (2019) references the charges. The complaint and current status were not re-pulled. |
| ames | Current custody / alive status | UNVERIFIABLE | Not checked. Omitted from the copy. |
| nickolas-sharp | Employer named from press reports | ATTRIBUTE | DOJ says "Company-1". The identification comes from press only. |
| chapman-laptop-farm | Plea year 2025 | VERIFIED (inferred) | The release says "Feb. 11" with no year. Confirm on the docket. |
| teixeira | DOJ release: concealment "shortly before his arrest in April 2022" | CORRECTED (source erratum) | The same release dates the arrest to April 2023. The site uses 2023 and notes the erratum. |
| (plan v1) | Placeholder docket field and sample hash | REMOVED | Removed in v1. All dockets now come from court documents. |
| tesla-v-tripp / winner / teixeira | Docket numbers | VERIFIED | Each is read off a filed document header or the docket page. |
| va-2006-data-loss (v3 story) | Quote: "a serious error in judgment" | CORRECTED | The source reads "This serious error in judgment". The copy now says: calling it a "serious error in judgment". |
| hanssen (v3 story) | His home in Maryland (draft line) | REMOVED | An inference that is not stated in the cited sources. |
| winner (v3 story) | Date of mailing the document | CORRECTED | The cited sources give no exact date, so the timeline shows n/d. |
| ames (v3) | SSCI report URL (flagged as possibly unverified in v2) | VERIFIED | The PDF is linked from the SSCI site, downloaded, and text-checked (141 pp.). It now backs the Ames findings. |
| nickolas-sharp / kriuchkov / rimasauskas-bec (v3) | Press-identified company names on public fact sheets | CORRECTED | Removed from the published case-sheet titles and notes. DOJ anonymization is used throughout. The internal log keeps the history. |
Contact
Editorial and corrections: [email protected] Rights and permissions: [email protected]
Editor-in-chief: LastPsyOp.
Updated 2026-10-20