ILC Dover to Pay $13 Million to Resolve Federal Cybersecurity Claims

On November 3, 2026, ILC Dover LP and ILC Astrospace LLC agreed to pay $13 million to resolve U.S. allegations that they made false representations about cybersecurity controls required to protect sensitive government information. The allegations concern federal contract work associated with the U.S. Army, the Missile Defense Agency (MDA), and the National Aeronautics and Space Administration (NASA). According to the reports, the alleged deficiencies spanned January 2018 through October 2024 and were pursued under the False Claims Act (FCA). The settlement is an enforcement outcome—not a solicitation, award of new work, or other procurement opportunity for vendors.

The case centers on reported gaps in the companies’ implementation and documentation of NIST SP 800-171 controls. Allegations described in the source materials included inadequate safeguards for information systems used to process, store, or transmit sensitive federal information; a lack of consolidated or current system security plans for covered systems; and use of third-party cloud services that allegedly did not meet applicable federal security requirements. The complaint also raised concerns that cybersecurity assessment scores submitted to the Department of Defense’s Supplier Performance Risk System (SPRS) were inflated. These are allegations resolved through settlement, and the settlement was reached without an admission of liability, according to Ingersoll Rand’s statement.

The procurement implications extend beyond the two companies. Contractors and subcontractors should treat cybersecurity commitments in solicitations, contracts, and representations supporting payment claims as verifiable performance obligations. Compliance teams can use this case to test whether control implementation matches written policies, system security plans cover each relevant environment, cloud providers meet required protections, and reported SPRS scores accurately reflect the organization’s posture. The matter also illustrates how cybersecurity attestations and contract claims can become connected under the FCA when representations to the government allegedly do not match operational practices.

The whistleblower case was filed in January 2025 by Philip Root, identified in reporting as ILC Dover’s former director of cybersecurity. The government investigated the allegations and filed notice of its intention to intervene for purposes of settlement on November 3, 2026. Root is to receive $2.35 million of the recovery, according to CyberScoop. The case is described as the largest government cybersecurity fraud recovery to date under the Department of Justice’s Civil Cyber-Fraud Initiative, announced in October 2021; other reporting characterizes it as one of the larger settlements since DOJ began applying the FCA to contractor cybersecurity shortcomings. Ingersoll Rand Inc., which acquired ILC Dover in 2024, said it became aware of the matter following the acquisition in June 2024, took prompt action, and was in compliance with applicable requirements by October 2024. The company said it resolved the matter without admitting liability and remained committed to strong cybersecurity practices.

• Settlement amount: ILC Dover and ILC Astrospace agreed to pay $13 million to resolve federal cybersecurity-related FCA allegations.
• Contract customers named: The allegations involved work associated with the U.S. Army, Missile Defense Agency, and NASA.
• Alleged period: The reported conduct covered January 2018 through October 2024.
• Control framework: The whistleblower complaint raised concerns about implementation of NIST SP 800-171 requirements for sensitive government information.
• Assessment reporting: Allegations included improperly inflated DoD SPRS cybersecurity assessment scores; contractors should validate submitted scores against current evidence.
• Cloud and documentation risks: Reported concerns included third-party cloud safeguards and missing or inadequate system security plans for covered information systems.
• Whistleblower recovery: Former cybersecurity director Philip Root is reported to receive $2.35 million from the settlement.
• Parent-company response: Ingersoll Rand said it acquired ILC Dover in 2024, addressed identified issues, and reached compliance by October 2024; it did not admit liability.
• Action for contractors: Review cybersecurity representations before submitting claims, confirm controls are operating—not merely documented—and check cloud-provider protections against contract requirements.
• Opportunity assessment: This is a compliance and enforcement signal, not a new solicitation or source of contract funding for competing vendors.