How Oxygen Forensics Reached U.S. and European Police Despite Alleged Russian Control

Oxygen Forensics’ Virginia base and U.S.-facing sales helped it supply digital-forensics tools to government customers, while its products also reached European law enforcement. Federal prosecutors now allege the company’s ownership and software-development ties to Russia were concealed from U.S. agencies. Separately, public reporting connects Oxygen to EU-funded digital-evidence projects—but participation in a project is not proof the company received EU grant money. 178

What U.S. prosecutors allege

The Justice Department says Oxygen represented to U.S. government agencies that it had no foreign ownership or control and that its software was developed in the United States. Prosecutors allege instead that five Russian nationals, including co-founder Oleg Davydov, owned and controlled the company and that the software was developed in Russia. CEO Lee Reiber and Davydov were charged with conspiracy to commit wire fraud. The claims are allegations, not findings of guilt. 17

Oxygen’s U.S. government customers included the Secret Service, according to reporting on the case. The alleged misrepresentations matter because customers evaluating a vendor may consider who controls a company and where its technology is developed. 1217

The Russian sister company

Prosecutors’ account also links the alleged owners to Moscow-based Oxygen Software LLC, later renamed MKO Systems LLC. Davydov was associated with the company’s software development, according to the complaint as described by the Organized Crime and Corruption Reporting Project. The reporting says the Russian company sold related software to Russian security and law-enforcement customers. 11

That relationship raises questions about ownership, development, and supply-chain transparency. It does not, on its own, prove that Russian authorities could access information examined by a separate customer using Oxygen’s tools.

How Oxygen appeared in European policing and EU projects

Oxygen’s European presence had more than one route: its tools were sold to law-enforcement agencies, and public records reviewed by Politico placed the company in at least two EU-funded digital-evidence initiatives. 81

In EVIDENCE, a project that received more than €1.9 million in EU funding between 2014 and 2016, Oxygen was listed among companies consulted on handling and exchanging digital evidence. That reported consulting role does not establish that Oxygen itself received EU funding. Reporting also connects the company with INSPECTr, a Horizon 2020 project, but the available descriptions do not specify the same level of detail about Oxygen’s role or any payment to it. 81

Oxygen products were also reported as available for police use in Italy. A technical document cited in Italian coverage listed Oxygen among systems that could be used by police; that is distinct from a conclusion that every police force used the tools in the same way. 413

What the allegations mean for digital evidence

The case makes vendor disclosure and validation important questions for agencies and defense teams. For a particular examination, relevant issues may include which tool and version were used, how the device was processed, whether the results were independently checked, and what information about ownership or development was disclosed.

But the ownership allegations do not automatically make evidence unreliable or inadmissible. Prosecutors have not alleged that Oxygen’s software contained a backdoor or malicious code, according to reporting on the case. Whether a specific result is challenged would depend on the facts of that examination and the applicable legal process. 18

The central distinction is between an alleged failure to disclose who owned and developed a forensic tool and evidence that the tool itself manipulated or exposed data. The first is at the heart of the U.S. allegations; the second has not been established by the sources cited here.