Ex-CIA employee Joshua Schulte, who allegedly leaked Vault 7 hacking tools to WikiLeaks, charged with violations of the Espionage Act and related crimes
Federal prosecutors charged a former CIA employee Monday with violations of the Espionage Act and related crimes in connection with the leak …
Context & Ripple Effects
This indictment closes a gap the government itself had flagged: just over a month earlier, sources told the Washington Post that investigators had identified a former CIA employee as the suspect in the Vault 7 leak but were unable to bring charges. The Espionage Act filing converts that stalled identification into a formal prosecution of Joshua Schulte.
The case became the rare leak prosecution that ran the full arc — after a first jury deadlocked on most counts, a second convicted Schulte on nine counts in 2022, and he was ultimately sentenced to 40 years in prison in February 2024, making the 2018 charging decision the pivot point of the government's Vault 7 response.
First-order effects
- Schulte now faces Espionage Act counts and related charges over the alleged transfer of the CIA's hacking arsenal to WikiLeaks, moving his status from unnamed suspect to formally accused defendant.
- The CIA gains a prosecutorial answer to the Vault 7 exposure, shifting its response from internal damage assessment to a public criminal case.
Second-order effects
- WikiLeaks' publication of the Vault 7 material becomes evidence in a US criminal proceeding, entangling the outlet's sourcing practices in the prosecution's record.
- A successful conviction would hand prosecutors a template for pursuing insider leaks even when the initial investigation stalls — the exact failure mode reported before these charges.
Third-order effects
- If the pattern holds, Espionage Act charges become the default instrument against intelligence-community insiders who leak cyber tools, with multi-year trials and severe sentences raising the personal cost of disclosure well beyond earlier leak cases.
The trend: The US government is treating leaks of offensive cyber capabilities as among its most aggressively prosecuted secrets, using the Espionage Act to convert hard-to-prove insider cases into convictions.