DOJ settles Honeywell aerospace FCA cyber case for $2M
Honeywell Aerospace paid a $2.04M FCA settlement for alleged failure to meet NIST SP 800‑171 cybersecurity requirements on Defense Department contracts.
On September 1, 2026, Honeywell Aerospace agreed to pay $2,042,518 to settle False Claims Act allegations that the company failed to meet NIST Special Publication 800‑171 security controls on a Department of Defense contract. The U.S. Department of Justice’s Civil Cyber‑Fraud Initiative uses the FCA to pursue contractors that neglect required cybersecurity measures, misrepresent practices, or omit incident reporting. The settlement underscores that even isolated network non‑compliance can trigger multi‑million‑dollar liability and highlights the high value the government now places on NIST SP 800‑171 adherence for contractors handling Controlled Unclassified Information. Whistleblower qui tam actions remain a primary enforcement catalyst, and the case reinforces the importance of robust internal reporting and self‑disclosure programs. For sophisticated counsel, the decision signals a need to rigorously document compliance, scope systems precisely, audit DFARS clause 252.204‑7012 obligations, and prepare for increased scrutiny as the CMMC 2.0 pause shifts focus to self‑certification enforcement. The broader trend suggests that defense and other federal contractors should prioritize proactive cyber compliance and consider voluntary disclosures to mitigate FCA exposure.