# DOJ Settles Contractor Cybersecurity Claims

The U.S. Department of Justice’s settlement with Honeywell Aerospace shows that defense contractors can face cybersecurity liability for inaccurate compliance representations even when no data breach is reported. The settlement reportedly exceeded $2 million and resolved allegations involving cybersecurity requirements on a network handling DoD information during April 2020–December 2023. The signals also report that CMMC self-assessment requirements were delayed for at least 60 days in July 2026.

- Contractors should verify that NIST- and DFARS-related certifications, SPRS scores, remediation disclosures, and internal approvals accurately reflect controls across relevant networks.
- Procurement and compliance teams should coordinate with IT, security, and business leadership so that representations made in bids, assessments, and ongoing contract performance are supported by documented evidence.
- The reported CMMC delay occurred in July 2026; it does not remove the practical need to ensure that cybersecurity claims are accurate and supportable.

**Jurisdictions:** federal
**Industries:** Defense & Military, Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** October 23, 2026

### Government Entities
- U.S. Department of Justice (DOJ)
- U.S. Department of Defense (DoD)
- National Institute of Standards and Technology (NIST)

### Vendors
- Honeywell Aerospace ()

### Key Quotes
> Not just having IT sitting at the table, or your CISO sitting at the table, I want to have compliance, business, everybody at the table
> — Michael Volkov, CEO of The Volkov Law Group

### Sources
- [
        Cybersecurity liability doesn’t necessarily start with a breach - Federal News Network](https://federalnewsnetwork.com/cybersecurity/2026/10/cybersecurity-liability-doesnt-necessarily-start-with-a-breach) - Federal News Network
- [
        A recent Justice Department settlement sends a clear message to contractors: cybersecurity liability doesn’t necessarily start with a breach - Federal News Network](https://federalnewsnetwork.com/podcast/federal-drive-with-terry-gerton-podcast/a-recent-justice-department-settlement-sends-a-clear-message-to-contractors-cybersecurity-liability-doesnt-necessarily-start-with-a-breach) - Federal News Network