Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

14cases from 1 jurisdiction
€721.8mTotal of monetary amounts (12 cases with an amount)
€338.4mLargest single case: RTX Corporation (Raytheon Company)
€29.6mMedian per case with an amount

Click a bar to drill down one level.

When?

per year, by date of decision
Trend
PeriodCasesTotal
20244€566m
20255€92.4m
20265€63.4m

14 cases

4 Aug 2026 BAE Systems, Inc.DDTC: USD 36 million against BAE Systems for ITAR violations, including a China link USAExport control and dual-use goods €31.3m

The DDTC settled with BAE Systems, Inc. for a civil penalty of USD 36 million. The allegations concerned unauthorised exports and retransfers of defence articles to several countries, in one case to the People's Republic of China, the unauthorised furnishing of defence services and breaches of authorisation provisos. USD 18 million is suspended for approved compliance measures and USD 18 million is payable in three instalments; the agreement requires, among other things, an external compliance audit. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Retransfers by recipients must be controlled contractually and organisationally just as strictly as one's own exports.

Relevance to training and awareness

ITAR compliance: retransfers, defence services and authorisation provisos

Authority / court
U.S. Department of State, Directorate of Defense Trade Controls (DDTC)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Arms Export Control Act § 38 (22 U.S.C. § 2778); ITAR, 22 C.F.R. Parts 120–130, insbesondere Part 127 und § 128.11
Action
Fine
Status of proceedings
final
Sector
Defence and security
Mitigating circumstances
The company reported the matters in voluntary disclosures and in response to a disclosure directed by the DDTC, and cooperated with the review.

Original amount 36,000,000 USD, converted at the ECB reference rate of 4 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Jun 2026 LOGZONE Inc.LOGZONE pays 507,144 USD over lack of cybersecurity in Navy contracts USAOther €442,495

The Huntsville-based defence services provider allegedly invoiced two Navy contracts from May 2021 to March 2025 even though it had not implemented the security controls under NIST SP 800-171 required by the contracts. The settlement under the False Claims Act with the U.S. Department of Justice amounts to 507,144 USD.

What organisations can take from it

Companies that commit to cybersecurity requirements in government contracts must document their implementation verifiably – otherwise every invoice becomes a liability risk.

Authority / court
U.S. Department of Justice (Civil Division) / USAO Northern District of Alabama
Area of law
Other
Legal basis
False Claims Act (31 U.S.C. §§ 3729 ff.); DFARS-Cybersicherheitsklauseln
Action
Other
Status of proceedings
final
Sector
Defence and security
Published
18 Jun 2026

Original amount 507,144 USD, converted at the ECB reference rate of 18 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Apr 2026 General Electric CompanyDDTC: USD 36 million against General Electric for technical data exports to China USAExport control and dual-use goods €30.5m

The DDTC settled with General Electric Company for a civil penalty of USD 36 million for ITAR violations: unauthorised exports of technical data to the People's Republic of China, breaches of authorisation provisos, unauthorised exports of defence articles and failure to report material changes to its ITAR registration. USD 18 million is suspended for approved compliance measures and USD 18 million is payable in three instalments. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Changes to one's own ITAR registration must also be reported and belong in the compliance calendar.

Relevance to training and awareness

ITAR registration and control of technical data with a China link

Authority / court
U.S. Department of State, Directorate of Defense Trade Controls (DDTC)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Arms Export Control Act § 38 (22 U.S.C. § 2778); ITAR, 22 C.F.R. Parts 120–130, insbesondere Part 127 und § 128.11
Action
Fine
Status of proceedings
final
Sector
Defence and security
Employees
10,000 or more
Mitigating circumstances
The allegations are based on facts that the company itself disclosed to the DDTC.

Original amount 36,000,000 USD, converted at the ECB reference rate of 17 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Feb 2026 Teledyne FLIR LLCTeledyne FLIR: thermal imaging cameras incorrectly assessed and supplied to Entity List address USAExport control and dual-use goods €846,453

The manufacturer of militarily relevant thermal imaging technology admitted 19 violations to the US Commerce Department's Bureau of Industry and Security (BIS): incorrect de minimis calculations for cameras that went to China via Sweden, pricing arranged with a Chinese drone manufacturer to circumvent the licence requirement, missing records and eight deliveries in 2024 to a Hong Kong address on the Entity List that the screening software did not detect.

What organisations can take from it

Actively incorporate new forms of listing, such as address-only entries, into screening; do not rely solely on the software provider.

Relevance to training and awareness

De minimis calculation, address-based Entity List entries in screening

Authority / court
U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Administration Regulations, §§ 734.4 (De minimis), 744.16, 764.2(a), (b), (h), (i)
Action
Fine
Status of proceedings
final
Sector
Defence and security
Mitigating circumstances
Voluntary self-disclosures for some of the violations
Published
26 Feb 2026

Original amount 1,000,000 USD, converted at the ECB reference rate of 26 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Feb 2026 Vizocom ICTVizocom: blueprints for military antenna sent to China and copies supplied to the US Navy USAExport control and dual-use goods €317,971

The Californian dealer had won a Navy contract for 450 VHF/UHF antennas from a US manufacturer, but in 2019 uploaded the export-controlled production specifications of the purely military antenna without a licence to the portal of a Chinese manufacturer, had the antennas produced there for 6 USD each and supplied them to the Navy with false manufacturer information for 165,109.50 USD. The Bureau of Industry and Security (BIS, the export control agency of the US Department of Commerce) imposed 374,474 USD in 20 instalments and a denial of export privileges suspended for five years.

What organisations can take from it

Do not send specifications of military goods to foreign manufacturers without a licence – even uploading a drawing to a supplier portal is an export.

Relevance to training and awareness

Technical drawings and specifications as export-controlled technology

Authority / court
U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Administration Regulations, 15 C.F.R. § 764.2(a), §§ 742.4, 742.6 (ECCN 3E611)
Action
Fine
Status of proceedings
final
Sector
Defence and security
Culpability
intentional
Liability of senior managers
Measures against individuals are not reported here.
Published
25 Feb 2026

Original amount 374,474 USD, converted at the ECB reference rate of 24 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Dec 2025 The Boeing Company und Spirit AeroSystems Holdings, Inc.Boeing/Spirit AeroSystems: takeover only with divestiture of Airbus supplier plants USAMerger control Order

For the 8.3 billion USD takeover of the fuselage and wing supplier Spirit AeroSystems, the Federal Trade Commission (FTC) required Boeing to divest Spirit’s Airbus businesses to Airbus and the plant in Subang, Malaysia, to CTRM, to provide transitional services and to continue supplying defence competitors. A monitor oversees implementation.

What organisations can take from it

Vertical acquisitions of a supplier on which competitors also depend often only go through with divestitures and supply commitments.

Authority / court
Federal Trade Commission (FTC)
Area of law
Competition law · Merger control
Legal basis
Section 7 Clayton Act; Section 5 FTC Act (Consent Order)
Action
Order
Status of proceedings
unknown
Sector
Defence and security
Employees
10,000 or more

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

31 Jul 2025 Aero Turbine Inc.; Gallant Capital Partners LLCAero Turbine and Gallant pay 1.75 million USD after self-disclosure on cyber obligations USAOther €1.53m

From 2018 to 2020, the engine maintenance company allegedly failed to implement the NIST controls of an Air Force contract and, in 2019, together with its private equity owner, passed files containing sensitive defence data to an unauthorised software company in Egypt. The companies had made several written self-disclosures, cooperated and remedied the issues promptly; the U.S. Department of Justice (DOJ) granted them cooperation credit for this. Settlement of 1.75 million USD.

What organisations can take from it

Companies that pass controlled defence data to service providers must check their authorisation – self-disclosure and cooperation significantly reduce the consequences.

Relevance to training and awareness

Handling controlled defence data and service providers

Authority / court
U.S. Department of Justice (Civil Division) / USAO Eastern District of California
Area of law
Other
Legal basis
False Claims Act; NIST SP 800-171
Action
Other
Status of proceedings
final
Sector
Defence and security
Mitigating circumstances
Several written self-disclosures, cooperation and prompt remedial measures.
Published
31 Jul 2025

Original amount 1,750,000 USD, converted at the ECB reference rate of 31 Jul 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 May 2025 L3 Technologies Inc.L3 Technologies pays 62 million USD over false cost data for communications technology USAOther €54.8m

Between October 2006 and February 2014, the Communications System West division allegedly failed to disclose complete and current cost and pricing data when selling ROVER, VORTEX and SIR receivers to the Air Force, Army, Navy and other agencies. Settlement under the False Claims Act and the Truth in Negotiations Act of 62 million USD.

What organisations can take from it

In fixed-price negotiations with the government, costing data must be disclosed completely and on a current basis; price review processes belong in the compliance system.

Authority / court
U.S. Department of Justice (Civil Division) / USAO District of Utah
Area of law
Other
Legal basis
False Claims Act; Truth in Negotiations Act
Action
Other
Status of proceedings
final
Sector
Defence and security
Employees
10,000 or more
Published
22 May 2025

Original amount 62,000,000 USD, converted at the ECB reference rate of 22 May 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 May 2025 Raytheon Company; RTX Corporation; Nightwing Group LLC; Nightwing Intelligence Solutions LLCRaytheon and Nightwing pay 8.4 million USD over cybersecurity deficiencies in DoD contracts USAOther €7.39m

Between 2015 and 2021, the companies allegedly failed to prepare a system security plan for an internal development system used for 29 Department of Defense contracts and did not comply with the clauses DFARS 252.204-7012 and FAR 52.204-21. Settlement under the False Claims Act of 8.4 million USD; a former employee received 1.512 million USD as a whistleblower.

What organisations can take from it

Internal development environments are also covered by contractual cybersecurity obligations and need a documented security plan.

Authority / court
U.S. Department of Justice (Civil Division) / USAO District of Columbia
Area of law
Other
Legal basis
False Claims Act; DFARS 252.204-7012; FAR 52.204-21
Action
Other
Status of proceedings
final
Sector
Defence and security
Employees
10,000 or more
Published
1 May 2025

Original amount 8,400,000 USD, converted at the ECB reference rate of 30 Apr 2025.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Feb 2025 Lockheed Martin CorporationLockheed Martin pays 29.74 million USD over inflated price proposals for the F-35 USAOther €28.7m

From 2013 to 2015, Lockheed Martin allegedly failed to provide the Joint Program Office with accurate cost and pricing data for five production and sustainment contracts for the F-35 programme and thereby obtained inflated prices. The settlement amounts to 29.74 million USD, in addition to 11.3 million USD that had already been paid to the Department of Defense; it was triggered by a qui tam action.

What organisations can take from it

Whistleblower actions from within the company make pricing errors costly even years later – internal reporting channels must pick up such issues early.

Authority / court
U.S. Department of Justice (Civil Division) / USAO Eastern District of Texas
Area of law
Other
Legal basis
False Claims Act; Truth in Negotiations Act
Action
Other
Status of proceedings
final
Sector
Defence and security
Employees
10,000 or more
Published
6 Feb 2025

Original amount 29,740,000 USD, converted at the ECB reference rate of 6 Feb 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Nov 2024 Evolv Technologies Holdings, Inc.FTC: Evolv to let schools exit contracts – alleged overstated advertising for AI weapons scanners USAAI systems Order

According to the complaint of the Federal Trade Commission (FTC, the US consumer protection authority), Evolv advertised that its AI-powered security scanners would detect all weapons, ignore harmless items and be more accurate and faster than metal detectors; according to the complaint, the devices at one school missed a knife in October 2022 that was used to stab a student. The settlement order filed together with the complaint at the federal court in Massachusetts is to allow schools with contracts from April 2022 to June 2023 to cancel and to prohibit unsubstantiated claims about detection performance, false alarms and staffing costs; according to the FTC case page, court approval was still pending in March 2025.

What organisations can take from it

Keep performance claims for safety-critical AI accurate – overstated claims become a contractual risk, and customers can be released from contracts based on them.

Relevance to training and awareness

Performance claims for AI security technology

Authority / court
Federal Trade Commission (FTC)
Area of law
AI and digital regulation · AI systems
Legal basis
Section 5 FTC Act; Stipulated Order for Permanent Injunction
Action
Order
Status of proceedings
unknown
Sector
Defence and security
Published
26 Nov 2024

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Oct 2024 RTX Corporation (Raytheon Company)RTX (Raytheon) pays around 369 million USD for bribing a Qatari military official USABribery of public officials €338.4m

From 2011 to 2017, Raytheon paid almost 2 million USD via sham subcontracts to Qatari military and other public officials and more than 30 million USD to an agent from the ruling family. SEC order: disgorgement of 37,400,090 USD, interest of 11,786,208 USD and a penalty of 75 million USD (of which 22.5 million USD was credited against the DOJ payment); under the DPA with the DOJ, 267,096,068 USD (230.4 million penalty, 36,696,068 forfeiture) is attributable to the FCPA part, combined with an Arms Export Control Act violation and a three-year monitorship. Total without double counting: 368,782,366 USD.

What organisations can take from it

Subcontracts without verifiable services are a classic vehicle for bribes – defence exporters must also disclose payment flows to export control authorities.

Relevance to training and awareness

Sham subcontracts and agents in defence transactions

Authority / court
U.S. Securities and Exchange Commission (SEC); U.S. Department of Justice
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
FCPA (Anti-Bestechung, Buchführung, interne Kontrollen, Sections 30A, 13(b)(2)(A)/(B) Exchange Act); Arms Export Control Act; DPA
Action
Fine
Status of proceedings
final
Sector
Defence and security
Employees
10,000 or more
Culpability
intentional
Published
16 Oct 2024

Original amount 368,782,366 USD, converted at the ECB reference rate of 16 Oct 2024.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 Aug 2024 a US defence groupDDTC: USD 200 million against US defence group for ITAR violations USAExport control and dual-use goodsanonymised €180.4m

The US State Department's Directorate of Defense Trade Controls settled with a US defence group for a civil penalty of USD 200 million for violations of the Arms Export Control Act and the ITAR. The allegations concerned unauthorised exports of defence articles resulting from flawed jurisdiction and classification decisions, further unauthorised exports, including of classified defence articles, hand-carried exports by employees to countries proscribed under ITAR § 126.1, and breaches of authorisation provisos. USD 100 million is suspended provided the group spends it on approved compliance measures; USD 100 million is payable in three instalments.

What organisations can take from it

Correct jurisdiction and classification decisions are the basis of every export authorisation; errors there multiply across the portfolio.

Relevance to training and awareness

Export control for defence articles: classification, hand-carry and authorisation provisos

Authority / court
U.S. Department of State, Directorate of Defense Trade Controls (DDTC)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Arms Export Control Act § 38 (22 U.S.C. § 2778); ITAR, 22 C.F.R. Parts 120–130, insbesondere Part 127 und § 128.11
Action
Fine
Status of proceedings
final
Sector
Defence and security
Employees
10,000 or more
Mitigating circumstances
The allegations are based on facts that the group itself disclosed to the DDTC.

Original amount 200,000,000 USD, converted at the ECB reference rate of 29 Aug 2024.

Checked against the official source on 8 Oct 2026 · Company name anonymised since 29 Aug 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Feb 2024 a US aerospace groupDDTC: USD 51 million against US aerospace group for unauthorised technical data transfers USAExport control and dual-use goodsanonymised €47.2m

The DDTC settled with a US aerospace group for a civil penalty of USD 51 million for ITAR violations: unauthorised exports and retransfers of technical data to foreign-person employees and contractors, unauthorised exports to the People's Republic of China as a proscribed country, and breaches of authorisation provisos. USD 24 million is suspended for approved compliance measures; USD 27 million is payable in three instalments.

What organisations can take from it

Access by foreign-person employees to controlled technical data is an export and requires authorisation and technical access controls.

Relevance to training and awareness

Deemed exports: foreign-person employees' access to controlled technical data

Authority / court
U.S. Department of State, Directorate of Defense Trade Controls (DDTC)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Arms Export Control Act § 38 (22 U.S.C. § 2778); ITAR, 22 C.F.R. Parts 120–130, insbesondere Part 127 und § 128.11
Action
Fine
Status of proceedings
final
Sector
Defence and security
Employees
10,000 or more
Mitigating circumstances
The allegations are based on facts that the group itself disclosed to the DDTC.

Original amount 51,000,000 USD, converted at the ECB reference rate of 28 Feb 2024.

Checked against the official source on 8 Oct 2026 · Company name anonymised since 28 Feb 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

Ready for training that actually lands?

Try the combination for free: automated administration for you, learning formats that fit your team, with no minimum or credit card.

Start 14-day free trial