Security

DoJ: Ex-soldier tried to pass secrets to China after seeking a 'subreddit about spy stuff'

FBI agent claims sergeant with top clearance offered access to DoD tech systems


A former US Army Sergeant with Top Secret US military clearance created a Word document entitled "Important Information to Share with Chinese Government," according to an FBI agent's sworn declaration.

Joseph Daniel Schmidt, aged 29, was arrested on Friday in San Francisco after disembarking a flight from Hong Kong, officials said. He was to appear in a US District Court for the Northern District of California on Friday afternoon and would be brought to the Western District of Washington for further court proceedings, the Department of Justice said in a statement.

The DoJ said the man's last duty post was in western Washington, at Joint Base Lewis-McChord – a major Army installation – and he was charged with two federal felonies: attempting to deliver national defense information, and retention of national defense information.

The DoJ said that during active duty, Schmidt was part of the Human Intelligence ("HUMINT") squad, first working as an intelligence collector and ultimately becoming a team leader of other HUMINT collectors. His work fell under the Indo-Pacific Command, the DoD's geographic combatant unit that covers the Pacific Ocean and Indian Ocean region, including China. It noted he had been trained in "counterintelligence collections"; "Human Intelligence Operation Management"; and "Human Intelligence Tradecraft"; and also attended the department's Defense Language Institute Chinese-Mandarin training.

The DoJ said Schmidt retired from active duty in January 2020, traveling to China, then back to the US, then to Istanbul in February 2020, before returning to the US again, and then going back to China in March 2020.

The FBI's declaration doc contains numerous allegations about a level of bumbling that hardly seems credible, including an accusation that Schmidt offered to share Top Secret info via a Gmail address linked to his name. It also claims he sent the first email it cites in the document speculatively, while visiting Turkey, seemingly deciding the publicly listed email address for the Chinese Consulate in Istanbul would do, where the document accuses him of offering to share "information I learned during my career."

Also while in Turkey, an FBI agent declaration states, Schmidt used Google to research which countries don't have extradition treaties with the United States before allegedly entering several other search queries that had The Reg staffers looking over our own to ascertain how humiliating they might be in a situation where they were somehow made publicly available.

Among the alleged searches detailed in the court filing were:

According to special agent Brandon Tower, after Schmidt left for China, he later sent an email to a Chinese state-owned enterprise. Tower alleged in his declaration that the former soldier appeared to have "used Google to conduct ... research ... which identified" the company "as being under the direct control of the PRC State Council."

The testimony accuses the ex-Army sergeant of sending the following email:

Hello, I am a retired United States Army Intelligence Agent. I have a Secret Internet Protocol Routing PKI token that I would like to reverse engineer to give to the Chinese government. This type of card is what US intelligence agencies use to gain access to [Secret Internet Protocol Router Network] SIPR, the intelligence network with TOP SECRET documents and information. It is a very rare card to find outside of the intelligence community, and if used properly, it can improve China's ability to access the SIPR network.

If I give you card, can you look into the security algorithms that it uses for me? By the way, I'm sorry my Chinese is so bad. I don't know how to translate most of this terminology, and I appreciate your patience. Where can I turn in the card at? Thank you!!

Best regards, Joey

According to the US Army, the PKI card is an encryption key for accessing the Army's classified Secret network and related databases, referred to as the Secret Internet Protocol Router Network ("SIPRnet").

According to the filings, Schmidt used four email addresses, one Yahoo!, one Outlook address, and two Gmail addresses, all attached to the name "Joey Schmidt," "Joe Schmidt," or "Joseph Schmidt," and with the second Gmail address as the recovery email for the first. Both Gmail addresses were tied to his iCloud account, claims the DoJ. Schmidt used the second Gmail account to book trips to China while he was on active duty, using personal leave to travel there, the DoJ adds.

The FBI claims that in July 2020, just two weeks before sending the email, he was told by Hong Kong immigration authorities that he had been "overstaying in Hong Kong."

Special agent Tower went on to claim that "since his arrival in Hong Kong in early March 2020," Schmidt had been trying to find work in China and a PRC work permit/visa so he could permanently relocate to China. However, due to a variety of factors, including China's policies in response to the COVID-19 pandemic, Schmidt was having trouble obtaining a PRC visa.

"Members of our military take a sworn oath to defend our country and the Constitution. In that context the alleged actions of this former military member are shocking – not only attempting to provide national defense information, but also information that would assist a foreign adversary to gain access to Department of Defense secure computer networks," said acting US attorney Tessa M Gorman for the Western District of Washington.

You can read the full indictment here [PDF] and the FBI agent's declaration here [PDF]. ®

Send us news
49 Comments

It begins: Pentagon to give AI agents a role in decision making, ops planning

Former allies, take note. This is a WOPR

Ex-US Cyber Command chief: Europe and 5 Eyes can't fully replicate US intel

Cue deepening existential European dread as Rest of World contemplates Trump turning off the info tap

Feds charge three over Molotov attacks on Tesla sites in multiple states

Attorney General warns people tempted to join 'wave of domestic terrorism'

US Space Force warns Chinese satellites are 'dogfighting' in space

Begun, preparation for orbital wars has

Google's Chrome divorce still on the cards as Trump's DoJ plays hardball

$1M donation to inauguration fund and a personal appearance by Pichai appear to have been pointless

Feds name and charge alleged Silk Typhoon spies behind years of China-on-US attacks

Xi's freelance infosec warriors apparently paid up to $75K to crack a single American inbox

HPE says blocking Juniper buy is a sure Huawei to ensure China and Cisco thrive

Analyst argues stopping the deal benefits Switchzilla by preventing rise of strong challenger for AI networks

Microsoft wants to quit building Army VR goggles, hand contract to Anduril

Will the Pentagon get Luckey with a new IVAS vendor?

Man who SIM-swapped the SEC's X account pleads guilty

Said to have asked search engine 'What are some signs that the FBI is after you?'

US cranks up espionage charges against ex-Googler accused of trade secrets heist

Mountain View clocked onto the scheme with days to spare

Call of Duty studio co-founder pleads guilty to crashing drone into firefighting aircraft

Peter Tripp Akemann avoids jail, will pay 'Super Scooper' repair costs and is ordered to help with LA's wildfire recovery

Gilmore Girls fans nabbed as Eurocops dismantle two major cybercrime forums

Nulled and Cracked had a Lorelai-cal rise - until Operation Talent stepped in