---
title: "Aerojet Rocketdyne cybersecurity compliance settlement"
description: "Aerojet Rocketdyne’s $9 million cybersecurity compliance settlement, announced by DOJ in July 2022, without a liability determination."
incident_type: "Cybersecurity incident"
status: "closed"
last_modified: "2026-10-07"
canonical_url: "https://www.ally.security/incidents/aerojet-rocketdyne-cybersecurity-settlement-2022"
markdown_url: "https://www.ally.security/incidents/aerojet-rocketdyne-cybersecurity-settlement-2022.md"
stix_url: "https://www.ally.security/incidents/aerojet-rocketdyne-cybersecurity-settlement-2022/stix.json"
---

# Aerojet Rocketdyne cybersecurity compliance settlement

A federal-contract cybersecurity compliance dispute ended in a settlement. The cited notice does not establish a cyber intrusion.

Last modified Oct 7, 2026 · 1 source

## Summary

- **Environment:** Cybersecurity requirements in federal contracts
- **Operational impact:** No operational disruption established by the notice
- **Financial impact:** $9 million settlement

## What happened

The [U.S. Department of Justice](https://www.justice.gov/) [announced a settlement](https://www.justice.gov/usao-edca/pr/aerojet-rocketdyne-agrees-pay-9-million-resolve-false-claims-act-allegations) with [Aerojet Rocketdyne](https://www.l3harris.com/company/aerojet-rocketdyne) on July 8, 2022. It resolved allegations of misrepresented cybersecurity compliance in federal contracts. [1](#source-1)

## Impact

- The settlement amount was $9 million. [1](#source-1)
- The notice does not establish a data-exposure count or operational outage.

## Timeline

### July 8, 2022 — Settlement announced

DOJ published its [settlement notice](https://www.justice.gov/usao-edca/pr/aerojet-rocketdyne-agrees-pay-9-million-resolve-false-claims-act-allegations). [1](#source-1)

### October 7, 2026 — Briefing updated

This briefing was last reviewed and updated on October 7, 2026.

## Threat Group & Attack Vector

This is a cybersecurity compliance proceeding. The cited notice establishes no technical intrusion or attack path.

### Actors

- No cyber threat actor is established by the settlement notice.

### TTPs

- MITRE ATT\&CK techniques are not mapped to this compliance proceeding.

## Response

The agreement resolved a whistleblower lawsuit and was reached on the second day of trial. DOJ expressly stated that the resolved claims were allegations and that liability had not been determined. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/aerojet-rocketdyne-cybersecurity-settlement-2022/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Aerojet Rocketdyne Agrees to Pay $9 Million to Resolve False Claims Act Allegations of Cybersecurity Violations in Federal Government Contracts

legal · U.S. Department of Justice · Jul 8, 2022

<https://www.justice.gov/usao-edca/pr/aerojet-rocketdyne-agrees-pay-9-million-resolve-false-claims-act-allegations>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Resulted In · 100% confidence · current**  
   Aerojet Rocketdyne cybersecurity compliance settlement: The settlement resolved a whistleblower lawsuit and was reached on the second day of trial.
2. **Resulted In · 100% confidence · current**  
   Aerojet Rocketdyne cybersecurity compliance settlement: DOJ announced a $9 million settlement resolving allegations that Aerojet Rocketdyne misrepresented cybersecurity compliance in federal contracts.
3. **Affected Organization · 100% confidence · current**  
   Aerojet Rocketdyne cybersecurity compliance settlement: Aerojet Rocketdyne Inc.
4. **Resulted In · 100% confidence · current**  
   Aerojet Rocketdyne cybersecurity compliance settlement: DOJ stated that the resolved claims were allegations and there had been no determination of liability.
5. **Disclosed At · 100% confidence · current**  
   Aerojet Rocketdyne cybersecurity compliance settlement: 2022-07-08

</details>