Scotland Yard has suspended the use of a forensic software tool linked to a company with alleged ties to Russian intelligence following a request from U.S. prosecutors. The Metropolitan Police announced it is conducting a comprehensive review of the software provided by Oxygen Forensics Inc., a U.S.-based firm whose founder, Oleg Sergeyevich Davydov, faces extradition proceedings to the United States.
Davydov, a 52-year-old Moscow resident, was arrested at Heathrow Airport earlier this month as he was preparing to board a flight to Turkey. He appeared before Westminster magistrates’ court, where the judge denied bail, citing concerns that as a Russian citizen with alleged connections to the Russian government, he posed a flight risk and might destroy evidence related to the case.
U.S. prosecutors allege that Oxygen Forensics, which markets its software as developed and owned in the United States, is in fact controlled by Russian developers. The software has reportedly been sold under various names to Russian agencies including the Federal Security Service (FSB), the investigative committee, and the Ministry of Internal Affairs. Oxygen Forensics’ products are designed to bypass security on mobile phones and computers and to decode and analyze data extracted from these devices.
The company’s chief executive, Lee Reiber, based in Alexandria, Virginia, faces charges alongside Davydov of conspiracy to commit wire fraud. The indictment accuses them of securing contracts by concealing the company’s true Russian ownership.
Scottish police forces, including the Metropolitan Police, have used Oxygen Forensics’ tools in criminal investigations. The Met signed a three-year contract with the company in December 2023. According to the police force, the software is operated within a closed IT system that is not connected to the internet, and its usage accounted for fewer than 0.2 percent of the more than 23,000 digital forensic actions taken in the past year. A Scotland Yard spokesperson stated that suspension of the software’s use is unlikely to impact ongoing cases significantly and confirmed that no data obtained from investigations is shared with Oxygen Forensics.
The National Police Chiefs’ Council has advised all forces using products from Oxygen Forensics to conduct local assessments to evaluate potential risks and contain any issues.
Beyond the United Kingdom, Oxygen Forensics’ software is used by law enforcement agencies across Europe, including in France, Germany, Spain, Italy, and Poland. The company is scheduled to participate alongside the World Police Summit in Dubai in November.
Security officials, including MI5 and senior government representatives, have previously warned about the threat posed by Russian cyber espionage and information warfare, underscoring concerns over the software’s origin and connections. The U.S. Department of Homeland Security, Secret Service, and Department of Defense reportedly purchased the software under the assumption it was U.S.-owned and developed.
U.S. prosecutors have not alleged that the software contains malicious code or was employed to gain unauthorized access to systems or data, focusing instead on the alleged deception regarding its ownership and affiliation.
