Thomas Pauken’s sentencing this week is a reminder that insider threat isn’t always the cleared contractor who gets sloppy with a SCIF—sometimes it’s the U.S. citizen who never held a clearance at all. Pauken spent seven years working for China’s Ministry of State Security, recruiting assets and passing taskings, all while living abroad and using his passport to move freely. He collected $100,000 and travel expenses to meet targets in the U.S. who could feed information back to his handlers. No clearance required, just access and willingness.
For those of us placing senior cleared leaders, the case underscores why counterintelligence awareness can’t stop at the badge-holder. The people your executives meet at conferences, the consultants pitching services, the former colleagues now based overseas—they don’t all show up with a handler’s business card. Pauken’s targets likely had no idea they were being developed. The MSS plays long, and they’re patient about finding the seams.
Two years in prison and three years of supervised release with no overseas travel is the sentence, but the operational damage is harder to measure. If you’re running a program office or leading a cleared team, this is a good moment to refresh your people on reporting requirements and what a recruitment approach actually looks like. It’s not always obvious, and it doesn’t always come from someone who looks the part.