DOJ charged a Cellebrite rival with hiding Russian ownership as Cellebrite missed its own ARR forecast
Federal charges have removed Oxygen Forensics, which prosecutors say was secretly Russian-owned, from a US phone-forensics market Cellebrite leads. The catch: Washington's own permit regime helped break Cellebrite's August forecast, and plaintiffs' firms are asking what management knew.
Vincent Jiang · 3 min read
The Justice Department took one of Cellebrite's−0.79% — Cellebrite, down 0.79 percent today few serious rivals off the board on September 23, 2026, charging Oxygen Forensics chief executive Lee Reiber and Russian national Oleg Davydov with conspiracy to commit wire fraud for allegedly hiding that the Virginia firm was owned and controlled by five Russian nationals through a Cyprus holding company 12.
The field clears
Oxygen's phone-cracking software ran inside the Pentagon, the Secret Service and dozens of US agencies; a former Secret Service agent used it to pull tens of thousands of files from a copy of Hunter Biden's laptop 1. The Secret Service canceled a five-year Oxygen contract in February 2026 over "security risks," yet the State Department signed a fresh one in August, weeks before the arrests 1. London's Metropolitan Police has paused the software, and Conservative MP Alicia Kearns wants "a full audit of every force's use of this software" 3. Cellebrite had made the ownership argument itself: its 2015 copyright suit against Oxygen alleged Russian control 1.
Agencies keep buying
What remains is a market led by Cellebrite, with Magnet Forensics as chief rival, and agencies keep buying 4. ICE has acquired Graykey Preserve, a Magnet tool that halts the Apple−1.28% — Apple, down 1.28 percent today timer that reboots a locked iPhone after 72 hours; Cellebrite's Inseyets pauses the same countdown for Customs and Border Protection and the Pentagon 4. Cellebrite counts roughly 7,000 customers, including agencies in all 50 US states and the national police of all 27 EU member states 5.
Twelve quarters of year-over-year growth, and the slowest just landed
Data
| Quarterly revenue | |
|---|---|
| Q3 '23 | $84.18M |
| Q4 '23 | $93.01M |
| Q1 '24 | $89.58M |
| Q2 '24 | $95.71M |
| Q3 '24 | $106.86M |
| Q4 '24 | $109.05M |
| Q1 '25 | $107.55M |
| Q2 '25 | $113.28M |
| Q3 '25 | $126.03M |
| Q4 '25 | $128.82M |
| Q1 '26 | $128.3M |
| Q2 '26 | $131.14M |
August broke the floor
The inheritance arrived with a broken forecast. On August 13, 2026, Cellebrite reported second-quarter annual recurring revenue of $507.8M, under its own $510M to $513M floor, replaced CEO Tom Hogan with Shiv Ramji the same day, and cut its full-year ARR guide to $550M to $560M, "a reduction of $15 million at the midpoint" 67. Shares fell $4.45, or 29%, to $10.80 6.
The drag was partly Washington's own paperwork. Chief revenue officer Marcus Jewell said a "foreign entity permit" applied to cloud technology created a four-to-five-week delay, and of more than 1,000 orders the quarter "came down to four" large deals, "and it was four that involved cloud" 7. Ramji's own verdict: "Pipeline is not performance" 7. Defense and intelligence ARR still grew 25% 7.
One August cut took $15M off Cellebrite's year-end ARR target
- Estimate
Data
| Value | Range | |
|---|---|---|
| ARR at June 30, 2026 (reported) | $507.8M | — |
| Q3 2026 ARR guide (estimate) | $526M | $524–528M |
| Full-year 2026 ARR guide (estimate) | $555M | $550–560M |
Three firms ask what management knew
Block+2.42% — Block, up 2.42 percent today & Leviton, Kaplan Fox and Pomerantz are now probing what management knew, noting Hogan told investors in May 2026 that the US federal business was "beginning to accelerate" 869.
One pool of capital picked a side
Between the charges and the law-firm wave, Pertento Partners, the London investment adviser whose managing partner Eduardo Marques signed the filing, crossed 5%: a 13G dated October 9, 2026, reports 13,164,696 shares, 5.2% of the company, worth roughly $148M at the October 10 price of $11.26 108. The stake is certified passive and the filing says nothing about why; the stock sits about 58% below its 2025 high 105. CFO David Barter's planned October 16 sale of 23,497 shares is a mandatory tax-cover arrangement worth about $267,000, not a signal 11.
The next two quarters decide whether incumbency outweighs credibility: whether Oxygen's displaced budget lands in Cellebrite orders, and whether third-quarter ARR clears the $524M to $528M guide 7. The same government that emptied the shelf put a permit desk in front of the restock.
Deepdive
AI-generated from this story and its cited sources. Not investment advice.
