Private Equity Government Contractors: Who Answers for False Claims on a Government Contract?

False claims by a private equity government contractor can leave both the contractor and its investment sponsor owing the government money. Aero Turbine and Gallant Capital Partners agreed to that in a case involving an Air Force repair contract. The government alleged that a Gallant employee gave protected contract data to unauthorized software personnel. If you know who directed the work or shared the data, you can connect the investor’s decisions to the government’s bill.

The Contractor, the Funds and the Adviser

Aero Turbine held the Air Force contract. Gallant advised the investment funds through which it owned a controlling stake in Aero Turbine. The settlement agreement puts the contract, the ownership and the employee’s alleged conduct in the same document.

Aero Turbine is an aerospace maintenance, repair and overhaul business based in Stockton, California. The Air Force awarded it the Management of Items Subject to Repair contract in January 2017 to repair and maintain General Electric J85 turbojet engines. Gallant is a private equity company based in Los Angeles. Its controlling investment through the funds ran from January 2019 to August 2024.

We connect those roles to the decisions made during contract performance, including who could arrange outside work and provide access to the contractor’s information.

The Cybersecurity Promise Was Part of the Repair Contract

The Air Force contract required security for the contractor’s information systems as well as engine maintenance. It incorporated a defense acquisition clause requiring safeguards for covered defense information, including the National Institute of Standards and Technology’s requirements for protecting controlled unclassified information in nonfederal systems.

Aero Turbine used its Aero Turbine Online Management System, known as ATOMS, to support the contract. That system contained controlled unclassified information.

The United States alleged that Aero Turbine had not fully implemented the required controls. The government alleged that Aero Turbine assumed that export controls protecting technical data satisfied its cybersecurity obligations. The government alleged that neither Aero Turbine nor Gallant had verified whether ATOMS met the specific NIST controls.

We find the assumption telling. The contract called for specific safeguards, and the government alleged that both companies had left the actual comparison undone. For someone in IT or compliance, the gap between the company’s assurance and the system’s settings is a concrete part of the story.

The Allegation Reached the Investor’s Employee

The government alleged direct involvement by a Gallant employee in the unauthorized sharing. After a software company with personnel in Egypt was engaged to improve ATOMS, the employee assisting Aero Turbine provided those personnel with system data containing controlled unclassified information about the Air Force contract.

The software company and its foreign citizen personnel lacked authorization to receive that information under the contract, the United States alleged. The agreement identifies June 6 to July 29, 2019, as the period when Aero Turbine and Gallant allegedly failed to control the information’s flow and limit system access to authorized users.

The stated project was an improvement to the system. The alleged failure was in who received its protected contents. An employee who knows the outside developer, the instructions and the data supplied can explain how a business project crossed that boundary.

How Does the Civil False Claims Act Affect Government Procurement Fraud?

The civil False Claims Act reaches knowingly false claims and false records that matter to government payment. In the Aero Turbine agreement, the United States tied its civil claims against both companies to Aero Turbine’s submission, or causing the submission, of allegedly false claims to the Air Force.

The alleged claim period ran from January 1, 2018, through February 29, 2020. It began before Gallant’s controlling investment and continued during its ownership. The government identified both incomplete cybersecurity controls and the unauthorized access as reasons the claims were false. That connects the repair contract, the system used to support it and the requests for payment.

The same connection matters when examining false contract certifications: what did the company represent, what did performance actually involve, and how did the representation reach a claim for money? We examine that connection with the person who knows the work, including decisions made outside the billing department.

Both Companies Took on the Payment Obligation

Aero Turbine and Gallant agreed to pay $1,750,000 to the United States. The agreement makes each responsible for the full shared obligation.

The companies also agreed to keep the settlement and covered investigation, defense and corrective-action costs off federal contracts, and to repay any of those costs already claimed. We see no sense in settling a false-claims case and sending taxpayers the cleanup bill.

What the Companies Disclosed

Aero Turbine made two written disclosures about its cybersecurity noncompliance. The agreement says Aero Turbine and Gallant cooperated with the government’s investigation by identifying people involved and supplying facts from their own investigation, attributed to specific sources. Aero Turbine also represented that it had implemented measures to correct the issues and prevent their recurrence.

Both companies received credit for disclosure, cooperation and remediation. For an insider, the useful detail is that the account connected particular people to particular facts. The company’s disclosure and the internal review can show what management learned and how it responded.

Controls on Paper and Decisions in Practice

Formal controls can coexist with people overriding them. Unique Characteristics of Management Override Fraud Cases, published in the Journal of Forensic and Investigative Accounting in 2019, compared occupational fraud cases involving management override with cases involving missing controls. Within that comparison, internal audits, independent financial audits, anti-fraud policies and codes of conduct were more associated with the override cases.

The paper puts the limit of a compliance program plainly:

Unique Characteristics of Management Override Fraud Cases, Journal of Forensic and Investigative Accounting, 2019

For a contractor insider, that finding points us toward the people who could approve an exception, give an instruction or open access. The policy describes the safeguard. The operational record can show what happened to it. A contractor’s own personnel may know how an investor’s instructions worked in practice, even when the written division of responsibilities looks tidy.

An Acquisition Can Also Change Contract Eligibility

Ownership can enter a government procurement case through eligibility for the work. Pavion’s December 2023 settlement announcement addressed allegations that affiliation following an acquisition made the group ineligible for small-business awards it obtained. The announcement identified Tower Arch Capital as the acquirer. Pavion settled.

That case concerns small-business affiliation and eligibility. The Aero Turbine agreement concerns performance of an Air Force contract and expressly places Gallant under the payment obligation. Reading the parties and the conduct together tells us which business answered for which part of the transaction.

What Are the Indicators of Government Procurement Fraud?

Indicators of government procurement fraud include contradictions between a contract requirement, what the company represented and what its operating records show. In this setting, access permissions, data transfers, instructions and the people who carried them out can connect the investor to the work billed to the government.

The contract and billing records connect those decisions to what the company promised and charged the government.

Transparency International’s 2024 report, Transparency, Accountability, and Integrity of Public Procurement Systems, emphasizes clear authority, defined responsibilities and oversight. We apply that perspective to the business’s actual decisions: who had the responsibility, who gave the instruction, who knew about the failure and what happened afterward.

You may know the system, the contract or the investor’s instructions better than anyone reading the invoice. We work with that knowledge to connect the people, performance and payment. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers.

When You Know What the Investor’s People Did

If you know the investor’s instructions and what data went to the outside developer, speak with our whistleblower experts about your strongest government procurement whistleblower case. We connect those decisions to the government’s bill and bring in government procurement whistleblower lawyers who understand ownership and cybersecurity disputes. You have our partnership from the first conversation through the case.