Extreme Networks faces $975,721.84 criminal penalty in first near-miss agreement

The Justice Department reached a non-prosecution agreement with Extreme Networks over sanctions and export-control offenses, requiring $487,860.92 in forfeiture and an equal criminal fine.¹ Together, those two payments produce a criminal penalty of $975,721.84, according to the department.¹ The department described the resolution as its first agreement for a “near-miss” matter under its 2026 Corporate Enforcement and Voluntary Self-Disclosure Policy.¹ The case therefore involved a non-prosecution agreement, but the department did not treat the company’s disclosure as timely under the policy.¹ Instead, it said the disclosure came when a news publication was about to reveal the matter, while the company’s later cooperation and remediation qualified it for near-miss treatment.¹

The conduct at issue involved sales to Moscow Machinery Building Plant Avangard, known in the department’s account as MMZA, a Russian weapons manufacturer owned by JSC Concern Almaz-Antey.¹ Almaz Antey had been placed on the Treasury Department’s Specially Designated Nationals and Blocked Persons List in July 2014.¹ The department identified MMZA as a maker of the S-300 and S-400 anti-aircraft missile systems that the Russian army uses.¹ The department said Extreme’s Russia-based subsidiary processed and completed 11 orders for MMZA from around March 2018 through March 2022, without the necessary OFAC license or authorization.¹ The order count describes transactions handled by the subsidiary across that period; the department’s account does not say that every order had the same value or involved identical equipment.¹

The department said certain employees based in Russia concealed MMZA’s identity from Extreme’s global trade compliance group.¹ That concealment resulted in false electronic export information and the smuggling of goods from the United States, according to the department.¹ The sales brought Extreme approximately $487,860.92 in revenue, the amount reported by the department for the transactions.¹ That revenue figure is the same amount as either one of the two required payments, while the combined criminal penalty is twice that amount.¹ The agreement also requires forfeiture and a criminal fine, and Extreme is to address a separate administrative matter with OFAC.¹

The policy distinction turned on both the timing of the disclosure and what the company did afterward.¹ The department said the disclosure arrived too late to count as timely because a publication posed an imminent risk of exposing the conduct.¹ Even so, the department credited Extreme with full cooperation and with correcting the conduct in a timely and appropriate manner.¹ It consequently classified the disclosure as a near-miss voluntary self-disclosure rather than treating the timing alone as the end of its assessment.¹ The department said the company’s remedial steps and the lack of aggravating circumstances informed its decision to enter the agreement.¹

Extreme’s cooperation included supplying relevant documents and facts and making employees available to be interviewed.¹ Its remedial measures included ending its arrangement with the outside distributor involved in the sales.¹ The company also strengthened screening, increased its compliance staffing and introduced due-diligence steps for merger and acquisition activity.¹ Those measures address the conduct described in the department’s account through changes to the distributor relationship, screening, staffing and transaction review.¹ The department linked the agreement to these actions alongside the absence of aggravating circumstances, rather than attributing its decision to a single corrective measure.¹

An assistant director in the FBI’s Counterintelligence and Espionage Division said the inquiry concerned unlawful sales of advanced networking equipment and services to a Russian weapons maker.¹ That description places the alleged transactions within both sanctions enforcement and controls on exports, consistent with the offenses named in the agreement announcement.¹ The Justice Department credited the FBI Charlotte Field Office, the Commerce Department’s Bureau of Industry and Security, and Homeland Security Investigations for investigative work.¹ The announcement thus identifies participation by federal law-enforcement and trade-control bodies, while assigning the agreement itself to the Justice Department.¹

Separately, Network World reported that Extreme was previewing Exchange zones, a proposed way for business customers to run AI applications using computing resources on their own premises.³ Extreme said the zones would combine unused capacity from installed access points and switches with other computing resources for AI applications and plug-ins.³ The company’s chief technology officer and president of AI platforms said the design was meant to let customers manage where data resides and where processing takes place across local and cloud settings.³ Network World described Exchange zones as extending Extreme Exchange, a marketplace for finding, deploying and creating AI agents, microapplications and workflows.³ At the time of that report, Extreme had not identified the hardware the zones would use or explained its method for measuring spare processing capacity.³

The reported enforcement action and the AI product preview are separate developments concerning Extreme Networks, not a claim that one caused or formed part of the other.¹ The enforcement announcement concerns past sales, compliance failures and the company’s response, while the preview describes a proposed way to use network and other computing resources for AI workloads.¹³ The available product account leaves important implementation details open, including the equipment involved and how usable capacity would be determined.³ The two developments therefore provide different kinds of information: one sets out a completed enforcement resolution, and the other reports a product concept that had not yet specified those technical details.¹³