NSA employee pleads guilty to removing classified material

The Hill:

The Department of Justice announced Friday that a former National Security Agency (NSA) employee pleaded guilty to removing classified information from the agency's offices.

Nghia Pho, a 67-year-old living in Maryland, was a developer for the NSA's hacking corps — Tailored Access Operations (TAO). Authorities found classified documents throughout his home, according to court documents, which Pho took from work between 2010 and 2015.

The New York Times reports that Pho is the NSA employee that was targeted in a reported incident where Russian spies hacked NSA tools using Kaspersky Lab software. That incident is believed to be among the reasons the Trump administration banned the use of Kaspersky software.

Media reports described that employee as taking classified hacking tools to work from a home computer that was loaded with Kaspersky Antivirus. According to the same reports, spies used the file scanning function of Kaspersky Antivirus to search for classified documents on all systems running the software.

Kaspersky has denied the claim of intentional espionage, noting that its applications scan for malware — including government-designed malware. The TAO tools, it said, triggered the antivirus program.
...

There seems to be an implication that Pho was doing this for the Russians.  The story does not detail what was done with the material removed from NSA.  I suspect it was a major breach of national security data.