John Bolton Just Pleaded Guilty Under the Espionage Act: What Retaining National Defense Information Really Means Under 18 U.S.C. 793

John Bolton pleaded guilty on June 26, 2026, to a single felony, and the count he admitted to says everything about how these cases actually work. He did not plead to selling secrets. He did not plead to handing intelligence to a foreign government. He pleaded guilty to keeping national defense information in an unauthorized location. One count, under 18 U.S.C. 793(e), carrying up to ten years per count. The government started with 18 charges and ended with one. That resolution is not a story about leniency. It is a tutorial in how the Espionage Act is built and how these investigations run.

The Bolton plea illustrates the Espionage Act's core retention theory: possession, unauthorized location, and willfulness. No transmission. No foreign contact. One count.

What Actually Happened

According to the Justice Department, Bolton kept handwritten notes during his time as National Security Advisor that he treated as personal diary entries. Those notes contained information drawn from daily meetings with United States intelligence and military officials and from discussions with foreign counterparts. He kept them at his home, in a personal storage location, outside any authorized secure facility.

He was originally charged with 18 counts. He pleaded to one: willful retention of national defense information under 18 U.S.C. 793(e). The plea agreement provides that the government will not seek a sentence above 60 months, and Bolton agreed to forfeit approximately $2.2 million, submit to a debriefing, and cooperate with any remaining government security reviews. Sentencing is scheduled for later this year.

What the Government Is Actually Building With Retention Cases

Pay attention to what the surviving count is, because charging decisions in these cases follow a pattern. The government did not need the espionage-style allegations to get a felony conviction. It needed retention. That is the part of the Espionage Act prosecutors reach for first, because it is the easiest element structure to build: possession, authorization failure, willfulness.

Retention theory does not require a recipient, a buyer, or a foreign connection. It requires three things: that the defendant possessed national defense information, that the defendant was not authorized to keep it where it was kept, and that the defendant acted willfully. That structure is why federal prosecutors reach for it first in document cases, and it is why 18 counts can compress to one without any loss of a conviction.

Retention cases are built on three elements: possession, unauthorized location, and willful conduct. The government does not need to prove transmission, sale, or any foreign contact.

The Exposure: Section 793, Section 1924, and What Willful Really Means

The Espionage Act, codified at 18 U.S.C. 793, is older and broader than most people assume. Subsection (e), the retention provision, reaches anyone with unauthorized possession of information relating to the national defense who willfully retains it and fails to deliver it to the officer or employee of the United States entitled to receive it. Each count carries up to ten years. Bolton faced 18 counts. The arithmetic is severe.

Running alongside it is 18 U.S.C. 1924, which makes it a separate crime for a government officer or employee to knowingly remove classified documents or materials and retain them at an unauthorized location. Section 1924 is frequently charged with, or used as a fallback to, a section 793 count. Together, the two statutes give prosecutors overlapping theories that reinforce each other.

The defense battleground in almost every one of these cases is the word willfully. The government must prove the defendant knew the conduct was unlawful and did it anyway, not that the defendant was careless or disorganized. Intent, authorization, and the handling history of the material are where a skilled defense attorney focuses. A defendant who treated documents as personal diary entries, with no awareness of their classified status or no appreciation that keeping them was unlawful, is in a meaningfully different position than one who deliberately concealed material after a security review.

The Mistakes People Make Before They Are Ever Charged

The most damaging decisions in a retention case are made long before an indictment, usually by people who assume they are witnesses rather than targets. The recurring errors are predictable.

Talking to federal agents without counsel. Investigators conducting a national security inquiry are trained, prepared, and already in possession of records the target has not seen. A friendly interview is still an interview, and false-statement exposure under 18 U.S.C. 1001 is real.

Touching the material. Moving, deleting, returning, or reorganizing documents after learning of an inquiry can convert a retention problem into an obstruction problem. Preservation strategy belongs with a lawyer, not with instinct.

Assuming silence from the government means safety. Retention cases build slowly. The absence of charges early does not mean the investigation is cold. It often means it is still being assembled.

Waiting for the indictment to hire a lawyer. By the time charges issue, the charging theory is set and the leverage is largely gone.

Retention investigations build slowly and quietly. By the time an indictment issues, the government has already assembled its theory and the window for pre-charge intervention has closed.

How These Cases Are Actually Defended

Effective defense in a national defense information matter starts at the pre-indictment stage, when the charging decision is still open. Early federal investigation defense focuses on the elements the government has to prove and attacks the weakest one, usually willfulness or authorization. It means understanding what the government already has, what classification markings appeared on the material, what security briefings the defendant received, and what the document handling practices were in the relevant facility or administration.

Where charges proceed, the work shifts to limiting the count structure, contesting whether specific material qualifies as national defense information, and positioning for sentencing under the federal guidelines well before the hearing. A white collar defense attorney who handles these cases plans the sentencing argument from day one, not after the plea is signed.

Why Timing Decides These Cases

The Bolton resolution is a reminder that the most important phase of a federal investigation is the one that happens quietly, before any public filing. The retention count that ended the case existed long before the plea. The window to influence whether it ever becomes a charge, and how many counts it becomes, was open during the investigation itself, not at arraignment.

People under federal investigation who get counsel early can shape the government's understanding of the facts, correct the record on willfulness, and in some cases avoid indictment entirely. People who wait are handed a charging theory that is already set and a plea negotiation that starts from a much weaker position.

The Bottom Line

If you have lost access to a clearance, received a preservation or litigation-hold notice, learned of an inspector general referral, or been asked to sit for an interview about documents or information in your possession, the time to act is now. The Bolton case did not start with a leak. It started with notes that sat in the wrong location. The government built 18 counts from that fact pattern and resolved to one. The case for early, experienced counsel has never been clearer.

Pre-indictment intervention is where Espionage Act defense is won. Once charges issue, the charging theory is set and the leverage is gone.

AMC Defense Law represents clients in federal investigations and prosecutions involving classified material or national defense information in Florida and nationwide. If you are under investigation or have reason to believe you may be, call Aaron M. Cohen 24 hours a day to get help.