Lambda Research Settled Export Control Violations
The firm reached a settlement with the U.S. government after committing 66 unauthorized export control breaches.
Updated on Oct. 6, 2026 in Cybersecurity
Live Poll
Should the government enforce strict financial penalties on companies for unintentional export control violations?
The U.S. Bureau of Industry and Security has reached a settlement with Lambda Research Corporation following 66 export control violations occurring between 2021 and 2025. The agency imposed a $2 million penalty, which has been suspended due to the company's financial constraints.
Why it matters
The settlement highlights the federal government's enforcement of Entity List restrictions regarding sensitive technology exports to companies like Huawei Technologies Japan and Shenzhen SiCarrier Technologies. The action underscores the necessity for rigorous internal compliance frameworks to prevent unauthorized cross-border software transfers.
The violations involved 55 counts of prohibited conduct and 11 counts of acting with knowledge of a violation. The company is now required to appoint two compliance staff members and complete an audit within nine months.
The players
Lambda Research Corporation
This is a technology firm that provides software solutions and maintenance services for various international clients.
Bureau of Industry and Security
This is a federal agency within the U.S. Department of Commerce that oversees export control policies and national security.
Huawei Technologies Japan
This is the Japanese subsidiary of the global telecommunications company Huawei that is subject to U.S. export restrictions.
Shenzhen SiCarrier Technologies
This is a Chinese technology entity that is currently included on the U.S. government's Entity List.
Sun Yat-Sen University
This is a major public research university based in China that receives software and technical services from international firms.
The details
Lambda Research Corporation exported software licenses and maintenance subscriptions to restricted entities without required licenses, including a 2023 export to a Sun Yat-Sen University laboratory. The company disclosed the breaches voluntarily in October 2025, admitting to a total lack of written export compliance procedures.
Timeline
2019: Huawei Technologies Japan was added to the Entity List.
2021-2025: Lambda Research committed unauthorized exports.
2023: A software license was exported to Sun Yat-Sen University.
2024: Shenzhen SiCarrier Technologies was added to the Entity List.
October 2025: Lambda Research Corporation disclosed the violations.
The Tech Race
The settlement follows the enforcement pattern set by the Bureau of Industry and Security Entity List by holding a supplier accountable for unauthorized exports to listed entities. This action signals a broader push to tighten controls on software and maintenance subscriptions that support international high-tech development.
The settlement mandates that the company implement formal compliance procedures, which may slow down software delivery timelines for its users. Customers should expect more rigorous documentation requests and potential delays during license verification processes moving forward.
The takeaway
Companies must establish robust internal controls to manage software licenses, especially when navigating global trade restrictions. Ensuring compliance is essential to avoid significant financial penalties and long-term regulatory scrutiny.
What happens next
The $2 million penalty will be waived after one year if the company maintains compliance. The company is required to complete staff training within three months and an internal audit within nine months.
Further reading
For additional context on how regulators manage data and software security, browse the Cybersecurity section.
Source note: This article includes information reported by Global Sanctions.
Live Poll
Should the government enforce strict financial penalties on companies for unintentional export control violations?
