UPS (UPS) worker reportedly missed the security email, enabling China get the F-35 (LMT) parts; Email warned UPS that sensitive parts must not go through China

Routing of controlled defence components through a prohibited jurisdiction falls squarely under US export-control regimes, where liability for carriers and forwarders turns on knowledge and on whether internal screening procedures were followed rather than on intent to breach. Episodes of this kind have tended to produce a familiar sequence: an internal investigation and voluntary disclosure, followed by a consent-agreement style settlement with civil penalties, with criminal exposure reserved for cases showing wilful circumvention. The case distinction that matters here is whether the lapse was a single employee error against an explicit warning, which points to negligence findings, or evidence of a systemic compliance failure, which historically attracts the heavier penalties and remediation monitorships. For the prime contractor the exposure is reputational and programmatic rather than financial, though supply-chain audits of subcontractors and logistics vendors have in past episodes widened beyond the initial incident. Worth watching are any regulatory charging documents, which disclose the volume and duration of shipments, and whether the carrier's government contracts face suspension or debarment review, the channel through which commercial consequences have typically been felt.