Security Concerns Rattle Palantir Investors Following Military Report

Shares of data analytics firm Palantir experienced significant downward pressure after internal military documents revealed substantial cybersecurity vulnerabilities in a key defense project. The September 5th internal assessment from the U.S. Army described the NGC2 system, developed through a collaboration between Palantir and defense contractor Anduril, as carrying “very high risk” due to fundamental security shortcomings.

Critical Flaws in Defense Platform

The technical evaluation, authored by Chief Technology Officer Gabriele Chiulli, identified alarming weaknesses in the military platform. According to the document, the system lacks basic security controls: administrators cannot monitor user activities, restrict data access appropriately, or verify the software’s inherent safety. The report emphasized that any authorized user could potentially access all applications and data regardless of security clearance level or operational necessity, creating conditions where classified information might be misused without leaving an audit trail.

Third-party applications integrated with the system reportedly contained 25 high-risk security vulnerabilities, while three additional applications each contained more than 200 flaws awaiting assessment.

Corporate Response and Market Impact

Both companies addressed the revelations promptly. Anduril representatives characterized the report as reflecting “an outdated snapshot rather than the program’s current status.” A Palantir spokesperson maintained that “no vulnerabilities were found in the Palantir platform itself.”

Should investors sell immediately? Or is it worth buying Palantir?

Investor reaction was swift and severe. On October 3, Palantir shares plummeted 7.5% amid exceptionally heavy trading volume exceeding 105 million shares. The selloff attracted legal attention, with several law firms announcing fraud investigations to determine whether Palantir had adequately disclosed potential security issues affecting government contracts.

Broader Implications for Defense Technology

The situation highlights ongoing tensions between Silicon Valley’s rapid development ethos and the stringent security requirements of military applications. While Army CIO Leonel Garciga described the critical report as part of routine security evaluation processes, the incident raises fundamental questions about whether fast-paced software development methodologies align with the needs of critical defense infrastructure.

Despite these security concerns, the NGC2 platform successfully underwent live combat exercises in late September. The system represents a cornerstone of military modernization efforts, supported by a $100 million contract awarded to Anduril and its partners Palantir and Microsoft.

As Palantir shares show partial recovery from the initial decline, ongoing legal scrutiny and security questions continue to create uncertainty. The company’s upcoming quarterly results on November 3 may provide clearer indication of whether these security issues will impact Palantir’s substantial government contracting business long-term.