I have SCI clearances at two agencies as a contractor.
Over say, a 13 month period, I accidentally brought in unauthorized devices into a SCIF. Two within 365 days (say, March 2024 - March 2025), and another right around the collective 13 month range (say, February 2024). These were all associated with facilities for Agency 1. Since only two occurred in a 365 day range, no investigation was triggered, but I was warned. I self-reported all incidents immediately to Agency 1.
I’ve been briefed in at Agency 2 the entire time. I had thought self-reporting to Agency 1 met my requirements, since Agency 2 facilities were never involved. Clearly that is wrong. Upon being informed by a coworker about this, I immediately self-reported all Agency 1 infractions to Agency 2. This means one was reported quite late (13 months, e.g., incident occurred Feb 2024, was reported to Agency 1 immediately, and was reported to Agency 2 on Mar 2025), and two were reported a month or two after they happened (and were self-reported at Agency 1).
How bad is this? This is the first time I’ve had to deal with holding multiple clearances at once. But it still feels like a very dumb mistake to make.