Former Google Engineers Indicted for Alleged Trade Secret Theft and Transfer to Iran
In a significant development highlighting the ongoing challenges of corporate espionage in the tech industry, two former Google engineers, along with one of their spouses, have been indicted in the United States for allegedly misappropriating trade secrets from Google and other leading technology firms. The sensitive information was reportedly transferred to unauthorized locations, including Iran.
The Accused Individuals
The individuals at the center of this case are:
– Samaneh Ghandali, 41, a former Google engineer.
– Soroor Ghandali, 32, Samaneh’s sister and also a former Google engineer.
– Mohammadjavad Khosravi (also known as Mohammad Khosravi), 40, Samaneh’s husband.
All three are Iranian nationals residing in San Jose, California. They were arrested on Thursday and have since made their initial appearances in the federal district court in San Jose.
Allegations and Charges
The U.S. Department of Justice (DoJ) has charged the trio with:
– Conspiring to commit trade secret theft from Google and other prominent technology companies.
– Theft and attempted theft of trade secrets.
– Obstruction of justice.
According to the DoJ, both Ghandali sisters were employed at Google before transitioning to another technology company, referred to as Company 3 in the indictment. Khosravi was employed at a different firm, identified as Company 2. All three held positions related to mobile computer processors.
Modus Operandi
The indictment outlines a calculated scheme wherein the defendants allegedly exploited their positions to access confidential and sensitive information. They are accused of exfiltrating trade secrets related to processor security, cryptography, and other proprietary technologies from Google and other tech companies. This information was then transferred to unauthorized third-party and personal locations, including work devices associated with each other’s employers and to Iran.
Specific Actions Detailed in the Indictment
– Data Transfer: Samaneh Ghandali reportedly transferred hundreds of files, including Google’s trade secrets, to a third-party communications platform. These files were shared in channels named after each defendant’s first name. Similarly, Soroor Ghandali is alleged to have exfiltrated numerous Google-related files containing trade secrets to the same channels during her tenure at the company.
– Device Usage: The stolen trade secret files were subsequently copied to various personal devices, as well as to work devices belonging to Khosravi and a work device issued to Soroor Ghandali by Company 3.
– Concealment Efforts: To cover their tracks, the defendants allegedly submitted false, signed affidavits, destroyed the exfiltrated files from electronic devices, and manually photographed screens displaying the documents’ contents instead of transferring the documents using the messaging app.
Detection and Aftermath
Google’s internal security systems detected suspicious activity by Samaneh Ghandali, leading the company to revoke her access to company resources in August 2023. Following this, she allegedly executed a signed affidavit claiming she had not shared Google’s confidential information with anyone outside the company.
Further investigations revealed that both Samaneh Ghandali and Khosravi conducted online searches and visited websites about deleting communications and other data. This included queries related to the duration for which a cellular service provider retained messages that could be printed out for court proceedings.
Despite these efforts to erase digital footprints, the couple is alleged to have continued accessing Google’s trade secrets stored on their personal devices. They reportedly manually photographed hundreds of computer screens displaying sensitive information from both Google and Company 2 over a period of several months.
Potential Consequences
If convicted, each defendant faces severe penalties:
– A maximum sentence of 10 years in prison and a $250,000 fine for each count of trade secret theft charges.
– A maximum sentence of 20 years in prison and a $250,000 fine for the count of obstruction of justice.
Context and Broader Implications
This case underscores the persistent threat of insider threats and corporate espionage within the technology sector. The theft and unauthorized transfer of trade secrets not only jeopardize a company’s competitive edge but also pose significant national security risks, especially when sensitive information is transferred to foreign nations.
Similar Incidents
This incident is not isolated. Less than a month prior, another former Google engineer, Linwei Ding, was convicted in the U.S. for stealing thousands of the company’s confidential documents to build a startup in China. Such cases highlight the critical need for robust internal security measures and vigilant monitoring to protect proprietary information.
Conclusion
The indictment of the Ghandali sisters and Khosravi serves as a stark reminder of the vulnerabilities that even leading technology companies face concerning insider threats. It emphasizes the importance of stringent security protocols, employee training, and swift action upon detecting suspicious activities to safeguard intellectual property and maintain trust in the digital age.
