Former Google Engineers Indicted for Alleged Trade Secret Theft and Transfer to Iran
In a significant development highlighting the ongoing challenges of protecting corporate intellectual property, three individuals with ties to Google have been indicted in the United States for allegedly misappropriating trade secrets and transferring them to unauthorized locations, including Iran. The accused are Samaneh Ghandali, 41; her husband, Mohammadjavad Khosravi, 40; and her sister, Soroor Ghandali, 32. All three are Iranian nationals residing in San Jose, California.
Background and Employment Details
Both Samaneh and Soroor Ghandali were employed at Google before transitioning to another technology firm, referred to in legal documents as Company 3. Khosravi was employed at a different company, identified as Company 2. All three held positions related to mobile computer processors, granting them access to sensitive technological information.
While the specific identities of Company 2 and Company 3 have not been disclosed, investigations reveal that Soroor Ghandali previously served as a hardware engineer intern at Google before joining Intel. Khosravi’s professional history includes a role as an ASIC design engineer at Qualcomm.
Allegations and Indictment Details
The U.S. Department of Justice (DoJ) alleges that the trio conspired to commit trade secret theft from Google and other leading technology companies. The charges include theft and attempted theft of trade secrets, as well as obstruction of justice. The indictment asserts that the defendants exploited their employment positions to access confidential and sensitive information, which they then exfiltrated to unauthorized third-party and personal locations, including Iran.
Specifically, the stolen information pertains to processor security, cryptography, and other advanced technologies. The DoJ’s press release states, The defendants then exfiltrated confidential and sensitive documents, including trade secrets related to processor security and cryptography and other technologies, from Google and other technology companies to unauthorized third-party and personal locations, including to work devices associated with each other’s employers, and to Iran.
Methods of Exfiltration and Concealment
The indictment details the methods allegedly used by the defendants to transfer and conceal the stolen information. Samaneh Ghandali is accused of transferring hundreds of files, including Google’s trade secrets, to a third-party communications platform. These files were reportedly shared in channels named after each of the defendants’ first names. Similarly, Soroor Ghandali is alleged to have exfiltrated numerous Google-related files containing trade secrets to the same channels during her tenure at the company.
The stolen files were subsequently copied to various personal devices, as well as to work devices issued by their respective employers. To conceal their activities, the defendants allegedly submitted false, signed affidavits, destroyed the exfiltrated files from electronic devices, and manually photographed computer screens displaying the confidential documents instead of transferring the files directly.
The DoJ further alleges that after Google’s internal security systems detected suspicious activity and revoked Samaneh Ghandali’s access to company resources in August 2023, she executed a signed affidavit claiming she had not shared Google’s confidential information with anyone outside the company.
Legal Proceedings and Potential Penalties
The three defendants were arrested and made their initial appearances in federal district court in San Jose. If convicted, each faces a maximum sentence of 10 years in prison and a $250,000 fine for each count of trade secret theft charges. Additionally, they face a maximum sentence of 20 years in prison and a $250,000 fine for the count of obstruction of justice.
Corporate Response and Broader Implications
In response to the incident, a Google spokesperson stated that the company has enhanced safeguards to protect its confidential information and immediately alerted law enforcement upon discovering the breach. The stolen trade secrets are reported to pertain to Google’s Tensor processor, which is integral to the company’s Pixel phones.
This case underscores the persistent threat of insider risks and the critical importance of robust security measures within technology companies. It also highlights the potential for international transfer of sensitive information, raising concerns about corporate espionage and national security.
