Three former Google engineers have been indicted for a sophisticated scheme to steal and transfer sensitive trade secrets, including to Iran. The case highlights critical risks in corporate cybersecurity and the protection of intellectual property in the tech sector.
Samaneh Ghandali, her husband Mohammadjavad Khosravi, and her sister Soroor Ghandali face charges including conspiracy and theft. All three were employed in mobile processor development, granting them access to highly confidential data.
The U.S. Department of Justice alleges the defendants exploited their positions to access and exfiltrate sensitive documents. The stolen information reportedly included trade secrets related to processor security and cryptography from Google and other firms.
A key vulnerability was exploited through personal and work devices. The indictment states hundreds of files containing Google trade secrets, including details on the Tensor processor for Pixel phones, were transferred to unauthorized third-party platforms.
This data breach extended internationally, with information allegedly sent to channels accessible in Iran. The defendants are accused of then copying these files across multiple devices to conceal their actions, a serious obstruction of justice.
The stolen secrets could enable a malicious actor to develop a powerful exploit. In the wrong hands, such proprietary knowledge might be used to craft targeted malware or even ransomware attacks, leveraging a potential zero-day in hardware security.
Google confirmed it alerted law enforcement and has since enhanced its safeguards. The incident underscores the persistent threat of insider attacks, which can bypass even robust blockchain security and other advanced protective measures.
The case serves as a stark reminder for the industry. Continuous vigilance against sophisticated phishing and insider threats is paramount to preventing the loss of valuable intellectual property that underpins global technological innovation.
