Three Silicon Valley Engineers Indicted for Stealing Google Trade Secrets
By John Nada·Feb 20, 2026·7 min read
Three engineers have been indicted for stealing Google trade secrets and transferring data to Iran, highlighting vulnerabilities in tech security.
A federal grand jury has indicted three Silicon Valley engineers on serious charges of stealing trade secrets from Google and other tech firms and transferring sensitive data to Iran. Samaneh Ghandali, her sister Soroor Ghandali, and Mohammadjavad Khosravi were arrested and face multiple counts, including conspiracy and obstruction of justice.
The indictment reveals that the defendants, identified as Iranian nationals, exploited their positions at leading technology companies to access hundreds of confidential files. These files included crucial materials related to processor security and cryptography, indicating the high stakes involved in their alleged theft.
Samaneh Ghandali, 41, and her sister Soroor Ghandali, 32, both found employment at Google before later moving to a third unnamed company, designated as Company 3 in the indictment. Their brother-in-law, Mohammadjavad Khosravi, 40, separately worked at another firm referred to as Company 2, which is known for developing system-on-chip (SoC) platforms, like Qualcomm's Snapdragon series, widely utilized in smartphones and other mobile devices. This highlights the interconnected nature of their employment, as they were working within the same industry and could easily share insights and information regarding proprietary technologies.
The indictment also notes that Soroor was in the U.S. on a nonimmigrant student visa, while Samaneh became a U.S. citizen, and Khosravi is a legal permanent resident in the country. Notably, Khosravi has a background that includes service in the Iranian army, which raises further concerns regarding motivations and affiliations that may have influenced their actions.
Prosecutors assert that the trio exploited their roles at these prominent technology firms to gain unauthorized access to hundreds of confidential files. These files included sensitive materials related to vital areas such as processor security and cryptography, showcasing the potential hazards posed by their alleged actions. Given the ongoing competition within the tech industry, the implications of this theft could not only affect the companies involved but also have broader ramifications for national security.
The case sheds light on the vulnerabilities inherent in the tech sector, particularly regarding the protection of intellectual property and the handling of sensitive data. With the increasing globalization of technology and the competitive nature of the market, the safeguarding of trade secrets has become a crucial focus for tech companies. This incident raises significant questions about the effectiveness of the safeguards that these companies have in place to protect their sensitive information.
In a statement made to CNBC, Google confirmed that it had detected the alleged theft through routine security monitoring before escalating the matter to law enforcement authorities. Google spokesperson José Castañeda emphasized the company's commitment to protecting its intellectual property. "We have enhanced safeguards to protect our confidential information and immediately alerted law enforcement after discovering this incident," he stated.
Google also highlighted various measures implemented to protect its trade secrets. These include restricting employee access to sensitive information, utilizing two-factor authentication for work-related Google accounts, and maintaining logs of file transfers to third-party platforms such as Telegram. These steps are indicative of the proactive measures tech companies must undertake to combat potential threats from insiders and external actors alike.
The alleged efforts by the defendants to conceal their actions are particularly alarming. Prosecutors claim that the trio utilized a third-party communications platform to route stolen files through channels bearing their first names before copying the material to personal devices, each other's work devices, and ultimately transferring them to Iran. FBI Special Agent in Charge Sanjay Virmani remarked that the methods employed by the defendants to transfer confidential data involved deliberate actions aimed at evading detection and obscuring their identities.
Following alerts from Google's internal security systems, which flagged Samaneh's suspicious activity and subsequently revoked her access to company resources in August 2023, the defendants reportedly attempted to cover their tracks. The indictment indicates that during this time, Samaneh signed an affidavit falsely claiming that she had not shared Google's confidential information outside the company. This action demonstrates the lengths to which the defendants were willing to go to maintain the illusion of compliance, even as they engaged in illicit activities.
Amidst the investigation, it was reported that a personal laptop associated with Samaneh and Khosravi was used to search for methods to delete communications and to research the retention periods of message records by mobile carriers. This points to a calculated effort to erase evidence of their wrongdoing, which could complicate the prosecution's case but also highlights their awareness of the legal implications of their actions.
The indictment further alleges that the couple photographed hundreds of computer screens containing confidential information from both Google and Company 2, seemingly in an attempt to bypass digital monitoring tools. This tactic raises concerns about the lengths to which insiders may go to extract sensitive information without triggering alert systems designed to protect corporate data.
In a particularly striking detail, on the night before the pair traveled to Iran in December 2023, Samaneh allegedly took around 24 photos of Khosravi's work computer screen, which contained trade secrets of Company 2, including its Snapdragon SoCs. The ability to capture such sensitive information via photographs indicates a high level of premeditation and planning, further exacerbating the seriousness of the charges against them.
Prosecutors allege that while in Iran, a device linked to Samaneh accessed those photographs, while Khosravi accessed additional proprietary information related to Company 2, such as the hardware architecture of Snapdragon SoCs. These actions raise questions about how the information obtained could be utilized by foreign entities, potentially compromising not only the companies involved but also national security.
If convicted, the defendants face substantial penalties: up to 10 years in prison for each charge related to trade secret theft and up to 20 years for obstruction of justice, alongside fines reaching as high as $250,000 per count. These potential repercussions serve as a stark reminder of the serious nature of corporate espionage, especially in an era where technology companies are increasingly reliant on their intellectual property to maintain competitive advantages.
This case not only serves as an important legal proceeding but also shines a light on the broader implications of corporate espionage in technology. As companies continue to innovate and develop cutting-edge technologies, the need for robust security measures to protect proprietary information becomes increasingly critical. The vulnerability of trade secrets can lead to significant financial losses, reputational damage, and a loss of competitive edge in a rapidly evolving market.
Moreover, the incident raises questions about the visa and immigration policies regarding individuals working in sensitive sectors. The presence of foreign nationals in key positions within technology companies necessitates a careful examination of potential risks. How can companies ensure they are not inadvertently facilitating the theft of sensitive information? What measures can be put in place to vet employees more thoroughly in high-stakes industries?
As the legal process unfolds, the tech community will be closely watching the developments of this case. The implications of corporate espionage extend far beyond the individuals involved, impacting entire industries and shaping the landscape of tech innovation. The outcome of this indictment may serve as a precedent for future cases and prompt companies to reevaluate their security protocols to mitigate the risks associated with insider threats.
Ultimately, the case against Samaneh Ghandali, Soroor Ghandali, and Mohammadjavad Khosravi underscores the challenges that technology firms face in protecting their intellectual property. It serves as a reminder of the need for continuous vigilance and the importance of fostering a culture of security within organizations. As the world becomes increasingly interconnected, the safeguarding of proprietary information remains a top priority in the tech industry, where the stakes are high and the consequences of breaches can be devastating.