Former Google engineer convicted of stealing AI trade secrets

A former Google engineer, Linwei Ding, has been convicted in the US on multiple counts of economic espionage and theft of trade secrets. He took more than 2,000 confidential AI-related documents from Google to benefit a China-based startup he was involved with. The material included details of Google's supercomputing infrastructure and its AI hardware and software systems. Prosecutors said Ding secretly worked with Chinese technology companies while still employed at Google and transferred the files to his personal accounts. He faces long prison terms and substantial fines as the case proceeds.

What this means for your organisation

This is insider risk in its purest form, and it is not reserved for American technology giants. Norwegian organisations developing algorithms, models or domain-specific datasets hold comparable value on machines their employees can legitimately access. The difference between an employee doing their job and one preparing to leave is rarely visible in a single log line, but it is visible in the pattern over time.

Berigo recommends

• Classify what genuinely constitutes business-critical intellectual property and restrict access to those who need it.
• Monitor bulk transfers of documents to personal accounts and storage services, and set thresholds that trigger follow-up.
• Establish a fixed offboarding routine on resignation, including access review and a log review covering the preceding period.
• Cover outside work and ownership interests in competing companies in employment contracts and periodic declarations.

Source

• thehackernews.com
• justice.gov