Iranian Engineers Indicted in Silicon Valley Trade Secret Theft Allegations
In a development underscoring ongoing geopolitical tensions, three Iranian software engineers have been indicted by a U.S. federal grand jury on charges of allegedly stealing trade secrets from prominent technology firms in Silicon Valley. The accusations involve the illicit acquisition of core technologies related to processor security and advanced encryption methods.
The indicted individuals are identified as Samaneh Ghandali, 41, and Soroor Ghandali, 32, who are sisters, and Mohammadjavad Khosravi, 40, who is reportedly Samaneh’s husband. The indictment, issued last month, targets their alleged systematic exploitation of confidential information during their tenures at major tech companies, including Google, and firms specializing in the development of system-on-chips (SoCs). SoCs are crucial integrated circuits that form the “brain” of modern devices, combining components like CPUs, memory, and graphics processing units onto a single chip.
Exploiting Privileged Access for Espionage
According to the indictment, the Ghandali sisters previously held positions at Google before transitioning to other IT companies. Khosravi also worked for an IT firm within Silicon Valley. Authorities allege that the trio leveraged privileged access granted to them while employed at these sensitive organizations to systematically extract proprietary data.
To circumvent digital surveillance, the engineers reportedly employed a range of covert methods to transfer the stolen information. This included capturing hundreds of photographs of computer screens displaying confidential data and exchanging files through personal Telegram channels. These channels were allegedly used to transmit the sensitive data to personal devices before being sent to Iran. An FBI special investigator highlighted the deliberate nature of these actions, stating, “The methods used by the defendants to transmit confidential data included deliberate steps to conceal their identities.”
The scheme unraveled in August 2023 when Google’s internal security systems detected anomalous activity, leading to the immediate revocation of the engineers’ access privileges. Following this detection, evidence suggests that the individuals made attempts to destroy incriminating data. Records retrieved from the couple’s laptops revealed searches for methods to erase message logs and inquiries into the data retention policies of telecommunication companies, indicating a concerted effort to eliminate any digital footprint of their activities.
A spokesperson for Google confirmed the company’s proactive role in the investigation: “We discovered unusual signs through internal security monitoring and immediately reported them to the authorities. We have strengthened our security measures to protect confidential information.”
Further compounding the allegations, just prior to their departure for Iran in December 2023, Samaneh Ghandali was reportedly observed photographing trade secrets pertaining to the hardware architecture of key processors. This included proprietary information related to Qualcomm’s “Snapdragon” chips, which encompasses the fundamental principles and design patterns of physical components and their interactions within a computer system. These illicit photographs were allegedly taken from her husband Khosravi’s work computer, with access facilitated even from Iran.
Family Ties and Alleged Regime Connections
The case has garnered additional attention due to revelations about the family connections of the accused. The father of the Ghandali sisters, Shahabeddin Ghandali, is identified as a former CEO of Iran’s Teacher Investment and Financial Corporation (TIFC) and is described as an insider within the Iranian regime. He was previously implicated in a significant embezzlement case in 2016 involving approximately $2.5 billion.
Critics of the Iranian government operating in the United States have voiced concerns, suggesting a pattern of infiltration: “Individuals connected to the power elite are infiltrating U.S. universities and research institutes, exploiting institutional trust.”
Legal Ramifications and Plea
All three defendants have entered pleas of not guilty to the charges. If convicted, they face severe penalties, including a potential maximum sentence of 10 years in prison for each count of trade secret violation. Additionally, charges related to obstruction of justice could carry a sentence of up to 20 years. The legal proceedings are ongoing as authorities continue to investigate the full extent of the alleged data theft and its implications for national security and corporate intellectual property.
