Silicon Valley Trade Secret Theft: Iranian Engineers Indicted for Espionage

The recent federal indictment of three Iranian software engineers—Samaneh Ghandali, Sorvoor Ghandali, and Mohammadjavad Khosravi—marks a significant escalation in the ongoing battle against state-sponsored industrial espionage within the United States' technology heartland. The Department of Justice alleges that these individuals, while employed at various Silicon Valley firms including Google, systematically exfiltrated highly sensitive trade secrets. The focus of the theft—processor security and cryptography—strikes at the very foundation of modern computing infrastructure, suggesting a strategic intent to compromise not just corporate intellectual property, but potentially national security frameworks.

This case highlights a critical vulnerability in the corporate legal and regulatory landscape: the "insider threat." While many organizations focus their cybersecurity budgets on external perimeter defenses, this incident underscores how institutional trust can be weaponized. The suspects allegedly leveraged their legitimate employment status to bypass security protocols that would typically flag external actors. For RegTech providers and corporate legal departments, this serves as a stark reminder that compliance and vetting processes must evolve beyond simple background checks to include continuous monitoring of access to high-value intellectual property.

“

His history with the Teachers Investment Fund Corporation and the $2.5 billion embezzlement scandal involving Bank Sarmayeh suggests that the accused may have had high-level support or pressure to conduct these operations.

The familial connections of the accused add a layer of geopolitical complexity to the legal proceedings. The Ghandali sisters are the daughters of Shahabeddin Ghandali, a figure deeply embedded in the Iranian regime's financial apparatus. His history with the Teachers Investment Fund Corporation and the $2.5 billion embezzlement scandal involving Bank Sarmayeh suggests that the accused may have had high-level support or pressure to conduct these operations. From a legal standpoint, this raises questions about the "know your employee" (KYE) standards that should be applied to individuals with ties to sanctioned regimes or politically exposed persons (PEPs).