Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

Apple Worker Arrested On Kickback Charges

Paul Shin Devine allegedly disclosed company secrets to Asian suppliers in exchange for payments of more than $1 million.

An Apple worker has been arrested on charges he allegedly took kickbacks of more than $1 million over a period of several years from the company's Asian suppliers in exchange for inside information about the iPhone maker's product lineup.

A federal grand jury has indicted Paul Shin Devine, 37, of Sunnyvale, Calif., along with Singapore-based alleged accomplice Andrew Ang, on 23 counts of wire fraud, money laundering, receiving kickbacks, and other charges, according to the San Jose Mercury News, which first reported the story on Friday.

Apple has also filed a civil lawsuit against Devine, who was a supply-chain manager at the company.

The investigation was led by agents from the Internal Revenue Service and the Federal Bureau of Investigation. An Apple spokesperson said the company is cooperating with the investigators.

"Apple is committed to the highest ethical standards in the way we do business," a spokesman told the Mercury News. "We have zero tolerance for dishonest behavior inside or outside the company," the spokesman said.

The newspaper reported that the companies that allegedly paid the kickbacks were not identified by name in the federal indictment. The indictment indicates they are based in various countries in Asia, including China, South Korea, Taiwan, and Singapore. The bulk of Apple's electronics manufacturing is done in those countries.

The vendors, which manufacture parts and accessories for the iPhone and iPod, supposedly benefited from the arrangement as, armed with insider information, they were better able than their competitors to tailor their products to Apple's needs and anticipate future demands.

Devine and Ang allegedly established an elaborate series of front companies and offshore accounts to cover up income received from the scheme. Devine is set to appear Monday afternoon in U.S. Northern District Court in San Jose to face the charges.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
News
A Startup With NSA Roots Wants Silently Disarming Cyberattacks on the Wire to Become the Norm
Kelly Jackson Higgins, Executive Editor at Dark Reading,  5/11/2021
Edge-DRsplash-10-edge-articles
Cybersecurity: What Is Truly Essential?
Joshua Goldfarb, Director of Product Management at F5,  5/12/2021
Commentary
3 Cybersecurity Myths to Bust
Etay Maor, Sr. Director Security Strategy at Cato Networks,  5/11/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: Google Maps is taking "interactive" to a whole new level!
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-15279
PUBLISHED: 2021-05-18
An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research.
CVE-2021-3423
PUBLISHED: 2021-05-18
Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business S...
CVE-2020-18194
PUBLISHED: 2021-05-17
Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post.
CVE-2020-18195
PUBLISHED: 2021-05-17
Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a specific article via the component " /admin.php?action=page."
CVE-2020-18198
PUBLISHED: 2021-05-17
Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."