Software Engineer Charged for Taking Stolen Trade Secrets to ChinaSoftware Engineer Charged for Taking Stolen Trade Secrets to China
Xudong Yao reportedly stole proprietary information from his employer and brought it to China, where he is believed to currently reside.
July 12, 2019
A newly unsealed federal indictment charges a software engineer for stealing proprietary information from his workplace and bringing it to China, the Department of Justice reports.
Xudong Yao was a software engineer for a locomotive manufacturer in suburban Chicago, where he began working in August 2014. Within two weeks of his hiring date, Yao downloaded more than 3,000 files containing proprietary and trade secret data related to the system that runs the company's locomotives. Over the following six months he continued to download electronic files containing technical documents and software source code, the indictment says.
At the same time he was working for his Chicago employer and stealing information, Yao sought and accepted employment at a business providing automotive telematics service systems based in China. His Chicago employer terminated him in February 2015 for reasons unrelated to the theft, of which it was still unaware. Soon after his termination, Yao copied the stolen data, traveled to China, and began his new job.
According to the indictment, Yao later flew back to Chicago in November 2015 with the stolen information, which included copies of his former employer's control system source code and content explaining how the code worked. He later went back to China, where he is believed to reside.
Read more details here.
Black Hat USA returns to Las Vegas with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions, and service providers in the Business Hall. Click for information on the conference and to register.
About the Author(s)
You May Also Like
Hacking Your Digital Identity: How Cybercriminals Can and Will Get Around Your Authentication MethodsOct 26, 2023
Modern Supply Chain Security: Integrated, Interconnected, and Context-DrivenNov 06, 2023
How to Combat the Latest Cloud Security ThreatsNov 06, 2023
Reducing Cyber Risk in Enterprise Email Systems: It's Not Just Spam and PhishingNov 01, 2023
SecOps & DevSecOps in the CloudNov 06, 2023
Passwords Are Passe: Next Gen Authentication Addresses Today's Threats
How to Deploy Zero Trust for Remote Workforce Security
What Ransomware Groups Look for in Enterprise Victims
How to Use Threat Intelligence to Mitigate Third-Party Risk
Securing the Remote Worker: How to Mitigate Off-Site Cyberattacks