Insider Data Theft

The insider data theft prosecution framework

Insider data theft prosecutions involve current or former employees, contractors, or others with legitimate access to organizational systems who misappropriate data for personal benefit, competitive advantage, or other improper purposes. The prosecutions can involve multiple federal statutes including the CFAA, the federal trade secrets statute, mail and wire fraud, and identity theft. The choice of statutes depends on the specific facts and the strategic considerations of the prosecution.

The Defend Trade Secrets Act at 18 U.S.C. Section 1836 created a federal civil cause of action for trade secret misappropriation and is supplemented by criminal enforcement under 18 U.S.C. Section 1832. The criminal provision reaches theft of trade secrets that are related to a product or service used in or intended for use in interstate or foreign commerce, with the intent or knowledge that the offense will injure the owner of the trade secret. The provision has substantial reach in insider theft cases involving commercial trade secrets.

The penalty structure for trade secret theft under Section 1832 includes up to ten years of imprisonment for individuals, with enhanced penalties for offenses benefitting foreign governments or instrumentalities. The cases involving foreign government beneficiaries are prosecuted under 18 U.S.C. Section 1831 with substantially higher penalties including up to fifteen years of imprisonment. The penalty differential reflects the national security concerns associated with trade secret theft benefitting foreign powers.

The Van Buren framework as applied to insider cases

The Van Buren framework substantially affects the CFAA portion of insider data theft prosecutions. Most insider cases involve employees who used legitimate credentials to access systems and files they were authorized to access, but for purposes that violated employer policies. The Van Buren gate-down framework treats these cases as outside the CFAA exceeds-authorized-access provision.

The Van Buren defense in insider cases focuses on identifying the specific access alleged to be unauthorized and analyzing whether the access fits the gate-up or gate-down framework. An employee who downloaded files from a shared drive that the employee was authorized to access engages in gate-down conduct even if the download was for improper purposes. The CFAA does not reach this conduct under Van Buren even though the conduct may violate employer policies and other statutes.

The Van Buren defense does not preclude prosecution under the trade secrets framework or other statutes that do not depend on the CFAA authorization analysis. The trade secrets statute requires proof that the information meets the trade secret definition, that the defendant obtained the information through misappropriation, and that the misappropriation occurred with the required mens rea. The trade secrets analysis does not depend on the Van Buren framework and can proceed independently of any CFAA defense.

The trade secret element and the defense considerations

The trade secret element under both the federal civil and criminal statutes requires that the information meet specific definitional criteria. The information must derive economic value from not being generally known and not being readily ascertainable through proper means. The owner must have taken reasonable measures to maintain the secrecy of the information. Each element provides scope for defense argument.

The reasonable measures element is frequently contested. The defense can challenge whether the owner actually took reasonable measures by examining the specific security practices, the marking of confidential information, the training of employees on confidentiality obligations, and the enforcement of confidentiality policies. Owners who did not actively protect their information may lose trade secret protection even for information that would otherwise qualify.

The economic value element can also be challenged. The defense can show that the information was generally known in the industry, that the information was readily ascertainable through proper means including reverse engineering or independent development, or that the information did not actually have substantial economic value. The challenges require careful factual development including expert testimony from industry sources.

The sentencing framework and the cooperation considerations

The federal sentencing for insider data theft cases is driven by the value of the trade secrets or other information involved, the sophistication of the offense, the involvement of foreign beneficiaries, and other specific characteristics. The USSG Section 2B1.1 framework produces base offense levels that can result in substantial imprisonment for high-value cases. The sentencing analysis requires careful evaluation of the loss calculation and the specific characteristics that affect the offense level.

The cooperation considerations in insider cases can substantially affect the disposition. Defendants who cooperate with the government by providing information about other actors, by returning or assisting with the recovery of stolen information, or by providing technical information about the methods of theft can earn substantial sentence reductions. The cooperation can include both substantial assistance under USSG Section 5K1.1 and acceptance of responsibility under Section 3E1.1.

The collateral consequences for insider theft defendants are particularly severe in technology industries. A conviction can effectively end the defendant career in the field because employers in technology, finance, healthcare, and other regulated industries typically conduct background checks that would identify the conviction. The defense should counsel insider clients about the long-term professional implications and should consider the collateral consequences when evaluating disposition options. The negotiated dispositions that avoid felony conviction or that produce non-disclosable misdemeanor convictions can have substantially better long-term implications than felony pleas.

Civil litigation parallels and the unified defense framework

Insider data theft cases frequently produce parallel civil litigation by the former employer seeking damages for the misappropriation. The civil case can proceed on multiple theories including breach of contract under non-disclosure and non-compete agreements, breach of fiduciary duty, conversion, and federal trade secret misappropriation under the Defend Trade Secrets Act civil provisions at 18 U.S.C. Section 1836. The civil discovery in these parallel cases can produce evidence that affects the criminal proceeding, and the criminal Fifth Amendment considerations affect the civil discovery responses. The defense must develop a unified strategy across both proceedings, with careful attention to the timing of dispositions, the use of protective orders to limit discovery, and the coordination of factual positions across the parallel forums.