Trusted Engineers LOOTED Google — FBI Investigation Explodes

Three Iranian-born engineers exploited America’s open tech sector to steal critical Google trade secrets and funnel them to a hostile foreign power, exposing how lax vetting puts our innovation and national security at risk.

Story Snapshot

Federal prosecutors indicted three Silicon Valley engineers for stealing Google processor and cryptography secrets, then transferring them to Iran
The family network—two sisters and a husband—coordinated across multiple tech firms to exfiltrate hundreds of confidential files while obstructing investigations
Google detected the breach in August 2023 after routine monitoring flagged suspicious activity; defendants face up to 20 years in prison
The case highlights dangerous insider threats as foreign nationals abuse trusted positions to compromise American technological leadership

Family Conspiracy Exploits Silicon Valley Trust

Samaneh Ghandali, 41, her sister Soroor Ghandali, 32, and Samaneh’s husband Mohammadjavad Khosravi, 40, stand accused of orchestrating a calculated scheme to plunder America’s tech crown jewels. The trio leveraged engineering positions at Google and two other unnamed companies specializing in mobile processors to systematically steal trade secrets on processor security, cryptography, and cutting-edge technologies. Federal prosecutors unsealed the indictment on February 19, 2026, revealing charges of conspiracy to commit trade secret theft, theft and attempted theft of trade secrets, and obstruction of justice. All three defendants appeared in San Jose federal court the same day, facing maximum penalties of 10 years and $250,000 per theft count, plus 20 years and $250,000 for obstruction.

Sophisticated Theft Operation Targeted Critical Technologies

Samaneh Ghandali, who became a U.S. citizen around 2018, transferred hundreds of confidential files related to Google’s Pixel smartphone processors to third-party platforms and personal devices during her employment. Her sister Soroor, in the United States on a student visa, replicated these actions while working at Google and later at a third unnamed company. Khosravi, holding a green card since approximately 2019, operated similarly at another tech firm focused on processor development. The defendants didn’t merely copy files—they photographed screens to evade detection, destroyed evidence, and submitted false affidavits to obstruct Google’s internal investigation. This coordinated family operation enabled cross-employer data sharing, amplifying the theft’s scope and demonstrating premeditated intent to circumvent security protocols designed to protect American innovation.

NEW: US charges engineers with sending Google trade secrets to Iran https://t.co/vY3iRnQf0V

— Insider Paper (@TheInsiderPaper) February 20, 2026

Google Detection Triggered Federal Investigation

Google’s internal security monitoring flagged Samaneh Ghandali’s suspicious file transfers in August 2023, prompting immediate revocation of her system access and launch of a comprehensive investigation. The company alerted law enforcement and cooperated fully with federal authorities, a spokesperson confirming enhanced safeguards were implemented following the breach. In December 2023, Samaneh and Khosravi traveled to Iran, where investigators traced access to the stolen documents via a personal device linked to Samaneh. This Iran connection transformed a corporate theft case into a matter of national security, triggering FBI involvement and DOJ prosecution under frameworks designed to protect American intellectual property from hostile foreign adversaries seeking to leapfrog our technological advantages through espionage rather than legitimate innovation.

National Security Implications Demand Accountability

U.S. Attorney Craig H. Missakian framed the prosecution as essential to “protecting American innovation” from nations “that wish us ill,” directly referencing Iran’s adversarial posture. FBI Special Agent Sanjay Virmani characterized the scheme as a “calculated betrayal of trust,” emphasizing how the defendants exploited their privileged access for unauthorized foreign transfers. The case arrives amid heightened U.S.-Iran tensions over nuclear programs and regional military activities, underscoring vulnerabilities in Silicon Valley’s hiring practices. While Google and other firms employ strict physical and network safeguards, insider threats from individuals with legitimate credentials remain difficult to prevent. The stolen cryptography and processor data could enable Iran to advance military applications or circumvent U.S. export controls, directly threatening national security interests.

Broader Implications for Tech Sector Vetting

This prosecution mirrors similar DOJ actions against ex-Apple engineers who stole chip secrets for China in 2023, revealing a pattern of foreign nationals leveraging American openness to benefit adversarial regimes. The case will likely accelerate calls for stricter vetting and continuous monitoring of employees with access to sensitive technologies, particularly those maintaining ties to countries under U.S. sanctions. Short-term, the indictments send a deterrent message to potential insider threats; long-term, expect legislative pressure for enhanced background checks and restrictions on foreign nationals in critical R&D roles. The Silicon Valley Iranian diaspora may face heightened scrutiny, raising concerns about balancing security with fairness. Mobile processor and AI firms are already adopting advanced anomaly detection systems, recognizing that billion-dollar R&D investments require equally robust internal defenses against those who would steal rather than innovate.