In a case that highlights the dangers posed by malicious insiders, a former DuPont research scientist has admitted to downloading and stealing proprietary and technical information valued at $400 million (£205m) from the company.
Gary Min pleaded guilty to stealing trade secrets from the chemicals and healthcare company in November 2006, but details of the case were officially unsealed last week by US Attorney Colm Connolly. Min faces up to 10 years in prison and a fine of up to $250,000 when he is sentenced on 29 March.
According to the details released last week, Min started worked as a scientist at DuPont in November 1995 and focused mainly on research involving a certain type of high-performance films. In June 2005, he started talking with a UK-based multinational firm, Victrex, about possible job opportunities in Asia and eventually accepted a job with the company in October 2005. Though he was scheduled to start working for Victrex in January 2006, he did not inform DuPont about the job until 12 December 2005.
Between August 2005 and December 2005, Min downloaded approximately 22,000 abstracts and viewed approximately 16,700 full-text PDF documents from DuPont's Electronic Data Library (EDL) server, which was located at a company facility in the US. The EDL server hosts DuPont's primary databases for storing confidential information. A large portion of the downloaded material had nothing to do with his primary areas of research; instead, it covered most of DuPont's major technology and product lines, including some emerging technologies that were still in the research-and-development stage.
The theft was noticed only after Min announced his plans to leave DuPont, when an internal probe by the company uncovered his unusually high EDL usage and the large volume of abstracts and reports he had accessed – about 15 times higher than the next-highest user of the system.
DuPont immediately contacted the US Federal Bureau of Investigation (FBI) and the Department of Commerce, both of which launched a joint investigation of Min's activities. About a month after Min started work at Victrex, he uploaded about 180 DuPont documents, including ones containing trade secrets and confidential information, to a Victrex-owned laptop computer. Victrex officials in London were contacted by DuPont and informed of the theft. Victrex then seized Min's laptop and handed it over to the FBI.
A raid of Min's Ohio home in on 14 February 2006 uncovered several computers with confidential DuPont information, numerous garbage bags that were filled with shredded DuPont technical documents, as well as evidence of documents that had been burned in a fireplace. At the time federal agents entered the house, Min had launched a software erasure program on one of the computers in an attempt to destroy the contents on its hard disk.
"The cooperation of both DuPont and Victrex was pivotal to the investigation of the case," Connolly said. The case demonstrated the "important partnership" between private companies and government agencies when it comes to safeguarding intellectual property rights, he added.
A statement issued by DuPont commended the US Attorney's Office and the other federal agencies involved in the investigation for their "leadership and professionalism" in handling the issue. DuPont also said there has been no evidence uncovered so far to show that Min actually disseminated the technology he illegally accessed.