{"id":7661,"date":"2023-11-27T17:29:45","date_gmt":"2023-11-27T14:29:45","guid":{"rendered":"https:\/\/www.endpointprotector.com\/blog\/?p=7661"},"modified":"2026-02-18T11:13:25","modified_gmt":"2026-02-18T08:13:25","slug":"valeo-vs-nvidia-company-ip-still-too-easily-stolen-by-departing-employees","status":"publish","type":"post","link":"https:\/\/www.endpointprotector.com\/blog\/valeo-vs-nvidia-company-ip-still-too-easily-stolen-by-departing-employees\/","title":{"rendered":"Valeo vs NVIDIA: Company IP still too easily stolen by departing employees"},"content":{"rendered":"

The Valeo vs NVIDIA case highlights how easily departing employees can exfiltrate intellectual property such as source code and trade secrets. Insider threats often exploit legitimate access, using personal email, cloud storage, or USB devices to transfer sensitive data. Data Loss Prevention (DLP) and endpoint monitoring tools help detect, block, and remediate unauthorized transfers, reducing financial, legal, and reputational risk.<\/em><\/p>\n

Both NVIDIA and Valeo (a global automotive parts and technology supplier) have learned the hard way that it\u2019s all too easy for employees to exfiltrate valuable intellectual property (IP), and other sensitive data when they leave an organization.<\/p>\n

This week, Valeo filed a lawsuit<\/a> against NVIDIA, alleging that a former employee stole six gigabytes of source code relating to parking and driver assistance technologies (as well as presentations and spreadsheets relating to the technology) and that NVIDIA has financially gained from its \u201cstolen trade secrets.\u201d<\/p>\n

The issue came to light this year when the two firms embarked on a joint project. During a Microsoft Teams video call, the former Valeo employee (now at NVIDIA) shared his screen, accidentally exposing a folder and file containing the Valeo source code.<\/p>\n

Valeo employees on the call immediately recognized it, took a screenshot of the offending data, and reported the incident. The former employee was subsequently convicted<\/a> by German authorities over unlawfully holding the data, and his new employer, NVIDIA, was subjected to a lawsuit.<\/p>\n

“NVIDIA\u00a0has saved millions, perhaps hundreds of millions, of dollars in development costs, and generated profits that it did not properly earn and to which it was not entitled,<\/em>” the complaint alleges.<\/p>\n

The issue is not a new one, in fact, we wrote<\/a> about the threat of leavers to organizational data last year. But, this story puts into perspective the very real danger and financial impact that intellectual property theft can have on both the exited company, and also a new employer – who may very well be completely unaware that stolen IP has been introduced to their organization.<\/p>\n

Valeo\u2019s lawsuit alleges that the former employee downloaded source code without authorization by granting access to Valeo’s systems to his personal email account. He was then able to exfiltrate the data. It is not specified in the lawsuit, but, given the size of the data (over six gigabytes), we must assume that it was copied to removable media or transferred to a personal cloud store.<\/p>\n

Interestingly, the lawsuit outlines Valeo\u2019s technologies and process to protect IP – although this seems to have not been enough to mitigate the risk. The information points to the use of access controls within Google Drive that the employee managed to circumvent.<\/p>\n

Can DLP protect Intellectual Property?<\/h2>\n

Tools like Endpoint Protector by CoSoSys<\/a> are designed to combat data loss that occurs either through accidental oversharing by employees, or maliciously. Policies can be built to protect common PII<\/a> and PHI<\/a> types, as well as company specific IP<\/a> – including source code<\/a>.<\/p>\n

It achieves this by protecting common data exit points on Windows, macOS, and Linux endpoints. These include email, messaging apps such as Slack and Microsoft Teams, browser uploads to cloud apps, printers, removable storage media, and more. Even if employees try to circumvent controls, perhaps by renaming files, trying to take screenshots, or printing files, Endpoint Protector allows organizations to monitor and protect data at the endpoint<\/a> \u2013 even when employees go offline. This gives organizations the visibility and control they need to control sensitive data and eliminate the risk of data leaving the endpoint.<\/p>\n

Employers should be aware of the risks that new employees may bring with them<\/h2>\n

NVIDIA’s situation also highlights the need for employers to be aware of the data that new employees bring with them. Typically, there\u2019s no malice behind their actions. It\u2019s simply a desire to keep hold of data that could benefit them in their new role. Perhaps a list of potential sales contacts, or, simply, some examples of their work they\u2019d like to keep for reference. Of course, that\u2019s not to say it\u2019s all without malice. There are plenty of examples of employees taking confidential information with them to a new employer, just as this case highlights.<\/p>\n

Either way, the result is a loss of data for the original employer, and potential financial penalties for the new employer.<\/p>\n

eDiscovery can identify data-at-rest on employee endpoints<\/h2>\n

NVIDIA claims that it has not benefited in any way from the stolen data and that it resided on the employee’s endpoint (laptop) only. Tools such as Endpoint Protector\u2019s eDiscovery<\/a> module scans employee endpoints for sensitive data and allows security administrators to encrypt or delete it. This neutralizes any risk of that data later being exfiltrated, or putting the employer at risk of breaking any regulatory requirements (e.g., GDPR<\/a>, NIST<\/a>, HIPAA).<\/p>\n

Learn more<\/h2>\n

Request a demo of Endpoint Protector<\/a> to learn more about how you can protect your data from unauthorized exfiltration, and mitigate the risk of leavers taking your intellectual property with them<\/p>\n","protected":false},"excerpt":{"rendered":"

The Valeo vs NVIDIA case highlights how easily departing employees can exfiltrate intellectual property such as source code and trade secrets. Insider threats often exploit legitimate access, using personal email, cloud storage, or USB devices to transfer sensitive data. Data Loss Prevention (DLP) and endpoint monitoring tools help detect, block, and remediate unauthorized transfers, reducing … <\/p>\n

Continue reading “Valeo vs NVIDIA: Company IP still too easily stolen by departing employees”<\/span><\/a><\/p>\n","protected":false},"author":16,"featured_media":7663,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[223],"tags":[],"class_list":["post-7661","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-insider-threat-management","entry"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/7661","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/comments?post=7661"}],"version-history":[{"count":7,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/7661\/revisions"}],"predecessor-version":[{"id":8242,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/7661\/revisions\/8242"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media\/7663"}],"wp:attachment":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media?parent=7661"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/categories?post=7661"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/tags?post=7661"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}