Laid off Intel engineer accused of stealing 18,000 files on the way out
Intel wants the files back, so it's filed a lawsuit claiming $250,000 in damages
A former Intel employee has been accused of stealing thousands of sensitive files after being let go during mass layoffs earlier this year.
Thousands of staff were caught up in layoffs after Lip Bu-Tan took over the reins at the struggling chipmaker in March, and Jingeng Luo was among those affected.
After working for Intel since 2014 and receiving notice in July, Luo is accused of using his last few weeks in the office to download thousands of files, including sensitive documents, sparking a lawsuit from Intel seeking damages of $250,000.
Stay ahead of cyber risks with the NordStellar threat intelligence platform.
<p><a href="https://go.nordstellar.net/aff_c?offer_id=927&aff_id=3013" target="_blank">Black Friday offer! Illuminate the dark web with the code BLACKFRIDAY20 and get 20% offThe incident highlights the potential risk of insider threats — of particular relevance as the tech industry undergoes plenty of layoffs.
Earlier this year, a 55-year-old was convicted of causing intentional damage to protected computers for a campaign of internal sabotage at his employer, power management company Eaton Corp, after he saw a reduction in his responsibilities at work.
Davis Lu reportedly created "infinite loops" that prevented users from logging into their accounts, wreaking havoc for colleagues.
And last year, a disgruntled IT worker was arrested after targeting a former employee with an extortion campaign that included changing admin passwords and shutting down servers if $750,000 in bitcoin wasn't paid.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
What happened?
Luo was told he was being laid off on 7 July, with his contract ending 31 July. A few weeks after being informed, Luo is accused of attempting to download a file from his Intel-provided laptop to an external hard drive, but Intel's internal controls blocked the transfer.
That didn't raise any red flags on the system, however, so he had a second go, according to a court document filed by Intel.
Five days later, according to the allegations, he tried again, using a NAS device — and this time it worked. Over the next four days, Luo downloaded and transferred nearly 18,000 documents, including files marked as "top secret".
Intel said the data transfer was detected internally and sparked an investigation.
Intel said in the court filing that Luo held an engineering position with access to a wide range of confidential information, including data classified as "top secret" and worked on projects that Intel "zealously protected from external disclosure."
$250,000 complaint
Intel said it attempted to contact Luo multiple times over several months to return the files, but the former staffer isn't responding to emails, letters or phone calls, so it filed suit.
The chipmaker said that Luo has “refused to even engage with Intel, let alone return the files, provide the NAS device for examination, or otherwise cooperate with Intel's investigation."
The company is claiming damages of at least $250,000. Luo is believed to be based in Washington state or Oregon, and has not yet publicly responded to the allegations.
Intel noted that Luo signed an agreement to hold such data in strict confidence, and return all data at the end of his employment. Generally, Intel has policies which ban external devices from being connected to company computers or networks.
"Luo’s continued silence demonstrates that he has no intention of cooperating with Intel in any capacity despite his contractual obligation to do so," Intel's court filing noted.
Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.
MORE FROM ITPRO
- Nvidia’s Intel investment just gave it the perfect inroad to lucrative new markets
- The US government's Intel deal explained
- Intel to axe 24,000 roles, cancel factory plans in sweeping cost-cutting move
Freelance journalist Nicole Kobie first started writing for ITPro in 2007, with bylines in New Scientist, Wired, PC Pro and many more.
Nicole the author of a book about the history of technology, The Long History of the Future.
-
Cyber insurance payouts are skyrocketingNews While more companies are taking out cyber insurance, experts warn that not everything is always covered
-
Kaseya: SMBs remain cautious on AI despite persistent human error threatNews The cybersecurity vendor’s latest research reveals that trust barriers are holding AI adoption back
-
GitHub is awash with leaked AI company secrets – API keys, tokens, and credentials were all found out in the openNews Wiz research suggests AI leaders need to clean up their act when it comes to secrets leaking
-
When cyber professionals go rogue: A former ‘ransomware negotiator’ has been charged amid claims they attacked and extorted businessesNews The attackers are alleged to have demanded ransoms of up to $10 million
-
CISA just published crucial new guidance on keeping Microsoft Exchange servers secureNews With a spate of attacks against Microsoft Exchange in recent years, CISA and the NSA have published crucial new guidance for organizations to shore up defenses.
-
US telco confirms hackers breached systems in stealthy state-backed cyber campaign – and remained undetected for nearly a yearNews The hackers remained undetected in the Ribbon Communications’ systems for months
-
Google says reports of a 'huge' Gmail breach affecting millions of users are false, againNews Reports of a major Gmail affecting millions of users have been flooding the web this week – Google says they're "false" and you've nothing to worry about.
-
Enterprises can’t keep a lid on surging cyber incident costsNews With increasing threats and continuing skills shortages, AI tools are becoming a necessity for some
-
Cyber researchers have already identified several big security vulnerabilities on OpenAI’s Atlas browserNews Security researchers have uncovered a Cross-Site Request Forgery (CSRF) attack and a prompt injection technique
-
CISA issues alert after botched Windows Server patch exposes critical flawNews A critical remote code execution flaw in Windows Server is being exploited in the wild, despite a previous 'fix'

