Deel Lawsuit: Rippling’s Spy Claims, Payments, and Countersuit

The Deel lawsuit is a pair of dueling federal and state cases between HR and payroll software rivals Rippling and Deel, centered on Rippling’s March 17, 2025 claim that Deel cultivated a spy inside its Dublin office to steal trade secrets. Rippling sued in the U.S. District Court for the Northern District of California, bringing federal racketeering and trade-secret claims;¹²³⁴

What Rippling Says Deel Did

Rippling’s complaint focuses on Keith O’Brien, who worked as a Global Payroll Compliance Manager in Rippling’s Dublin office from June 2023 until March 2025. Rippling alleges Deel CEO Alex Bouaziz and his father Philippe Bouaziz, Deel’s board chair and CFO, personally recruited O’Brien around November 2024 to spy on Rippling from the inside.⁵

Over roughly four months, according to Rippling, O’Brien searched internal systems for the term “Deel” an average of 23 times a day, running more than 6,000 Slack searches in total.⁶ The material he allegedly funneled to Deel included sales pipeline data, customer pricing proposals, internal product roadmaps, competitive strategy documents, customer lists, and an internal phone directory Deel allegedly used to recruit Rippling employees.¹

The federal complaint asserts claims under the Racketeer Influenced and Corrupt Organizations (RICO) Act along with misappropriation of trade secrets, tortious interference, unfair competition, and aiding and abetting breach of fiduciary duty. An amended complaint filed June 5, 2025 labels the operation the “Bouaziz Racketeering Enterprise” and names Alex Bouaziz, Philippe Bouaziz, and COO Dan Westgarth among the alleged participants.⁵ The case, 3:25-cv-02576, is before Judge Charles Breyer.³

How Rippling Says It Caught the Spy

Rippling says it set a trap. Its security team created an empty Slack channel called “#d-defectors” and had Rippling’s general counsel send a letter referencing that channel to three Deel-side recipients: Philippe Bouaziz, Deel’s Head of U.S. Legal Spiros Komis, and outside counsel. According to the complaint, O’Brien opened the channel for the first time within hours of the letter going out, which Rippling argues shows Deel’s leadership was directing him.⁶

On March 12, 2025, Rippling’s Irish subsidiary obtained an emergency preservation order from the High Court of Ireland requiring O’Brien to hand over his devices for forensic imaging. The order carried a penal endorsement, meaning noncompliance could result in imprisonment.⁵⁷⁸

On March 27, 2025, O’Brien signed a cooperation agreement with Rippling. On April 2, he gave a sworn affidavit to the Irish High Court confessing his role.⁹⁵ In the affidavit, O’Brien said Alex Bouaziz urged him to stay at Rippling and “be like James Bond,” that communications ran through encrypted Telegram channels with self-destructing messages and coded language, and that he was told to flee to Dubai with his family while Deel covered his legal bills.¹⁰⁸

Deel has challenged O’Brien’s credibility, arguing Rippling “traumatized” him into providing a false affidavit and pointing to significant financial incentives in his cooperation deal. One Deel filing put the package at a €110,700 lump sum plus full legal coverage.¹¹¹²

The Disputed Payments

Deel has acknowledged one payment: $6,000 sent to O’Brien in November 2024, approved by Alex Bouaziz and arranged by COO Dan Westgarth, who routed it through the Revolut account of his wife, Alba Basha. Bank records unsealed by a magistrate judge showed Basha transferred exactly $6,000 to O’Brien 56 seconds after receiving funds from a Deel corporate account, leaving her personal balance at $8.16.¹³¹²

Deel says that initial payment was a favor to help O’Brien with living expenses. For the recurring monthly payments that followed in the same amount, Deel offers a different explanation: that Philippe Bouaziz had connected O’Brien with a contact in second-hand luxury watches and the payments were finder’s fees for watch-buying leads, not espionage compensation.¹³ The later payments went out in Ethereum, which Rippling’s amended complaint alleges was done to leave “no trace.”⁵ Rippling has called the watch explanation “absurd,” noting O’Brien is a payroll specialist with no watch background and that the payments stopped as soon as the lawsuit was filed.¹⁴

Deel’s Countersuit and Sanctions Allegations

Deel filed its own suit on April 24, 2025 in the Superior Court of the State of Delaware (Case No. N25C-04-239 DJB), accusing Rippling of running a “coordinated and illegal years-long shadow campaign” and bringing claims for defamation, deceptive trade practices, and unlawful anticompetitive conduct. Deel alleges Rippling planted false stories with journalists and regulators.²

In an amended filing in June 2025, Deel alleged a Rippling employee with the title “Competitive Intelligence” posed as a fake customer on Deel’s platform for six months, accessing the system 58 times to download contracts, benefits policies, and pricing information across more than 30 countries. Deel says it has screenshots, login records, and support-team logs to back the claim.¹⁵¹⁶ Rippling said at the time it was “looking into the specific allegations.” In a separate June 2026 filing in the California case, Deel added counterclaims alleging Rippling engaged in cybersquatting by acquiring the domain “deal.com” and redirecting it to its own website, along with claims of unauthorized system access and false advertising.¹⁷

Deel has also argued Rippling’s lawsuit is a diversion from claims that Rippling violated U.S. sanctions on payments into Russia.⁷¹⁸¹¹

Where the Cases Stand Now

In mid-2026, Judge Breyer denied Deel’s motion to dismiss the federal case, ruling from the bench that Rippling had made “sufficient allegations” that Deel violated federal racketeering and trade-secret laws.³

On June 5, 2026, the court granted Rippling’s request for a forensic examination of devices and accounts Alex Bouaziz identified as having been used to communicate with O’Brien. The exam is meant to reconstruct messages, attachments, deleted files, and evidence of data destruction. Deel had argued its executives’ use of encrypted, ephemeral messaging on Telegram and WhatsApp was a legitimate privacy practice; the court found those objections insufficient. Similar requests to examine devices belonging to Philippe Bouaziz and Dan Westgarth were denied without prejudice, with the court noting the evidence against them was “less extensive and detailed.”¹⁹

On the criminal side, reporting in January 2026 revealed the DOJ had opened a criminal investigation into Deel. Grand jury subpoenas were issued by Craig Missakian, the U.S. Attorney for the Northern District of California, and prosecutors are reportedly examining how the alleged spying operation was funded, authorized, and carried out.²⁰⁴²¹ Deel said it was “not aware of any investigation” and would “always cooperate with the relevant authorities.” Alex Bouaziz has retained William Frentzen, a white-collar defense partner at Morrison Foerster and former chief of the corporate and securities fraud unit at the U.S. Attorney’s Office for the Northern District of California.²²

A parallel proceeding in the Irish High Court narrowed in March 2026, when Judge Mark Sanfey ruled that three Deel executives added as defendants — Alex Bouaziz, head of legal Andrea David Mieli, and associate legal director Asif Malik — could be removed. The judge found that by the time they were added, the dispute between Rippling and O’Brien had already been settled through the cooperation agreement, leaving “no questions involved in the cause or matter” that required the executives as parties. Deel Inc. itself remains a defendant in Ireland and has accepted the court’s jurisdiction.⁹²³

Deel has called the affair a “smear campaign” by Rippling and said “the truth will win in court.”²²

1
Rippling. Original Complaint
2
Deel. Deel Complaint Against Rippling
3
Bloomberg Law. Rippling to Advance Corporate Espionage Lawsuit Against Deel
4
Wall Street Journal. Justice Department Opens Criminal Probe Into Silicon Valley Spy Allegations
5
Rippling. First Amended Complaint
6
Rippling. Rippling Blog Post on Lawsuit
7
CNBC. Startup Rippling Sues Competitor Deel Claiming a Spy Stole Sales Data
8
New York Post. Ex-Rippling Employee Spied on Firm for Rival, Was Asked to Be Like James Bond
9
The Irish Times. Deel Executives Can Be Removed as Defendants in Espionage Case Brought by Rival Rippling
10
Wall Street Journal. Accused Tech Spy Says Rival CEO Recruited Him With Offer to Be Like James Bond
11
Axios. Deel Rippling Lawsuit
12
Calcalist. Unsealed Court Documents in Deel-Rippling Case
13
Rippling. Deel Admits It Paid Spy in New Defense
14
Rippling. Deel’s Watchman Refuses to Cooperate
15
TechCrunch. Now Deel Is Accusing Rippling of Spying by Impersonating a Customer
16
Deel. Deel Files Lawsuit
17
Calcalist. Deel Raises Counterclaims Against Rippling
18
Nearshore Americas. Alleged Spying at the Heart of Court Fight Between Deel and Rippling
19
GovInfo. Court Order in People Center Inc v Deel Inc
20
TechCrunch. The Rippling-Deel Corporate Spying Scandal May Have Taken Another Wild Turn
21
Calcalist. DOJ Opens Criminal Investigation Into Deel
22
Yahoo Finance. Rippling Deel Corporate Spying Scandal
23
Echo Live. Deel Executives Removed as Defendants in Espionage Case