What Is Company Espionage? Trade Secrets, Penalties, and Remedies

Company espionage is the theft of trade secrets or proprietary business information, usually to benefit a competitor or a foreign government. Federal law treats it as both a crime carrying up to 15 years in prison and a civil wrong that can produce damages of up to three times the loss. The conduct ranges from a departing employee copying a client list onto a thumb drive to a state-sponsored hacking operation against a defense contractor, and the federal framework for responding to it has expanded considerably over the past decade.

What Counts as a Trade Secret

Nothing is espionage until the stolen information qualifies as a trade secret. Federal law defines the term broadly, covering financial, business, scientific, technical, economic, and engineering information in any form, whether stored digitally, on paper, or in someone’s memory.¹ Two conditions have to be met. The owner must have taken reasonable steps to keep the information secret, and the information must derive economic value from not being publicly known.

The first condition catches more companies than you would expect. If access was never restricted, documents were never marked confidential, and nondisclosure agreements were never signed, a court may conclude the information was never a trade secret to begin with. The U.S. Patent and Trademark Office identifies measures that count as reasonable: limiting access to employees who genuinely need it, requiring signed confidentiality agreements, training staff on handling sensitive information, controlling physical and digital access, and making sure departing employees return or destroy any secrets in their possession.² Skipping these steps creates security gaps and can destroy legal standing to sue.

Typical targets fall into two groups. Technical assets include chemical formulas, manufacturing processes, software source code, product designs, and engineering prototypes. Business intelligence includes customer databases, pricing strategies, launch schedules, and cost-structure data. A rival who sees your cost structure can calculate exactly how much pressure it takes to push you out of a market segment.

How Company Espionage Happens

Insider Threats

The most common pathway is an insider. An employee, contractor, or consultant with authorized access downloads files to a personal drive, forwards documents to an outside email account, or memorizes critical data before leaving for a competitor. The breach often becomes visible only after the person has started the new job. This vector is the hardest to defend against because the threat sits inside the security perimeter, using credentials the company issued.

Cyberattacks and Social Engineering

External attackers use phishing emails that trick employees into handing over login credentials or clicking links that install monitoring software. Once inside a network, malware can quietly extract databases over weeks or months. Social engineering, which manipulates staff through psychological tactics to reveal passwords or procedures, often works better than any technical exploit. These attacks do not need to defeat your firewall. They need one employee to make one mistake.

Physical Tactics

Older methods still work. Stealing laptops or phones, posing as maintenance workers to plant recording devices, and picking through improperly shredded documents all remain viable. Trade shows create opportunities to eavesdrop on private conversations or photograph prototypes on display.

Federal Criminal Laws and Penalties

The Economic Espionage Act of 1996 is the primary criminal statute, and it draws a sharp line based on who benefits from the theft. Section 1831 covers espionage that benefits a foreign government or foreign agent, and it carries the heaviest penalties because of the national security implications.³ Section 1832 targets domestic commercial theft, meaning theft that benefits any private party other than the rightful owner.⁴ Federal prosecutors pick the charge based on who ultimately benefits.

The penalties are steep, and the gap between the two sections reflects how seriously Congress treats the national security angle.

Foreign espionage under Section 1831: an individual faces up to 15 years in federal prison and a fine of up to $5,000,000. An organization can be fined the greater of $10,000,000 or three times the value of the stolen trade secret, including the research and development costs the organization avoided by stealing rather than inventing.³
Domestic theft under Section 1832: an individual faces up to 10 years in prison. An organization can be fined the greater of $5,000,000 or three times the value of the stolen trade secret.⁴

On top of fines and prison time, convicted parties face forfeiture and restitution under the framework that applies to other federal intellectual property crimes.⁵ Property used to commit the offense or derived from it can be seized, and courts routinely order defendants to compensate victims for investigation costs and the market value of the compromised information.

Civil Remedies Under the Defend Trade Secrets Act

Criminal prosecution is a government decision. A victim company cannot force federal prosecutors to take the case. The Defend Trade Secrets Act of 2016 fills that gap by creating a federal civil cause of action, letting a business whose trade secret is connected to interstate or foreign commerce sue in federal court for misappropriation.⁶

Damages

A court can award damages for actual losses plus any unjust enrichment that is not already captured in the actual-loss calculation. Alternatively, the court can impose a reasonable royalty, meaning what the thief should have paid for legitimate access. When misappropriation was willful and malicious, the court can add exemplary damages of up to two times the base award. Attorney fees go to the winning side when the case involves bad faith or willful misconduct.⁷

Injunctions

Courts can issue injunctions to stop ongoing or threatened misappropriation. An injunction cannot prevent someone from taking a new job, and any restrictions must be based on evidence of threatened misappropriation rather than the knowledge the person happens to carry in their head.⁷ That limit prevents companies from using trade secret claims as a backdoor non-compete.

Emergency Seizure Orders

In extraordinary circumstances the DTSA allows a court to order seizure of property without advance notice to the other side. The bar is deliberately high. The applicant has to show that a standard injunction would not work because the defendant would evade it, that irreparable harm is imminent, and that the applicant is likely to prove both that the information is a trade secret and that it was stolen through improper means.⁷ Courts do not grant these casually. The remedy exists for situations like a laptop full of stolen data about to leave the country.

Statute of Limitations

A civil action has to be filed within three years from the date the theft was discovered or should have been discovered through reasonable diligence. A continuing misappropriation counts as a single claim, so the clock does not reset every time the thief uses the information again.⁷ Three years sounds like plenty of time, but companies without monitoring often do not realize information is gone until a competitor’s suspiciously similar product reaches the market.

Whistleblower Immunity Is a Boundary on These Laws

Not every disclosure of a trade secret is espionage. Federal law provides immunity from criminal and civil liability when someone discloses a trade secret confidentially to a government official or an attorney for the sole purpose of reporting a suspected legal violation.⁸ If the disclosure happens in a lawsuit filing, the document has to be filed under seal. An employee who sues for retaliation after reporting a suspected violation can use the trade secret information in court as long as sealed-filing and court-order procedures are followed.

Employers have a related obligation. They must include notice of this immunity in any contract or agreement with an employee, contractor, or consultant that governs trade secrets or confidential information. A cross-reference to a company policy document describing the reporting process satisfies the requirement. An employer that skips the notice loses the ability to recover exemplary damages or attorney fees in a misappropriation suit against that person.⁸ Immunity does not cover information acquired through unlawful means. Hacking into a system you were not authorized to access cannot be laundered through a whistleblower claim.

Building a Defense Before You Need One

Everything above is only available if the groundwork is in place. Courts will not protect information a company did not bother to protect itself. The “reasonable measures” requirement built into the federal definition of a trade secret makes security practices a legal prerequisite, not just good hygiene.¹

The measures that hold up in court include:

Access restrictions that limit trade secret access to employees whose jobs require it, with different permission levels based on role.
Signed confidentiality agreements with employees, contractors, and any outside parties who will encounter sensitive information, applied consistently so that selective enforcement does not undermine the legal position.
Regular employee training on identifying and handling confidential materials, not a one-time orientation slide.
Document marking that labels trade secret materials as confidential, whether digital or physical.
Physical and digital controls, including locked rooms, safes, tiered login permissions, and monitoring of file access.
Exit procedures that ensure departing employees return all materials and reaffirm their continuing obligations before leaving, which matters most when someone departs under tense circumstances.²

Many espionage cases that fail in court do not fail because the theft was unclear. They fail because the company could not demonstrate it treated the information as secret. If the most valuable formula sits on an unencrypted shared drive with no access log, that is the fact a defense attorney will press.

Non-Compete Agreements as a Limited Supplement

Companies have historically used non-compete clauses as another layer of trade secret protection, restricting employees from joining competitors for a set period after leaving. The FTC proposed a nationwide ban on most non-competes in 2024, but a federal district court blocked the rule, and the FTC abandoned its appeal in September 2025. As of 2026, no federal ban exists, and the FTC has stated that a nationwide restriction would require action by Congress. The agency continues to evaluate individual non-competes case by case, weighing the employer’s legitimate business interests against the harm to employees and the public.

State laws on non-competes vary widely. Some states enforce them broadly, some restrict them to high earners, and a handful prohibit them almost entirely. A non-compete that simply tries to prevent competition in general, rather than protect specific trade secrets or highly specialized knowledge, is unlikely to survive scrutiny. Non-competes work as one piece of a protection strategy, not a substitute for the security measures described above.

1
Office of the Law Revision Counsel. 18 USC 1839 – Definitions
2
USPTO. Trade Secret Intellectual Property Toolkit
3
Office of the Law Revision Counsel. 18 USC 1831 – Economic Espionage
4
Office of the Law Revision Counsel. 18 USC 1832 – Theft of Trade Secrets
5
Office of the Law Revision Counsel. 18 USC 1834 – Criminal Forfeiture
6
Congress.gov. Defend Trade Secrets Act of 2016
7
Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings
8
Office of the Law Revision Counsel. 18 USC 1833 – Exceptions to Prohibitions