Google Employee Charged for Making $1.2 Million With Confidential Information

HomeCyber Security News Google Employee Charged for Making $1.2 Million With Confidential Information By Abinaya May 29, 2026 A Google software engineer has been charged in the United States for allegedly using confidential internal data to generate more than $1.2 million in profits through prediction market trading. The case highlights growing concerns around insider threats and misuse of privileged access in large technology organizations. According to the U.S. Attorney’s Office for the Southern District of New York, Michele Spagnuolo, also known online as “AlphaRaccoon,” is accused of exploiting nonpublic business information obtained through his role at Google. Authorities allege that Spagnuolo used internal company tools containing sensitive data labeled “Google Confidential” to gain an unfair advantage in financial markets. Investigators state that Spagnuolo had been authorized to access internal systems as part of his engineering responsibilities. Google Employee Charged These systems reportedly provided insights into company developments and trends that were not yet publicly disclosed. Despite acknowledging Google’s confidentiality and ethics policies, he allegedly used this privileged information to inform trading decisions on Polymarket, a blockchain-based prediction market platform. The complaint reveals that Spagnuolo created the “AlphaRaccoon” account in May 2024 and began placing trades tied to Google-related events. Between October 15 and December 4, 2025, he allegedly risked about $2.75 million across prediction markets using trades tied to anticipated outcomes based on internal Google data. Once the relevant information became public and the prediction markets settled, authorities claim that Spagnuolo realized profits of approximately $1.2 million. Prosecutors argue that these gains were directly derived from insider knowledge, constituting a violation of federal financial and fraud laws. Spagnuolo, a 36-year-old Italian national residing in Switzerland, faces multiple charges, including commodities fraud, wire fraud, and money laundering. If convicted, he could face significant prison sentences, with the most serious charges carrying penalties of up to 20 years. From a cybersecurity and insider threat perspective, this case underscores the risks associated with excessive access to sensitive data within enterprise environments. Even in organizations with established security policies, trusted insiders with legitimate access can become significant threats if monitoring and behavioral analytics are insufficient. The incident also reflects the evolving landscape of financial exploitation, where nontraditional platforms such as prediction markets are increasingly used to monetize insider information. Unlike traditional stock trading, these platforms may present new challenges for regulatory oversight and detection. Law enforcement agencies, including the FBI and the U.S. Department of Justice said they remain focused on identifying individuals who abuse corporate access for personal gain. The case is being handled by the Securities and Commodities Fraud Task Force, with prosecutors noting that the allegations remain subject to judicial review. For organizations, the case serves as a reminder to strengthen insider risk management programs, enforce strict access controls, and deploy monitoring mechanisms to detect anomalous data usage patterns before they cause financial or reputational damage. Follow us on Google News, LinkedIn, and X to Get More Instant Updates. Tags cyber security cyber security news Copy URL Linkedin Twitter ReddIt Telegram Abinayahttps://cybersecuritynews.com/ Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space. Trending News Anthropic Updates Claude Code With Security Plugin and Faster Performance CISA Warns of Microsoft Defender 0-Day Vulnerabilities Exploited in Attacks VaultJacking Attack Steals Entire Google Password Manager Vault With One Captured PIN Operation Dragon Whistle Uses Malicious LNK Files to Target Changzhou University Top 10 Best Malware Sandbox Tools for Security Teams in 2026 Latest News Cyber Security Hackers Exploit Microsoft Teams’ Collaboration Features to Impersonate IT Helpdesk Staff Press Release The CISO Whisperer’s Watch List For The Gartner Security & Risk Management Summit 2026 Cyber Security News Hackers Use LLM Agent to Move From Marimo RCE to Internal Database in Four Pivots Cyber Security News VaultJacking Attack Steals Entire Google Password Manager Vault With One Captured PIN Cyber Security News AI-Generated npm Malware Accidentally Exposes Threat Actor’s Private GitHub Token