Cyber Security News

Google Employee Charged for Making $1.2 Million With Confidential Information

A Google software engineer has been charged in the United States for allegedly using confidential internal data to generate more than $1.2 million in profits through prediction market trading.

The case highlights growing concerns around insider threats and misuse of privileged access in large technology organizations.

According to the U.S. Attorney’s Office for the Southern District of New York, Michele Spagnuolo, also known online as “AlphaRaccoon,” is accused of exploiting nonpublic business information obtained through his role at Google.

Authorities allege that Spagnuolo used internal company tools containing sensitive data labeled “Google Confidential” to gain an unfair advantage in financial markets.

Investigators state that Spagnuolo had been authorized to access internal systems as part of his engineering responsibilities.

Google Employee Charged

These systems reportedly provided insights into company developments and trends that were not yet publicly disclosed.

Despite acknowledging Google’s confidentiality and ethics policies, he allegedly used this privileged information to inform trading decisions on Polymarket, a blockchain-based prediction market platform.

The complaint reveals that Spagnuolo created the “AlphaRaccoon” account in May 2024 and began placing trades tied to Google-related events.

Between October 15 and December 4, 2025, he allegedly risked about $2.75 million across prediction markets using trades tied to anticipated outcomes based on internal Google data.

Once the relevant information became public and the prediction markets settled, authorities claim that Spagnuolo realized profits of approximately $1.2 million.

Prosecutors argue that these gains were directly derived from insider knowledge, constituting a violation of federal financial and fraud laws.

Spagnuolo, a 36-year-old Italian national residing in Switzerland, faces multiple charges, including commodities fraud, wire fraud, and money laundering.

If convicted, he could face significant prison sentences, with the most serious charges carrying penalties of up to 20 years.

From a cybersecurity and insider threat perspective, this case underscores the risks associated with excessive access to sensitive data within enterprise environments.

Even in organizations with established security policies, trusted insiders with legitimate access can become significant threats if monitoring and behavioral analytics are insufficient.

The incident also reflects the evolving landscape of financial exploitation, where nontraditional platforms such as prediction markets are increasingly used to monetize insider information.

Unlike traditional stock trading, these platforms may present new challenges for regulatory oversight and detection.

Law enforcement agencies, including the FBI and the U.S. Department of Justice said they remain focused on identifying individuals who abuse corporate access for personal gain.

The case is being handled by the Securities and Commodities Fraud Task Force, with prosecutors noting that the allegations remain subject to judicial review.

For organizations, the case serves as a reminder to strengthen insider risk management programs, enforce strict access controls, and deploy monitoring mechanisms to detect anomalous data usage patterns before they cause financial or reputational damage.

Follow us on Google NewsLinkedIn, and X to Get More Instant Updates.

Abinaya

Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.

Recent Posts

Top 10 Best SaaS Security Posture Management (SSPM) Tools in 2026

Your SaaS estate M365, Salesforce, Workday, Slack, hundreds of others is a sprawl of misconfigurations,…

48 seconds ago

Top 10 Best Data Security Posture Management (DSPM) Tools in 2026

DSPM finds sensitive data you didn’t know you had, classifies it, maps who can reach…

7 minutes ago

OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in GemStuffer Campaign

Open-source packages are meant to save developers time. In the GemStuffer campaign, that trust became…

17 minutes ago

Google Chrome 153 Update Fixes 42 Security Flaws, Including 3 Critical Ones

Google has released an important Chrome 153 security update that fixes 42 vulnerabilities across the…

5 hours ago

CISA and NIST Release Technical Checklist for Safeguarding Identity Tokens From Theft and Misuse

The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology…

15 hours ago

CISA Shares 17 Techniques Used by Hackers to Compromise Active Directory Environments

CISA and five international cybersecurity agencies have released detailed guidance describing 17 common techniques hackers…

16 hours ago