United States v. AleynikovUnited States v. Aleynikov
OPINION & ORDER
Defendant Sergey Aleynikov (“Aleynikov”) has moved to dismiss each count in a three-count Indictment filed against him on February 11, 2010. Aleynikov, a former employee- of Goldman Sachs & Co. (“Goldman”), is charged with misappropriating computer source code used in Goldman’s high-frequency trading system. For the following reasons, the motion is granted in part.
BACKGROUND
As charged in the Indictment, Goldman is a global financial services firm engaged in, inter alia, high-frequency trading on securities and commodities markets, including the New York Stock Exchange (“NYSE”) and NASDAQ Stock Market (“NASDAQ”). Aleynikov was a computer programmer employed by Goldman as a Vice President in its Equities Division from May 2007 until June 2009. In this position, Aleynikov was responsible for developing and maintaining some of the computer programs used to operate Goldman’s high-frequency trading system. Aleynikov resigned in June 2009 to work for Teza Technologies, LLC (“Teza”), a company founded earlier that year. Teza offered Aleynikov the title of “Executive Vice President, Platform Engineering,” in which position he would be responsible for developing Teza’s own high-frequency trading business that would compete with Goldman.
Goldman acquired portions of the Platform when it purchased the Hull Trading Company (“Hull”) in 1999 for approximately $500 million. Since then, Goldman’s computer programmers have developed and modified the computer programs that Goldman uses in its Trading System by writing and altering their source code. 1 Goldman has not licensed its Trading System or made it or its components available to the public, and has taken measures to protect the Trading System’s source code. Among other things, Goldman employees must execute a confidentiality agreement and assign to Goldman the rights to any ideas or information developed during their employment. Goldman also limits access to the Trading System’s source code only to Goldman employees who have reason to access that source code, such as the programmers working on the Trading System.
During his employment at Goldman, Aleynikov was a member of a team of computer programmers responsible for developing and improving aspects of the Platform, including the Platform’s interface with NASDAQ. On his last day of employment at Goldman, June 5, 2009, Aleynikov copied, compressed, encrypted, and transferred to an outside server in Germany hundreds of thousands of lines of source code for the Trading System, including trading algorithms that determine the value of stock options. The entity that operates the German server offers free and paid services to computer programmers who wish to store their source code projects. After transferring the source code to the German server, Aleynikov deleted the program he used to encrypt the files. He also deleted his “bash history,” ie., the history of his most recent computer commands. That evening, and in the days that followed, Aleynikov accessed the German server and downloaded the source code to his home computer, and from there to other home computers and to a portable flash drive.
On July 2, Aleynikov flew to Chicago, Illinois, to meet with Teza. He brought with him a laptop computer and the flash drive containing source code for Goldman’s Trading System, including some of the source code that he copied and transferred to the German server on June 5.
The Indictment charges Aleynikov in three counts with theft of trade secrets in violation of
DISCUSSION
A. Legal Standard
Aleynikov moves to dismiss all counts of the Indictment pursuant to
The law on determining the sufficiency of an indictment is well-settled. Under the Federal Rules of Criminal Procedure, the indictment “must be a plain, concise, and definite written statement of the essential facts constituting the offense charged” and must include the “statute, rule, regulation, or other provision of law that the defendant is alleged to have violated.”
But, it is also well established that “an indictment need do little more than to track the language of the statute charged and state the time and place (in approximate terms) of the alleged crime.”
Yannotti,
On a pretrial motion to dismiss, “the facts alleged by the government must be taken as true.”
United States v. Velastegui,
An indictment may be dismissed, however, where it “fails to allege the essential facts constituting the offense charged.”
United States v. Pirro,
Oftentimes, the adequacy of an indictment will turn on the interpretation of statutory language. “Federal crimes, of course, are solely creatures of statute.”
Dowling v. United States,
B. Count One: Theft of Trade Secrets
Count One of the Indictment charges Aleynikov with theft of trade secrets in violation of
From at least in or about May 2009, up to and including on or about July 3, 2009, ... SERGEY ALEYNIKOV, the defendant, unlawfully, willfully, and knowingly, without authorization copied, duplicated, sketched, drew, photographed, downloaded, uploaded, altered, destroyed, photocopied, replicated, transmitted, delivered, sent, mailed, communicated, and conveyed a trade secret, as that term is defined in Title18, United States Code, Section 1839(3) , and attempted so to do, with intent to convert such trade secret, that was related to and included in a 'product that was produced for and placed in interstate and foreign commerce, to the economic benefit of someone other than the owner thereof, and intending and knowing that the offense would injure the owner of that trade secret, to wit, ALEYNIKOV, while in New York, New York and elsewhere, without authorization copied and transmitted to his home computer Goldman’s proprietary computer source code for Goldman’s high-frequency trading business, with the intent to use that source code for the economic benefit of himself and his new employer, Teza.
(Emphasis added.)
Aleynikov moves to dismiss Count One because the Indictment does not allege that the trade secret at issue here — the source code for Goldman’s Trading System — is related to or included in a “product” that is “produced for or placed in interstate and foreign commerce.” According to Aleynikov, a “product,” as used in
Describing the clause of
with intent to convert a trade secret, that is related to or included in a product that is produced for or placed in interstate or foreign commerce, to the economic benefit of anyone other than the owner thereof, and intending or knowing that the offense will, injure any owner of that trade secret, knowingly ... without authorization copies, duplicates, sketches, draws, photographs, downloads, uploads, alters, destroys, photocopies, replicates, transmits, delivers, sends, mails, communicates, or conveys such information.
all forms and types of financial, business, scientific, technical, economic, or engineering information, including patterns, plans, compilations, program devices, formulas, designs, prototypes, methods, techniques, processes, procedures, programs, or codes, whether tangible or intangible, and whether or how stored, compiled, or memorialized
physically, electronically, graphically, photographically, or in writing if (A) the owner thereof has taken reasonable measures to keep such information secret; and (B) the information derives independent economic value, actual or potential, from not being generally known to, and not being readily ascertainable through proper means by, the public.
The EEA does not define the term “product.” Where a term in a criminal statute is undefined, it must be given “its ordinary meaning.”
United States v. Santos,
Likewise, it is clear that the Trading System was “produced for” interstate commerce based on the plain, ordinary meaning of those terms. Indeed, the sole purpose for which Goldman purchased, developed, and modified the computer programs that comprise the Trading System was to engage in interstate and foreign commerce. Goldman uses the Trading System to rapidly execute high volumes of trades in various financial markets, including the NYSE and NASDAQ, in which buy and sell orders for securities and commodities are placed electronically. The Trading System generates many millions of dollars in annual profits. Goldman’s high-frequency trading activity, which is uniquely made possible by the Trading System, undoubtedly qualifies as interstate and foreign commerce. As such, the Trading System was “produced for” interstate and foreign commerce within the meaning of the EEA.
The legislative history of the EEA confirms this interpretation. Put simply, “the purpose of the EEA was to provide a comprehensive tool for law enforcement personnel to use to fight theft of trade secrets.”
United States v. Yang,
The EEA was intended “to bring together into a
single vehicle
the prohibition on the theft of trade secrets and proprietary information by both private individuals and corporations and by foreign governments and those acting on their behalf.” 142 Cong. Rec. S12201, S12208 (daily ed. Oct.
Although both
Aleynikov’s restrictive interpretation of
Furthermore, Aleynikov’s interpretation of
Aleynikov’s reliance on
General Dynamics Corp. v. United States,
The court’s decision in
General Dynamics
was based on an interpretation of “product” in the context of government procurement contracts and the Armed Services Procurement Regulations, and therefore sheds no light on the meaning of “product” in the context of
Aleynikov also cites three law journal articles to support his interpretation of
With respect to the meaning of the phrase “produced for or placed in interstate or foreign commerce,” Aleynikov relies on cases interpreting the Fair Labor Standards Act,
Unlike the FLSA, however, § 1882 does not refer to the “production of goods for commerce,” but rather more generally to any “product produced for” commerce. In any event, the FLSA also defines “goods” broadly to include, inter
alia,
“articles or
subjects of commerce
of any character, or any part or ingredient thereof.”
Aleynikov also invokes the interpretations of
Aleynikov next argues that interpreting
Moreover, Aleynikov’s argument that
Lastly, Aleynikov argues that interpreting
Having considered the text, purpose, and legislative history of the EEA, no such “grievous ambiguity or uncertainty” exists here. Nor is any guessing required to determine what the EEA means. While Aleynikov attempts to manufacture ambiguity by suggesting that
C. Count Two: Interstate Transportation of Stolen Property
Count Two of the Indictment charges transportation of stolen property in interstate or foreign commerce in violation of
From in or about June 2009, up to and including in or about July 2009, ... SERGEY ALEYNIKOV, the defendant, unlawfully, willfully, and knowingly, transported transmitted, and transferred in interstate and foreign commerce goods, wares, merchandise, securities, and money, of the value of $5,000 and more, knowing the same to have been stolen, converted and taken by fraud, to wit, ALEYNIKOV, while in New York, New York, copied, without authorization, Goldman’s proprietary computer source code for Goldman’s high-frequency trading business, the value of which exceeded $5,000, uploaded the code to a computer server in Germany, and carried that stolen code to a meeting with his new employer, Teza, in Chicago, Illinois.
(Emphasis added.)
Aleynikov moves to dismiss Count Two because the source code that he is charged with having transported and transmitted in interstate and foreign commerce is not “goods, wares, merchandise, securities or money.” He contends that the statute applies only to tangible items, and not to the theft of intangibles, such as the trade secrets embodied in the Trading System’s source code.
The Government contends that the Trading System’s source code is a valuable commodity that may be purchased and licensed by entities seeking to engage in high-frequency trading. It points out that the Indictment alleges that Goldman acquired some of the components of its Trading System when it purchased Hull in 1999 for $500 million. Accordingly, the Government argues that the stolen source code, or any intangible property, is covered by
The NSPA provides for the imposition of criminal penalties upon any person who “transports in interstate or foreign commerce any goods, wares, merchandise, securities or money, of the value of $5,000 or more, knowing the same to have been stolen, converted or taken by fraud.”
The market for such goods, wares, or merchandise may be licit or illicit. For instance, in
United States v. Bottone,
Applying
Bottom
and
Vericker,
courts in this district have held that
In this case, the source code for Goldman’s Trading System constitutes “goods” for purposes of
Aleynikov argues that source code does not constitute “goods” because it is “intangible intellectual property.” He interprets
First, even assuming that the source code is “intangible” property as Aleynikov asserts
17
, the text of
Second, Aleynikov’s reliance on Judge Friendly’s observation in
Bottone
that “where no
tangible objects
were ever taken or transported, a court would be hard pressed to conclude that ‘goods’ had been stolen and transported within the meaning of
The fact that Aleynikov copied, transmitted, stored, and transported the stolen source code in an electronic format — which is much more commercially valuable than a hard copy of the source code — does not remove his conduct from the purview of
Third, the Supreme Court’s decision in
Dowling v. United States,
Aleynikov points to the Supreme Court’s observation in
Dowling
that “cases ... prosecuted under
Aleynikov also relies on
United States v. Brown,
Lastly, Aleynikov argues that interpreting
D. Count Three: Unauthorized Computer Access
Count Three of the Indictment charges Aleynikov with unauthorized computer access and exceeding authorized access in violation of the Computer Fraud and Abuse Act (“CFAA”),
In or about June 2009, ... SERGEY ALEYNIKOV, the defendant, unlawfully, intentionally, and knowingly, and for purposes of commercial advantage and private financial gain, and in furtherance of a criminal and tortious act in violation of the Constitution and the laws of the United States and of any State, accessed a protected computer without authorization and exceeded authorized access, which computer was used in and affecting interstate and foreign commerce and communication, and thereby obtained information from such protected computer the value of which exceeded $5,000, to wit, ALEYNIKOV, while in New York, New York, in violation of Goldman’s policies and his confidentiality agreement with Goldman, accessed a computer server maintained by Goldman and copied Goldman’s proprietary computer source code for Goldman’s high-frequency trading business, the value of which exceeded $5,000, uploaded the code to a computer server in Germany, and then downloaded it to his home computer, all with the intent to used that source code for the economic benefit of himself and his new employer, Teza.
(Emphasis added.)
Aleynikov moves to dismiss Count Three because he neither accessed a Goldman computer without authorization, nor exceeded his authorized access when he allegedly accessed, copied, and uploaded the Trading System’s source code to the German server and then downloaded it to his home computers. As the Indictment alleges, Goldman limited access to the Trading System’s source code to those employees “who had reason” to access it, such as Aleynikov, who was “a member of a team of computer programmers responsible for developing and improving certain aspects of the Platform.” Aleynikov argues that
The Government concedes that Aleynikov was authorized to access the source code for the Trading System that he allegedly stole, but argues that a defendant’s purpose or intention is a necessary component of the violation. According to the Government, the CFAA is therefore violated whenever an individual accesses information with authorization, but does so in violation of a confidentiality agreement or policies or other obligations that the individual owes to the information’s owner.
The CFAA provides, in pertinent part, that anyone who “intentionally accesses a computer without authorization or exceeds authorized access, and thereby obtains ... information from any protected computer” commits a crime.
Where a statutory term is undefined, it must be given its ordinary meaning.
San
tos,
The interpretation of
This interpretation of
These cases are unpersuasive. First, they identify no statutory language that supports interpreting the CFAA to reach misuse or misappropriation of information that is lawfully accessed. Instead, they improperly infer that “authorization” is automatically terminated where an individual “exceed[s]
the purposes
for which access is ‘authorized.’ ”
John,
Furthermore, an interpretation of the CFAA based upon agency principles would greatly expand the reach of the CFAA to any employee who accesses a company’s computer system in a manner that is adverse to her employer’s interests. This would convert an ordinary violation of the duty of loyalty or of a confidentiality agreement into a federal offense. An employee does not lose “authorization” by accessing a computer with an improper purpose; rather, authorization is controlled by the employer, who may or may not terminate or restrict an employee’s access privileges.
LVRC,
In short, unless an individual lacks authorization to access a computer system, or exceeds the authorization that has been granted, there can be no violation of
CONCLUSION
Aleynikov’s July 16 motion to dismiss the Indictment is denied with respect to Counts One and Two and granted with respect to Count Three. Count Three of the Indictment is dismissed.
SO ORDERED.
Notes
. The Indictment defines "source code" as "a series of programming instructions, in human-readable format, that specify the actions to be performed by a computer program.”
. Black’s Law Dictionary defines "product” more narrowly as: "Something that is distrib
. The EEA punishes violations of
. The inclusion of the "product” language in
Notably, Senate Bill 1566, which "broadly prohibited the theft of proprietary economic information by any person,”
id.,
did not include the "product” language that now appears in
.Specifically, Aleynikov relies on the definition of "product” from three sources: (1) Black’s Law Dictionary which, as noted above, is drawn from the products liability context; (2) Section 19 of the Restatement (Third) of Torts: Products Liability, which defines "product” as "tangible personal property distributed commercially and used for consumption”; and (3) the Magnuson-Moss Warranty Act,
. For instance, the Senate "Manager's Statement” for the EEA analyzes the differences between §§ 1831 and 1832, see 142 Cong. Rec. S12201, S12212, but makes no distinction between the scope of trade secrets protected by §§ 1831 and 1832. Instead, the only difference between the two sections noted in the Manager's Statement concerns for whose benefit the trade secret is stolen: "This legislation includes a provision penalizing the theft of trade secrets (Sec. 1832) and a second provision penalizing that theft when it is done to the benefit of a foreign government, instrumentality, or agent (Sec.1831).” Id.
. One of Congress's primary concerns in enacting the EEA was to address exactly the type of situation at issue here, namely "employees who leave their employment and use their knowledge about specific products or processes in order to duplicate them or develop similar goods for themselves or a new employer in order to compete with their prior employer.” H.R.Rep. No. 104-788, at 7, 1996 U.S.C.C.A.N. at 4026. This concern, however, was not limited to manufacturers of tangible, consumer products. For instance, the Senate Report accompanying the bill that became the EEA cited the example of an employee of a computer firm that supplied "software technology to various government projects, primarily in NASA astrophysics activities” who had "transmitted that company's source code to another person in what appeared to be an attempt to appropriate the source code for his own personal use.” S.Rep. No. 104-359, at 9. Under Aleynikov’s interpretation of § 1832, such stolen source code for software provided only for government projects, rather than personal consumption, would not be protected by the EEA.
. The EEA was enacted in 1996, the year after the Supreme Court's decision in
United States v. Lopez,
. Other criminal statutes demonstrate that where Congress intends to address consumer products specifically, it actually uses the word "consumer” to modify the word "product.”
See, e.g.,
.
. Other terms defined in the FLSA are also consistent with a broad interpretation of the EEA’s requirement that the “product” be "produced for or placed in” commerce. For example, the FLSA defines "commerce” as “trade, commerce, transportation,
transmission, or communication
among the several States or between any State and any place outside thereof.”
. The Second Circuit recognized long ago that the FLSA's jurisdictional element is broad enough to encompass businesses engaged in a variety of “intangible” activities, such as an insurance company's underwriting of insurance policies,
see Darr v. Mutual Life Ins. Co. of N.Y.,
. The manuals themselves disclaim any precedential effect. The USAM states, in pertinent part:
The Manual provides only internal Department of Justice guidance. It is not intended to, does not, and may not be relied upon to create any rights, substantive or procedural, enforceable at law by any party in any matter civil or criminal. Nor are any limitations hereby placed on otherwise lawful litigative prerogatives of the Department of Justice.
USAM 1-1.100,
This Manual is intended as assistance, not authority. The research, analysis, and conclusions herein reflect current thinking on difficult areas of the law; they do not represent the official position of the Department of Justice or any other agency. This Manual has no regulatory effect, confers no rights or remedies, and does not have the force of law or a U.S. Department of Justice directive. See United States v. Caceres,440 U.S. 741 ,99 S.Ct. 1465 ,59 L.Ed.2d 733 (1979).
IP Manual at xvii-xviii.
. For instance, contrary to Aleynikov’s interpretation of
. Other circuits have also interpreted § 2314 to cover documents containing trade secrets.
See United States v. Greenwald,
. In
Carpenter v. Untied States,
. Aleynikov’s depiction of source code as "intangible” is misleading. As the Second Circuit has held in the copyright context, computer source code is in fact embodied or fixed in a “tangible” medium, and therefore capable of copyright protection.
See, e.g., Medforms, Inc. v. Healthcare Mgmt. Solutions, Inc.,
.In 1988, Congress amended § 2314 to include the term "transmits” to reflect its agreement with the Second Circuit and other courts which had held that the NSPA applies to money wire transfers, where the only interstate transportation took place electronically, and where there was no transportation of any physical property.
See
Anti-Drug Abuse Act of 1988, Pub.L. 100-690, § 7057(a), 102 Stat. 4181, 4402 (1988);
see also United States v. Piervinanzi,
. While Aleynikov argues that the term "transmits” in § 2314 should be limited to wire transfers of money, he points to nothing in the text of the statute that requires such a restrictive reading.
. Aleynikov does not dispute that, as long as it was ordinarily the subject of commerce, a hard copy (i.e., printout) of the source code would constitute "goods” within the meaning of § 2314. According to the Indictment, the alleged stolen source code is "in human-readable format,” and thus would still be commercially valuable if in hard copy.
. This case is distinguishable from
United States v. Stafford,
. The Second Circuit’s discussion of
Dowling
in
United States v. Wallach,
. Notably, in 1986, Congress amended the CFAA to substitute the phrase "exceeds authorized access” for the phrase "or having accessed a computer with authorization, uses the opportunity such access provides for purposes to which such authorization does not extend.” See S.Rep. No. 99-432, at 9,
as reprinted in
1986 U.S.C.C.A.N. 2479, 2486. By enacting this amendment, and providing an express definition for "exceeds authorized access,” Congress’s intent was to "eliminate coverage for authorized access that aims at 'purposes to which such authorization does not extend,’ " thereby "removing] from the sweep of the statute one of the murkier grounds of liability, under which a [person's] access to computerized data might be legitimate in some circumstances, but criminal in other (not clearly distinguishable) circumstances that might be held to exceed his au
. The Government attempts to characterize the Second Circuit's decision in
United States v. Morris,