The Competitor Stealing Trade Secrets: How a Former Employee Fed Proprietary Data to a Rival

The Competitor Stealing Trade Secrets: How a Former Employee Fed Proprietary Data to a Rival

The outcome: A UK-based speciality chemicals manufacturer discovered that a former senior chemist had been systematically copying proprietary formulations and customer pricing data before joining a direct competitor. UKPI’s investigation traced the data theft, identified the methods used to extract the information, and provided evidence that secured a High Court injunction and £1.3 million in damages.

The Situation

The client, a family-owned chemicals manufacturer based in the West Midlands, produced specialised coatings and adhesives for the automotive and aerospace supply chains. The company had invested heavily over two decades in developing proprietary formulations that gave it a competitive edge in a market where product performance differences are measured in fractions of a degree or microns of thickness. Its client list included several tier-one automotive suppliers and two aerospace primes.

Six months after a senior chemist resigned to “pursue a different career direction,” the client began losing contracts. Three established customers switched to a competitor within the same quarter, each citing lower prices and “equivalent product performance.” The competitor, a smaller firm based in the East Midlands that had previously operated in a different market segment, had suddenly begun offering products that matched the client’s formulations with suspicious accuracy.

The managing director suspected that the former chemist, Dr James Ashworth, had taken proprietary information with him when he left. However, suspicion is not evidence, and the client needed a clear picture of what had been taken, how it had been transferred, and whether the competitor was knowingly using stolen trade secrets before pursuing legal action.

The Challenge

Trade secret theft is one of the most damaging forms of intellectual property crime, but it is also one of the hardest to prove. Unlike physical property, data can be copied without removing the original. A departing employee who copies files to a USB drive or emails documents to a personal account leaves the company’s systems apparently intact. The theft only becomes visible when its effects appear in the market.

The client faced several difficulties. Dr Ashworth had left voluntarily and served his notice period. He had returned his laptop and security pass. His exit interview had been cordial, and he had signed a standard leaver’s declaration confirming he had not retained any company property or confidential information. On the surface, everything looked clean.

The client also needed to establish not just that Dr Ashworth had taken the information, but that the competitor was using it. Under English law, a former employer can obtain an injunction and damages by demonstrating that trade secrets were misappropriated and that a third party is using them knowingly. Both elements require evidence.

The Approach

UKPI was engaged to conduct a full investigation covering digital forensics, corporate intelligence on the competitor, and open-source research on Dr Ashworth’s post-departure activities.

Digital forensics on company systems. The first priority was to examine the digital trail that Dr Ashworth had left on the company’s systems during his final weeks of employment. UKPI’s digital forensics team worked with the client’s IT department to analyse server logs, email archives, and endpoint monitoring data from Dr Ashworth’s workstation.

The analysis revealed a clear pattern of data exfiltration in the three weeks before his resignation. Dr Ashworth had accessed 47 formulation files, many of which were outside his normal working scope. He had downloaded the company’s complete customer pricing matrix, a confidential document updated quarterly and distributed only to the sales director and the managing director. He had also accessed historical tender documents for the three customers who later left.

The method of extraction was simple. Dr Ashworth had emailed 23 files to his personal Gmail account, spread across 11 separate emails sent over a 16-day period. Each email contained between one and four attachments, small enough not to trigger the company’s email gateway alerts, which were configured to flag attachments over 25MB. Individual formulation files were typically between 2MB and 8MB.

A further 31 files had been copied to a USB storage device. The company’s endpoint security software logged the connection of a USB device to Dr Ashworth’s workstation on three separate occasions during his final week, with a total of 340MB of data transferred. The device serial number matched a consumer-grade USB stick, not any device issued by the company.

Competitor analysis. UKPI conducted detailed corporate intelligence on the competitor company. Companies House filings showed that Dr Ashworth had been appointed as technical director of the competitor just four days after his official leaving date, contradicting his claim of “pursuing a different career direction.” His LinkedIn profile, updated two months later, confirmed the appointment.

The competitor had filed two patent applications in the months following Dr Ashworth’s arrival. UKPI engaged a technical consultant to review these applications against the client’s proprietary formulations. Both patent applications described processes and compositions that were functionally identical to two of the client’s formulations, with only minor modifications to ingredient ratios that would not affect performance.

The competitor had also begun marketing products to the automotive coatings sector for the first time. Its website now listed capabilities mirroring the client’s product range. Marketing materials obtained through mystery shopping described product performance in language that appeared to have been lifted from the client’s internal technical documentation.

Customer approach evidence. Through discreet enquiries with the three departed customers, UKPI established that the competitor had approached each of them within weeks of Dr Ashworth joining. In each case, the competitor had offered products specified to exactly match the client’s existing supply, at prices 12% to 15% below the client’s contracted rates. The pricing undercut was only possible because the competitor knew the client’s exact pricing, information that was contained in the customer pricing matrix that Dr Ashworth had downloaded.

The Outcome

UKPI’s evidence pack was delivered to the client’s solicitors, who applied for an urgent interim injunction in the High Court. The injunction prevented the competitor from using, marketing, or selling products derived from the client’s proprietary formulations and ordered the delivery up of all confidential material in Dr Ashworth’s possession or control.

The court also granted a search order (formerly known as an Anton Piller order) allowing the client’s solicitors to enter the competitor’s premises and seize documents and devices containing the stolen information. The search recovered copies of the client’s formulation files on Dr Ashworth’s work computer at the competitor’s offices, on his personal laptop at his home address, and on the USB device identified through the forensic analysis.

The case was settled before trial. The competitor agreed to pay £1.3 million in damages, covering lost profits from the three departed customers and the cost of the investigation and legal proceedings. Dr Ashworth personally agreed to an undertaking not to use or disclose any of the client’s confidential information and resigned from the competitor company. The two patent applications were withdrawn.

The three departed customers were approached by the client and, presented with the facts of the case, two of the three returned within six months.

The Lessons

This case demonstrates why businesses must take trade secret protection seriously, both in prevention and in response to suspected theft:

Exit procedures must include digital scrutiny. Dr Ashworth returned his laptop and signed a leaver’s declaration, but nobody checked what he had accessed or downloaded in his final weeks. A departing employee’s digital activity in the weeks before resignation should be reviewed as standard practice, particularly for anyone with access to proprietary information.

Email gateway controls need appropriate thresholds. The company’s 25MB attachment limit was designed to manage network capacity, not prevent data theft. Modern formulation files, pricing documents, and technical specifications are typically well under this threshold. Monitoring should focus on the sensitivity of the content, not just its size.

USB device controls are basic but effective. Endpoint security that logs USB connections provided the evidence needed to demonstrate data exfiltration. Companies that disable USB ports entirely, or restrict them to approved devices only, remove this attack vector altogether.

Speed of response determines the outcome. The client contacted UKPI within weeks of noticing the customer losses. Had they waited longer, the competitor would have had more time to establish its market position, file additional patents, and dissipate assets. Early investigation preserved the evidence and enabled swift legal action.

Restrictive covenants are only as good as their enforcement. Dr Ashworth’s employment contract contained non-compete and confidentiality clauses. Without the evidence gathered by UKPI, those clauses would have been difficult to enforce because the client would have had no proof of what was taken or how it was being used. Contractual protections must be backed by the willingness and ability to investigate and litigate.

If you suspect a former employee has taken confidential information, or if a competitor is suddenly offering products or services that mirror your proprietary work, contact UKPI on 0800 043 1754. Our corporate investigation team can trace what was taken, how it was transferred, and build the evidence your solicitors need to act.