CORPORATE ESPIONAGE AND NATIONAL SECURITY: LESSONS FROM THE NVIDIA EPISODE

12 Nov 2026

Tags: Public Service Ethics   Ethics in IR & Business   Corporate governance

Source: The Indian Express

Context

• The alleged cultivation of NVIDIA's Chief Executive Officer through a personal relationship by an individual assessed as a Chinese intelligence asset has highlighted the growing intersection of corporate activities, industrial espionage and national security.
• The episode demonstrates how foreign intelligence operations increasingly target private companies through ordinary commercial and personal networks rather than directly approaching government institutions.
• It raises concerns about the preparedness of Indian companies as they expand into strategically important sectors such as semiconductors, Artificial Intelligence (AI), aerospace and advanced manufacturing.

Corporate Espionage: Meaning and Nature

• Meaning: Corporate espionage refers to the unauthorised acquisition of confidential business information, trade secrets, technologies or strategic knowledge to obtain commercial or geopolitical advantages.
• Industrial espionage: Involves obtaining proprietary industrial technologies, manufacturing processes, designs and research information through covert or unauthorised means.
• Human intelligence (HUMINT): Collection of intelligence through human sources, relationships and interactions rather than exclusively through technical surveillance.
• Social engineering: Manipulating individuals through trust, personal relationships or deception to obtain confidential information or access.

How Foreign Intelligence Targets Private Companies

• Personal relationships: Cultivating executives, engineers and researchers to gain access to sensitive knowledge and professional networks.
• Academic and professional networks: Using conferences, research collaborations and recruitment channels to approach individuals possessing strategic expertise.
• Commercial partnerships: Exploiting customer relationships, overseas collaborations and business engagements to observe or access sensitive information.
• Recruitment and former employees: Approaching employees or former personnel who possess proprietary knowledge of technologies and manufacturing processes.

Illustrative Cases of Corporate Espionage

• NVIDIA episode: Alleged cultivation of the company's CEO through a personal relationship by an individual assessed as a Chinese intelligence asset highlights the vulnerability of corporate leadership networks.
• Yanjun Xu – GE Aviation: Used academic and professional channels to approach GE Aviation employees to obtain sensitive aviation technology-related information.
• Walter Liew – DuPont: Used former DuPont employees to obtain titanium dioxide technology, illustrating the exploitation of employee networks and proprietary industrial knowledge.

Why Indian Companies are Increasingly Vulnerable

• Strategic industrial expansion: India is developing capabilities in semiconductors, AI, aerospace components, telecommunications and advanced manufacturing, making its technological knowledge strategically valuable.
• Geopolitical competition: Advanced technologies, design capabilities and specialised industrial expertise are increasingly treated as instruments of national power.
• Global integration: Overseas partnerships, international travel, recruitment and commercial collaborations create opportunities for foreign intelligence actors to cultivate individuals.
• Limited institutional preparedness: Many Indian corporate boards lack established mechanisms to identify executives, engineers and researchers who may become targets of intelligence operations.
• Fragmented risk management: Security, legal, human resources and business development departments often operate without adequate coordination or shared visibility.
• Limited institutional buffers: Indian firms entering global value chains may lack the mature security and risk-management systems of larger multinational corporations.

Limitations of Conventional Corporate Security

• Traditional approach: Companies generally understand geopolitical risks through external factors such as tariffs, export controls, supply-chain concentration and regulatory changes.
• Beyond cybersecurity: Technical cybersecurity alone cannot prevent intelligence gathering through personal relationships, professional interactions and human networks.
• Expanded security perimeter: Corporate security must extend beyond digital systems and physical premises to include employees, relationships, partnerships and access to strategic knowledge.
• Knowledge as a strategic asset: Proprietary designs, process knowledge, research data and tacit expertise of key individuals can have implications for national security.

Measures to Strengthen Corporate Security

• Board-level risk assessment: Treat the targeting of employees and sensitive knowledge as a regular and material corporate risk.
• Identify vulnerable personnel: Assess which executives, engineers and researchers possess strategically sensitive knowledge and may become targets.
• Integrated risk management: Improve coordination among security, legal, human resources and business development departments.
• Monitor external engagements: Develop appropriate safeguards for overseas partnerships, customer relationships, recruitment activities and professional collaborations.
• Employee awareness: Train employees to recognise suspicious approaches, manipulation and attempts to obtain confidential information.
• Accountability mechanisms: Establish regular security reviews, internal reporting channels and clear responsibility for protecting sensitive knowledge.

Role of the Government

• Sector-specific threat assessments: Provide companies with actionable assessments of intelligence and espionage risks relevant to their respective industries.
• Reporting mechanisms: Establish channels through which companies can report suspicious approaches without unnecessarily restricting legitimate commercial activities.
• Public-private coordination: Strengthen information-sharing between government security agencies and strategically important industries.
• Capacity building: Encourage corporate preparedness in emerging strategic sectors through security guidelines, awareness programmes and institutional support.

Conclusion:  India's growing technological and manufacturing capabilities are increasingly valuable strategic assets. Protecting them requires moving beyond conventional cybersecurity towards integrated corporate security that safeguards people, relationships and proprietary knowledge. Corporate boards and the government must work together to ensure that India's technological advancement is matched by adequate institutional safeguards.