GE Aviation IP Theft: Engineer Emails 8,000 Files to Personal Account Before Joining Competitor
A GE Aviation engineer in China sent 8,000 confidential files containing trade secrets about composite aircraft fan blades to a personal email account, with the alleged goal of benefiting a Chinese state-owned enterprise.
Background
GE Aviation manufactures jet engines and holds extensive IP related to composite fan blade manufacturing — a key technology in fuel-efficient aircraft engines. Zheng Xiaoqing was a lead engineer at GE Aviation in New York who had worked there for 14 years.
The Attack
Zheng systematically transferred GE Aviation trade secrets to his personal email account over multiple years. To disguise the exfiltration, he concealed files inside the digital metadata of image files (steganography) and hid code in a personal blog. The files included detailed technical data about composite manufacturing for high-pressure turbine seals and fan blades. FBI investigation connected the transfers to a Chinese state-owned turbine manufacturer.
Response
The FBI arrested Zheng in 2019 at a US airport as he attempted to return to China. He pleaded guilty to economic espionage and theft of trade secrets. He was sentenced to two years in prison in 2022. GE Aviation implemented additional email monitoring controls.
Outcome
The case was part of the US Department of Justice's "China Initiative" targeting economic espionage. The steganography technique — hiding data inside images — is a sophisticated evasion method that basic DLP tools would miss. The 14-year tenure demonstrated that insider threats can develop over long periods.
Key Takeaways
- Email-based exfiltration to personal accounts is detectable with DLP tools — monitor for large attachment sends to personal addresses
- Steganography in image files can be used to evade content-aware DLP — add entropy analysis to outbound file monitoring
- Employees working with strategic IP need enhanced monitoring and periodic security reviews regardless of tenure
- Economic espionage charges (not just trade secret theft) carry severe penalties — communicate this clearly in security training