How Double Salaries Lured Korean Chip Workers to Steal Tech for China
Three former semiconductor workers were indicted for selling Korea's probe-card inspection technology to China after being recruited with double salaries. The case exposes how insider talent poaching, not foreign espionage, is driving Korea's fastest-growing tech leak threat.
A Higher Offer, Not a Higher Clearance
Three former workers at a South Korean semiconductor inspection-equipment company are facing indictment for transferring core probe-card technology to China — not through foreign intelligence networks, but through a job offer that simply paid twice as much.
The case, announced October 14 by the Intellectual Property Protection Agency’s Technical Leak Special Judicial Police and the Daejeon District Prosecutors’ Office, marks a turning point in how Seoul understands the threat to its most valuable industrial secrets. It is also the first time those agencies have jointly arrested and prosecuted a tech-leak suspect.
The indictment centers on A, 45, who was arrested, and B and C, both 40, who were charged while free pending trial. A former executive at the victim company, identified as D, 58, allegedly approached A in November 2023 with a simple proposition: double his salary to move to China and bring the company’s proprietary technology with him. A then recruited B and C. Together, they conspired with an overseas distributor linked to the victim company to establish a manufacturing base abroad and produce products using stolen design drawings and technical materials. By December 2025, prototypes built with the leaked technology were already being supplied to foreign buyers.
D remains at large in China. Korean authorities have requested an INTERPOL red notice.
Why This Technology Matters
The stolen technology is not a generic semiconductor process. It is probe-card inspection technology — the method by which Korean companies recently broke a decades-long US-Japan monopoly.
A probe card is a precision testing device pressed against a silicon wafer before it is diced into individual chips. Tiny needles deliver electrical signals to verify that each die functions correctly. The technology is critical for high-bandwidth memory, or HBM, which powers AI chips from Nvidia and AMD. For years, only American and Japanese firms could produce reliable HBM probe cards. Korea’s victim company achieved domestic production capability and began supplying major semiconductor manufacturers globally — including, apparently, the same overseas distributors who later facilitated the leak.
That overlap is significant. The overseas distributor that colluded with A was already handling the victim company’s international sales. The line between legitimate business cooperation and coordinated theft appears to have been crossed through a relationship the company itself had built.
If the stolen technology reaches the open market, the victim company estimates an annual revenue loss of 40 billion won — roughly $28 million. But the real cost may be measured in competitive position. China’s push to localize HBM supply chains is well documented. Every piece of Korean probe-card IP that reaches Chinese hands shortens the time required to replicate a technology that Seoul spent years and substantial R&D investment to master.
The Human Factor the CHIPS Act Never Addressed
The CHIPS Act and similar Western export-control frameworks were designed to prevent technology from crossing borders through sanctions evasion, shadow fleets, or state-sponsored cyber intrusion. They were not primarily designed to stop a mid-level engineer from accepting a better paycheck in another country.
This case illustrates the gap.
Data from South Korean police show that tech-leak referrals to prosecutors climbed from nine in 2021 to 33 in 2025 — a more than threefold increase in four years. Of those cases, 66 involving 18 semiconductor incidents were directed toward China, accounting for 64 percent of all referrals over the five-year span. Display technology led with 28 cases. The National Intelligence Service estimates total damages from advanced-technology leakage crimes between 2020 and 2024 at 23 trillion won — approximately $16 billion.
The pattern is consistent: the threat is not always a foreign spymaster knocking on a door. Sometimes it is a recruiter sliding an employment offer across a desk.
What makes this particular case notable is the role of the victim company’s own former executive. D did not approach A as a stranger. He leveraged an existing internal relationship and institutional knowledge of who held access to the critical technology. That the leak chain passed through three people — D recruiting A, A recruiting B and C — suggests the company’s information-security perimeter was structured around roles rather than need-to-know compartmentalization. Anyone in the relevant orbit could be reached, and once reached, could reach others.
How the Investigation Unraveled
The probe began in July 2025, triggered by intelligence from the National Intelligence Service. The suspects were overseas, which complicated direct surveillance. What tipped off investigators was an indirect trail: the overseas manufacturing company the suspects had helped establish continued to source design components from domestic Korean suppliers. That dependency created a physical link back to South Korea.
In July 2026, authorities searched a Korean design firm and seized design drawings and technical materials. Many had the victim company’s name and origin markers erased or altered to appear as if they belonged to the overseas manufacturer. Investigators assigned to the case included officers with semiconductor R&D experience, which proved essential for tracing the modified documents back to their source.
The suspects were ultimately caught not through a sophisticated cyber forensics operation but because they came home for the Lunar New Year holiday in February 2026. They visited family and walked into arrest warrants.
What Comes Next
The indictment itself is a signal that Korean authorities are treating tech leakage as a prosecutable priority, not merely an administrative violation. The joint operation between the technical police and the Daejeon prosecutors’ office suggests a new institutional model for handling these cases — one that combines technical expertise with criminal prosecution rather than relying on customs or trade-compliance frameworks alone.
But the case also raises uncomfortable questions for Korean semiconductor companies. The victim company’s own overseas distributor appears to have facilitated the leak. Internal recruitment through trusted executives bypassed whatever access controls existed. The company had achieved domestic independence in a technology that the world still relies on — and the people who knew how to exploit that vulnerability were already inside the ecosystem.
Export controls and border surveillance will always be the visible layer of tech-protection strategy. This case proves they are not sufficient. The more durable defense requires rethinking how critical IP is distributed within organizations, how former employees are tracked after they leave, and how international business partnerships are vetted for loyalty conflicts.
Korea’s probe-card breakthrough was hard-won. Losing it to a double-salary offer is a reminder that the weakest link in any semiconductor supply chain is still the person who knows where the valuable parts are kept.