Trade-Secret Theft: A Response Plan That Works

It usually lands as a sick feeling in the stomach. A contractor who finished last week turns up pitching your exact service, with your pricing. A departing employee’s laptop shows a bulk download of the client database the night before they quit. A manufacturer you shopped your prototype to is suddenly selling something suspiciously familiar. Whatever the trigger, the thought is the same: they took something that was mine.

What happens next is largely in your hands — and the biggest mistakes get made in the first day, out of panic. The goal of this guide is to replace that panic with a plan. You don’t need to know trade-secret law cold. You need to do a few right things quickly, avoid a few wrong ones, and get the right help before the trail goes cold.

An open gold vault door on a navy background with a glowing wisp drifting out, symbolizing confidential information leaving a business — The moment you realize a secret has walked out the door, the clock starts — what you do next matters more than how it happened.

First, breathe — then move fast (and quietly)

Two things are true at once: you should act quickly, and you should not fire off an angry message to the person you suspect. Tipping someone off before you’ve preserved evidence is how data gets wiped, stories get coordinated, and your strongest proof disappears. Treat the first stretch as a quiet containment exercise, not a confrontation.

Track the cases yourself

Every current AI-copyright ruling — and the ones still being fought — lives in our AI Copyright Ruling Tracker. Filter by your creator type to see, in plain language, how each case affects your rights.

Resist the urge to log into the person’s old accounts and go hunting, or to delete and “clean up” anything yourself. Clumsy self-investigation can corrupt the very records you’ll later need, and poking around someone else’s systems can create legal problems of your own. Your job right now is to freeze the picture, not to solve the case single-handedly.

The first 48 hours: preserve, then contain

Two priorities, in this order: capture what happened, then stop the bleeding.

Preserve the evidence.

Pull and save access logs, download and email records, building badge swipes, and version histories — anything that shows who touched what and when. Export copies and store them somewhere the suspect cannot reach.
Do not reissue, wipe, or reimage the person’s old laptop or phone. Set it aside, powered down, untouched. A forensic specialist may need the original.
Write a dated timeline of what you noticed and when, and keep every relevant email, text, and screenshot. Contemporaneous notes carry real weight later.

Contain the damage.

Revoke the person’s logins, VPN, cloud, and shared-drive access, and rotate shared passwords and API keys.
Check for lingering access — forwarding rules on email, personal devices still synced, third-party tools still connected.
If a specific customer or partner is about to receive the stolen material, flag it internally so you can respond fast.

A gold timeline arc with a highlighted opening segment and small icons for a camera, a closing padlock, and a sealed folder on navy, symbolizing the critical first hours of response — The first hours are about preservation and containment, not confrontation — capture, lock down, and document before anything else.

Loop in a lawyer early, ideally before you confront anyone. Early counsel helps you preserve evidence correctly, decide whether a forensic examiner is warranted, and keep sensitive analysis protected. Moving fast and moving carefully are not in tension here — the careful version is the fast version that actually holds up.

Prove two things: it was a secret, and it was taken

Before you can enforce anything, your situation has to clear two hurdles. Under both the federal Defend Trade Secrets Act and the state Uniform Trade Secrets Act that most states have adopted, you generally have to show that what was taken qualifies as a trade secret, and that it was misappropriated — acquired, disclosed, or used by improper means.

A gold magnifying glass over three glowing data traces on navy, symbolizing examining evidence that a secret was taken and used — A trade-secret claim rises or falls on two things: that it really was a protected secret, and that someone took or used it improperly.

Is it actually a trade secret? The law protects information that gets real value from not being public and that you took reasonable steps to keep secret. That second part trips people up. A “confidential” file that sat on an open shared drive with no NDA and no access limits is a much weaker case than one locked behind passwords, marked confidential, and covered by signed agreements. This is exactly why the groundwork in our trade-secrets primer and a solid NDA matters so much: those measures are also the evidence that it was a secret worth protecting.

Was it misappropriated? Misappropriation generally means obtaining the secret through improper means — theft, breach of a duty to keep it confidential, or a sneaky workaround — or using and disclosing it knowing it came from such a source. Honest independent discovery and lawful reverse engineering are not misappropriation. So the question isn’t just “does my competitor know this?” It’s “did they get it the wrong way?”

Your legal options, from a letter to a courtroom

You have a ladder of responses, and you match the rung to how much damage is unfolding and how quickly.

Three gold doors increasing in size on navy, symbolizing escalating response options from a letter to litigation — Your options run from a firm letter to an emergency court order — matched to how much damage is unfolding and how fast.

Cease-and-desist letter. Often the first formal step: it demands the person stop using and return or destroy the material, and it puts them on notice (which can strengthen a later case). It’s lower-cost and sometimes enough on its own. For how these are worded, see our cease-and-desist guide.
Injunction. A court order to stop the use or disclosure. When harm is immediate — the secret is about to go public or into a product launch — your lawyer can seek an emergency temporary restraining order or preliminary injunction to hit pause while the case plays out. For trade secrets, stopping the bleed often matters more than money.
Damages. If you sue and win, recovery can include your actual losses plus the defendant’s unjust gains, or — where those are hard to pin down — a reasonable royalty. In cases of willful and malicious theft, courts may add exemplary (punitive) damages and, in some situations, attorney’s fees.
Civil seizure (rare). The DTSA lets a court, in truly extraordinary circumstances, order law enforcement to seize the stolen material before the other side even knows — a powerful but tightly limited tool reserved for cases where nothing else will prevent the secret from vanishing.

One deadline to respect: trade-secret claims generally must be filed within three years of when the misappropriation was discovered or should have been. That’s one more reason not to sit on a strong suspicion for months.

When it crosses into criminal territory

Most trade-secret disputes are civil — you (not the government) bring the case. But serious theft, especially large-scale theft or anything involving a foreign beneficiary, can also be a federal crime under the Economic Espionage Act. If you’re facing deliberate, large-scale theft, your attorney can advise whether to report it to the FBI alongside your civil claim. For most small businesses and creators, the civil route — letter, injunction, damages — is the practical center of gravity.

What this means for you — and your next steps

If you think someone has walked off with your secrets, work the plan in order:

Don’t confront yet. Stay quiet until you’ve preserved evidence. A premature accusation can destroy your best proof.
Preserve first, contain second. Save logs and records, set aside the original devices untouched, then cut off access and rotate credentials.
Document relentlessly. A dated timeline plus saved communications is the backbone of any claim.
Gather your secrecy proof. Pull the NDAs, confidentiality markings, and access controls that show you treated it as a secret.
Call a lawyer early. Ideally before confronting anyone, so your next moves are both fast and sound. Mind the three-year clock.

This article is general information, not legal advice. Trade-secret law varies by state, the facts of every incident are different, and the fast-moving first days often need professional judgment — a forensic examiner to handle devices correctly, an attorney licensed in your state to steer the legal response. The single most useful habit is one you build before anything goes wrong: lock your secrets down with access controls and signed agreements, because the same measures that keep them safe are the proof that they were worth protecting if someone ever walks off with them.

IPSurge helps creators and small businesses understand and protect their intellectual property — the ideas, names, and work that make them unique.

Sources & further reading:

When Someone Walks Off With Your Secrets: A Trade-Secret Response Plan