Google (US)
Threat actors publicly named in connection with targeting Google. Sorted by IDF score (rarity-weighted CVE attribution) with extraction confidence as tiebreaker. Each row's evidence is a verbatim quote from the source attribution.
4 attributed actor(s) ·
Category mix: insider=2, state=1, competitor=1 ·
Attacker regions: —=2, US=2
| Actor | Category | Sponsor | Confidence | Evidence | CVEs | IDF | Last active |
|---|---|---|---|---|---|---|---|
| Elderwood (G0066) | state | 🇨🇳 CN | 0.90 | responsible for the 2009 Google intrusion known as Operation Aurora. | 1 | 4.2 | 2026 |
| Linwei 'Leon' Ding (Google AI / TPU architecture) (INS-DING-GOOGLE-2024) | insider | 🇺🇸 US | 1.00 | Former Google software engineer convicted | 0 | 0.0 | — |
| Anthony Levandowski (INS-LEVANDOWSKI-2017) | insider | 🇺🇸 US | 0.88 | engineer at Google's Waymo | 0 | 0.0 | — |
| Industrial espionage (competitor) | competitor | — | — | Aggregated trade-secret / talent-poaching cases — see the industrial-espionage record. | — | — | — |
Sibling victims
Other named victims whose attacker circle overlaps with this one — defenders use this to find sectoral or geographic cohorts that face the same actors.
- Waymo — 2 shared actor(s)
- Thales — 1 shared actor(s)
- Microsoft — 1 shared actor(s)
- Anthem — 1 shared actor(s)
- Twitter — 1 shared actor(s)
- Uber — 1 shared actor(s)
- Apple — 1 shared actor(s)
- Tesla — 1 shared actor(s)
- General Motors — 1 shared actor(s)
- LG Display — 1 shared actor(s)
« All victims · All actors · Browse by sector · Recent breach notifications