[ig1]

Agreed. While Sergey was probably just being stupid and GS over-reacted, the guy did copy lots of confidential propriety data and source code from GS servers to an off-shore server and then tried to cover his tracks by deleting bash history, audit logs, etc.

It was the later that actually triggered an alarm. In much the same way you'd be suspicious if you came into work late on a sunday night and found someone in accounts shredding audit trail documents, Goldman had to do something.

If the stolen data was used to make illegal trades and Goldman hadn't done anything about the breach than GS could find themselves subject to criminal proceedings for being an accomplice.