Trade Secret Theft Client Poaching Demand Letters

Published: December 4, 2025 • Employment Demand Letters
Trade Secret Theft and Client Poaching Demand Letters
🔒 Trade Secret Theft & Client Poaching Demand Letters
Protect your business from former employees and contractors who misappropriate confidential information or solicit clients
Federal Trade Secret Protection: Defend Trade Secrets Act (DTSA)

The DTSA (18 U.S.C. § 1836) provides a private federal cause of action for trade secret misappropriation. Key requirements:

  • Trade secret must be related to a product or service used in interstate or foreign commerce
  • Allows for ex parte seizure orders in extraordinary circumstances (rare but powerful)
  • Remedies include injunctive relief, damages (actual loss or unjust enrichment), and exemplary damages up to 2× for willful/malicious misappropriation
  • Attorneys’ fees available for willful/malicious conduct or bad faith assertions
California Uniform Trade Secrets Act (CUTSA)

California Civil Code § 3426 et seq. defines and protects trade secrets under state law:

Element Requirement
Definition of trade secret Information (technical or business) that: (1) derives independent economic value from not being generally known, and (2) is subject to reasonable efforts to maintain secrecy
Misappropriation Acquisition by improper means OR disclosure/use in breach of a duty to maintain secrecy
Reasonable protective measures NDAs, password protection, access controls, “need-to-know” policies, confidentiality markings, exit procedures
Remedies Injunction, damages (actual loss or unjust enrichment), exemplary damages (up to 2×), attorneys’ fees for willful/malicious conduct
💡 What Qualifies as a Trade Secret? Customer lists, pricing structures, margin data, supplier relationships, product roadmaps, source code, manufacturing processes, marketing strategies, and proprietary datasets—if they derive value from secrecy and you took reasonable steps to protect them.
Duty of Loyalty While Employed

Even in California (which strongly protects employee mobility post-employment), employees owe a duty of loyalty while still employed:

  • Cannot actively divert clients or opportunities to a competing business they’re planning to start
  • Cannot use employer’s resources (time, equipment, contacts) to build a competing venture
  • Cannot download or copy confidential information in anticipation of departure
  • Cannot recruit colleagues to leave while still employed (California allows post-departure recruitment, but not while on the payroll)

Violation of the duty of loyalty can support claims for breach of fiduciary duty, even without a written contract.

Client Poaching in California

California’s strong anti-noncompete policy (Bus. & Prof. Code § 16600) means customer non-solicitation agreements are generally unenforceable for regular employees. However, client poaching is still actionable when it involves:

Scenario Actionable? Legal Basis
Using trade secret customer lists or confidential business info ✅ Yes CUTSA/DTSA misappropriation
Soliciting clients while still employed ✅ Yes Breach of duty of loyalty
Using employer’s confidential pricing/margin data to undercut ✅ Yes Trade secret misappropriation
Downloading CRM data, proposal templates, client files before leaving ✅ Yes Trade secret theft, breach of contract
Competing for clients after departure using general knowledge ❌ No (generally) Protected by § 16600—employees can compete
Non-solicit in sale-of-business context (owner selling equity) ✅ Yes (narrow exception) Bus. & Prof. Code §§ 16601, 16602
⚠️ California-Specific Caution: You cannot enforce a customer non-solicitation agreement against a regular employee under § 16600, even if they signed it. Your demand letter must focus on trade secret misappropriation and duty of loyalty violations, not simply “you can’t compete for our clients.”
Common Fact Patterns
  • The exodus: Employee downloads entire CRM database, emails it to personal account, resigns, and starts competing business with former clients within weeks
  • The slow build: Employee spends final 3–6 months using work time to build competing business, recruit colleagues, and line up clients to transition immediately upon departure
  • The poacher: Former employee contacts clients using confidential contact info, pricing, and project details they copied before leaving
  • The team defection: Multiple employees coordinate departure, taking client lists, templates, source code, and proprietary processes to new competing venture
Step 1: Identify What Was Taken

Document exactly what confidential information or trade secrets the former employee or contractor accessed, copied, or used:

Type of Information Examples How to Prove It Was Taken
Customer/client lists Contact info, purchasing history, preferences, account managers System logs showing CRM exports, emails to personal accounts, USB transfers
Pricing & margins Price lists, discount structures, cost data, profitability by client Downloads of pricing spreadsheets, screenshots, printed materials
Source code & technical data Proprietary code, algorithms, databases, technical specs Git logs, GitHub commits to personal repos, file downloads
Business strategy Roadmaps, marketing plans, supplier lists, go-to-market strategies Document downloads, emails forwarding decks/presentations
Templates & work product Proposal templates, pitch decks, SOPs, training materials File copies, cloud syncing to personal Dropbox/Google Drive
Step 2: Confirm You Had Protective Measures in Place

To qualify as a “trade secret,” you must show you took reasonable steps to maintain secrecy:

  • NDAs: Did the employee/contractor sign a confidentiality or non-disclosure agreement?
  • Access controls: Password protection, role-based permissions, VPN requirements, two-factor authentication
  • Confidentiality markings: Documents labeled “Confidential,” “Proprietary,” or “Trade Secret”
  • Need-to-know policies: Restricted access to sensitive data on a business-need basis
  • Exit procedures: Return-of-property checklists, exit interviews, certification of data deletion
  • Employee handbook/policies: Written policies prohibiting unauthorized copying or disclosure

If you had no protective measures, courts may find the information wasn’t a protectable trade secret. However, even minimal measures (NDAs + password protection) can suffice if the information derives real value from secrecy.

🔍 Discovery Red Flags: Unusual data access patterns in final weeks (late-night logins, bulk downloads, forwarding emails to personal accounts, printing hundreds of pages, copying files to USB drives, syncing to personal cloud storage).
Step 3: Document How You Know Misappropriation Occurred

Gather forensic evidence showing the former employee/contractor took or used your trade secrets:

Evidence Type What to Collect
System logs IT audit logs showing file downloads, email forwards, cloud uploads, USB connections, printing activity
Email forensics Emails to personal accounts, attachments with confidential files, messages coordinating client transitions
Device imaging Forensic snapshots of company laptops/phones before return (if you can legally access them)
Third-party reports Clients reporting contact from former employee using your confidential info, LinkedIn messages, competitor intelligence
Comparative analysis Side-by-side comparison of your materials vs. competitor’s (e.g., identical proposal language, pricing structures, code snippets)
Witness statements Co-workers who observed suspicious behavior, heard plans to take clients, or saw data being copied
Step 4: Assess Damages and Leverage

Calculate your actual losses and unjust enrichment to determine the stakes:

  • Lost revenue: Clients who defected to the former employee’s new venture, using your confidential information
  • Unjust enrichment: Value the former employee gained by using your trade secrets (e.g., faster time-to-market, lower customer acquisition costs)
  • Development costs avoided: What it would have cost them to develop the information independently (e.g., years of R&D, customer relationship building)
  • Competitive advantage lost: Diminished market position, eroded pricing power, loss of first-mover advantage

Leverage factors:

  • Strength of forensic evidence (smoking-gun emails, clear download logs)
  • Egregious conduct (mass data theft, coordinated team departure, lying during exit interview)
  • Availability of injunctive relief (can you stop ongoing use and prevent further damage?)
  • Former employee’s financial resources and reputational sensitivity
✅ Quick-Strike Advantage: If you act within days or weeks of discovery, you can seek a Temporary Restraining Order (TRO) or preliminary injunction to immediately stop the misuse. Delay weakens your case and signals that the harm isn’t “irreparable.”
Objectives of the Demand Letter

Your cease-and-desist letter should accomplish multiple goals simultaneously:

  1. Immediate cessation: Stop all use and disclosure of specific categories of confidential information
  2. Return and destruction: Require return of all misappropriated materials and certification of deletion from all devices
  3. Disclosure of recipients: Identify everyone to whom the information was disclosed (new employer, clients, partners)
  4. Preservation of evidence: Prohibit deletion of emails, wiping devices, or altering cloud data
  5. Customer de-solicitation: Demand they cease contact with specific clients (when supported by trade secret theory, not just noncompete)
  6. Create settlement leverage: Signal serious intent and exposure to injunctive relief and damages
Tone: High-Threat vs. Cooperative

Choose your tone strategically based on the relationship and desired outcome:

Approach When to Use Language Style
High-threat Egregious theft, ongoing harm, former employee unresponsive or combative “We will seek emergency injunctive relief, exemplary damages, and attorneys’ fees if you do not comply within 48 hours.”
Cooperative Valued former employee, potential for negotiated resolution, relationship preservation desired “We believe this situation can be resolved amicably. We’re prepared to work with you to unwind the use of confidential information without litigation.”
Hybrid Most common—firm on legal rights but open to settlement “While we are prepared to pursue all available legal remedies, we would prefer to resolve this matter promptly and without the cost of litigation.”
Essential Elements of the Demand Letter
  1. Identification of trade secrets: Be specific—”client contact information, pricing data, and proposal templates,” not just “confidential information”
  2. Evidence of misappropriation: Reference specific acts (e.g., “On [date], you downloaded 15,000 customer records to a USB drive”)
  3. Contractual and statutory violations: Cite the NDA, employment agreement, and CUTSA/DTSA
  4. Immediate demands:
    • Cease all use and disclosure
    • Return all materials (physical and electronic)
    • Certify deletion from personal devices and cloud storage
    • Identify all recipients of the information
    • Preserve all evidence (no deletion or destruction)
  5. Deadline: Typically 48 hours to 7 days depending on urgency
  6. Consequences of non-compliance: TRO/preliminary injunction, damages, exemplary damages (2× actual), attorneys’ fees
  7. Settlement opening (optional): “We are willing to discuss a resolution that avoids litigation if you take immediate corrective action.”
Sample Demand Letter Language (Opening)

Dear [Former Employee/Contractor]:

I represent [Company Name] in connection with your misappropriation of trade secrets and confidential business information in violation of your Confidentiality Agreement dated [date], the California Uniform Trade Secrets Act (Civil Code § 3426 et seq.), and the federal Defend Trade Secrets Act (18 U.S.C. § 1836 et seq.).

Our investigation has revealed that, prior to your resignation on [date], you engaged in a systematic effort to misappropriate [Company]’s proprietary information, including:

  • Customer contact information, purchasing history, and account details for over [X] clients;
  • Confidential pricing structures, margin data, and discount schedules;
  • Proprietary proposal templates, marketing materials, and business development strategies; and
  • [Other specific trade secrets].

Specifically, our IT audit logs show that on [dates], you:

  • Downloaded [X] files containing customer data to a USB drive;
  • Forwarded [Y] emails containing confidential pricing information to your personal email account ([email]);
  • Copied [Z] proprietary documents to your personal Dropbox account; and
  • Accessed and exported the entire CRM database on [date], three days before your resignation.

You have since used this misappropriated information to solicit [Company]’s clients and compete directly against us in violation of your legal obligations.

Specific Demands Section

IMMEDIATE DEMANDS:

To avoid immediate legal action, you must comply with the following within 48 hours of receipt of this letter:

  1. Cease and desist from all use, disclosure, or dissemination of [Company]’s trade secrets and confidential information.
  2. Return all confidential materials, documents, files, and data in any form (physical, electronic, cloud-based) to [Company] at [address].
  3. Certify in writing that you have:
    • Deleted all copies of confidential information from your personal devices (computers, phones, tablets, USB drives, external hard drives);
    • Deleted all copies from personal cloud storage accounts (Dropbox, Google Drive, iCloud, etc.);
    • Deleted all emails containing confidential information from personal email accounts; and
    • Not disclosed any confidential information to third parties.
  4. Identify all individuals and entities to whom you disclosed [Company]’s confidential information, including your new employer, clients, business partners, and investors.
  5. Preserve all evidence related to your access, use, and disclosure of [Company]’s information. Do not delete, alter, or destroy any documents, emails, text messages, or electronic files.
  6. Cease all contact with the following [Company] clients: [list specific clients if appropriate and legally supportable].
Consequences and Closing

LEGAL CONSEQUENCES:

If you fail to comply fully with these demands, [Company] will immediately seek:

  • A Temporary Restraining Order and preliminary injunction prohibiting your use of trade secrets;
  • Monetary damages for actual losses and unjust enrichment;
  • Exemplary damages of up to twice the amount of actual damages under CUTSA and DTSA;
  • Attorneys’ fees and costs for willful and malicious misappropriation; and
  • All other relief available under state and federal law.

We expect your full written response and compliance by [specific date and time]. Direct all communications to me at [attorney contact info].

[Optional settlement language:] While we are prepared to pursue all available remedies, we are willing to discuss a resolution that avoids protracted litigation if you take immediate corrective action and demonstrate good faith.

Sincerely,

[Attorney Name]
Counsel for [Company Name]

⚠️ California § 16600 Compliance: Do NOT demand that the former employee “stop competing” or “not work for competitors.” Focus exclusively on trade secret misuse and return of confidential materials. Demanding they cease competition can violate California law and undermine your case.
Digital Forensic Evidence

The strongest trade secret cases are built on clear digital evidence of theft:

Evidence Type How to Obtain What It Proves
IT audit logs System administrator pulls logs showing file access, downloads, emails, cloud syncs, USB connections Former employee accessed and copied specific files on specific dates
Email server data Review emails sent to personal accounts, especially with attachments or large file transfers Forwarding of confidential documents to non-company email
Cloud storage logs Check Dropbox, Google Drive, OneDrive admin consoles for sharing/syncing activity Syncing company folders to personal cloud accounts
Device imaging Forensic image of company laptop/phone before return (requires legal right to access) Deleted files, browser history, application usage showing intent
Print logs Network printer logs showing unusual printing activity (hundreds of pages in final week) Physical removal of confidential documents
🔐 Preservation Notice: As soon as you suspect misappropriation, send a preservation letter instructing IT to preserve all logs, emails, and system data related to the former employee. Courts can impose sanctions for spoliation if you fail to preserve evidence once litigation is reasonably anticipated.
Witness Evidence

Interview current employees who may have knowledge of the former employee’s activities:

  • Co-workers who observed suspicious behavior: Staying late, working on personal devices, downloading files, taking photos of screens
  • Managers who had exit conversations: What did the employee say about their plans? Did they lie about where they were going?
  • IT staff: Unusual help desk tickets (password resets, access requests, complaints about locked-out USB drives)
  • Clients who were contacted: Did they receive calls/emails from the former employee using your confidential information?
Comparative Analysis: “Smoking Gun” Similarities

Compare your materials to the former employee’s new work product to show copying:

What to Compare Red Flags
Proposal templates Identical formatting, section headings, boilerplate language, even your company’s typos
Source code Identical variable names, comments, code structure, proprietary algorithms
Marketing materials Same color schemes, imagery, taglines, positioning language
Pricing structures Identical tier names, suspiciously similar price points, same discount schedules
Client lists Contacting exact same clients in same order as your CRM database

Create side-by-side exhibits showing the similarities. The more identical the materials, the stronger the inference of copying.

Timeline Evidence: The “Plan to Steal”

Build a chronological timeline showing premeditation:

  1. 3–6 months before departure: Incorporation of new competing business, domain registration, trademark filings
  2. Final weeks: Spike in data access and downloads, meetings with clients positioned as “farewell” but actually transition discussions
  3. Final days: Mass email forwarding, CRM exports, printing of confidential documents
  4. Resignation: Short or no notice, vague about future plans or outright lies about new role
  5. Post-departure: Immediate launch of competing business, client announcements, identical service offerings

This timeline shows the theft was intentional, planned, and willful—supporting claims for exemplary damages and attorneys’ fees.

✅ Third-Party Discovery: In litigation, you can subpoena the former employee’s new employer, cloud storage providers, and email hosts to obtain additional evidence of misappropriation. The threat of this discovery often prompts settlement.
Emergency Injunctive Relief: TRO and Preliminary Injunction

If ongoing misappropriation is causing irreparable harm, seek immediate court intervention:

Remedy Timing Standard
Temporary Restraining Order (TRO) Issued within days, sometimes same day (ex parte) Immediate and irreparable injury; likelihood of success on the merits
Preliminary Injunction Hearing within 2–3 weeks; can last duration of case Likelihood of success + balance of hardships + public interest
Permanent Injunction After trial or summary judgment Actual success on the merits; ongoing need for relief

What the court can order:

  • Immediate cessation of use of trade secrets
  • Return and destruction of all misappropriated materials
  • Prohibition on soliciting specific clients (if trade-secret-based, not just noncompete)
  • Forensic imaging of devices to verify deletion
  • In extreme cases under DTSA: ex parte seizure of devices and materials
⚠️ DTSA Ex Parte Seizure: 18 U.S.C. § 1836(b)(2) allows for extraordinary ex parte seizure of property to prevent propagation or dissemination of trade secrets. This is rarely granted and requires showing: (1) TRO inadequate, (2) immediate and irreparable injury, (3) person would destroy/move property if notified, (4) narrow seizure scope. Use cautiously—courts disfavor ex parte seizures.
Monetary Damages Under CUTSA and DTSA
Damage Type Calculation Notes
Actual loss Lost profits, lost business opportunities, diminished value of trade secret Requires proof of causation (losses directly caused by misappropriation)
Unjust enrichment Profits defendant gained from using trade secrets Alternative to actual loss if defendant profited but you can’t prove your losses
Reasonable royalty What defendant would have paid to license the information Used when actual loss and unjust enrichment are hard to quantify
Exemplary damages Up to 2× actual damages for willful/malicious misappropriation Requires showing intentional, deliberate theft (easy to prove with download logs, emails)
Attorneys’ fees Reasonable fees and costs Available for willful/malicious misappropriation OR bad faith claim (cuts both ways)
Settlement Dynamics

Most trade secret cases settle before trial. Common settlement structures:

  • Standstill agreement: Defendant agrees to stop using trade secrets; plaintiff agrees not to sue for past conduct; mutual release
  • Negotiated license: Defendant pays royalty or lump sum to continue using information under defined constraints
  • Return and destroy: Defendant certifies return/destruction of all materials; plaintiff releases past claims
  • Client carve-out: Defendant agrees not to solicit specific clients for defined period (if legally supportable)
  • Monetary payment: Lump sum to cover damages, attorney fees, and avoid admission of liability
  • Non-disparagement and confidentiality: Both sides agree not to discuss the dispute publicly
💡 Negotiation Leverage: Emphasize the cost and disruption of litigation (discovery of devices, depositions, expert witness fees). Former employees often have limited resources and high incentive to settle quickly. Employers have staying power but face reputational risk if the case becomes public.
Statute of Limitations
Jurisdiction Claim Statute of Limitations
Federal (DTSA) Misappropriation 3 years from discovery or when should have discovered (18 U.S.C. § 1836(d))
California (CUTSA) Misappropriation 3 years from discovery or when should have discovered (Civ. Code § 3426.6)
California Breach of contract (NDA) 2 years (oral) or 4 years (written)

Continuing violation doctrine: If misappropriation is ongoing (e.g., defendant continues to use stolen client list), the statute of limitations may not begin to run until the use ceases.

How I Can Help

I represent companies in trade secret misappropriation, unfair competition, and breach of fiduciary duty cases involving former employees and contractors. I handle matters from demand letters through emergency TROs and full litigation under CUTSA and DTSA.

Services Offered
  • Forensic investigation coordination: Work with IT and forensic experts to document data theft and preserve evidence
  • Cease-and-desist demand letters: Aggressive, legally sound letters demanding immediate cessation, return of materials, and preservation of evidence
  • Emergency injunctive relief: File for TROs and preliminary injunctions to stop ongoing misappropriation
  • Trade secret litigation: Prosecute claims under CUTSA and DTSA for damages, exemplary damages, and attorneys’ fees
  • Settlement negotiation: Secure favorable standstills, licenses, or monetary settlements without protracted litigation
  • California § 16600 compliance: Ensure demand letters and litigation strategy comply with California’s anti-noncompete laws
My Approach
  1. Rapid response: Time is critical in trade secret cases. I move quickly to stop ongoing harm and preserve evidence before it’s destroyed.
  2. Forensic-driven strategy: I work with IT and forensic experts to build airtight evidence of theft—download logs, email trails, side-by-side comparisons.
  3. Aggressive demand letters: My cease-and-desist letters are detailed, evidence-based, and designed to create immediate settlement pressure while preserving your right to emergency relief.
  4. California law expertise: I navigate the tension between protecting your trade secrets and complying with California’s strict anti-noncompete laws (§ 16600, SB 699).
  5. Emergency litigation readiness: If the former employee doesn’t comply, I’m prepared to file for a TRO within 24–48 hours, with declarations, exhibits, and proposed orders ready to go.
🔒 Former Employee Stole Your Trade Secrets?

Contact me immediately for a consultation. I’ll assess your evidence, draft a cease-and-desist letter, and if necessary, seek emergency court intervention to stop the bleeding.

Email: owner@terms.law
Frequently Asked Questions
No—not simply because they’re competing. California Bus. & Prof. Code § 16600 voids noncompete agreements. However, you can stop them from using your trade secrets, soliciting clients using confidential information, or competing using misappropriated data. Focus on what they’re using, not where they’re working.
You can still pursue trade secret misappropriation under CUTSA and DTSA even without a written NDA. The statutes protect trade secrets based on the information’s secrecy and your protective measures (access controls, passwords, etc.), not just contractual obligations. However, an NDA strengthens your case significantly.
System logs (file downloads, emails to personal accounts, USB connections), forensic imaging of devices, side-by-side comparison of your materials vs. theirs, witness statements, and client reports of being contacted with your confidential information. Work with IT to pull audit logs immediately—they may be overwritten or deleted if you wait.
Yes. You can seek a TRO or preliminary injunction requiring return and destruction of misappropriated materials, certification of deletion from all devices, and in some cases forensic imaging to verify compliance. In extraordinary circumstances under DTSA, courts can even order ex parte seizure of devices.
Actual losses (lost profits, diminished trade secret value), unjust enrichment (profits defendant made), and up to 2× actual damages for willful/malicious misappropriation. You can also recover attorneys’ fees if the misappropriation was willful or malicious. Both CUTSA and DTSA provide these remedies.
3 years from when you discovered (or reasonably should have discovered) the misappropriation under both CUTSA and DTSA. However, if the use is ongoing (continuing violation), the clock may not start until the use stops. Don’t wait—early action is critical for emergency relief and evidence preservation.

More from Terms.Law