OWNERSHIP & PEOPLE / 2021-09-14
ExpressVPN’s 2021 Daniel Gericke employment controversy
A documented employee relationship; earlier UAE hacking work
Company marks identify the subjects discussed, not a finding or endorsement. Image sources.
Labels identify the source, not a security rating or independent StealthVPN testing. Read the document scope and limits.
What the record says
Daniel Gericke is a signatory to a September 2021 US deferred prosecution agreement concerning hacking-related work for the UAE. The agreement acknowledges the truth of its attached factual statement and resolves charges subject to its terms.
US v. Baier, Adams and Gericke: signed deferred prosecution agreement (opens in a new tab)
Data outcome and relevance
This record concerns prior hacking work. It does not document an ExpressVPN customer-data disclosure.
US v. Baier, Adams and Gericke: signed deferred prosecution agreement (opens in a new tab)
Company response or subsequent action
ExpressVPN confirmed hiring him in December 2019, defended his defensive-security expertise, said it did not condone Project Raven and announced more frequent audits.
ExpressVPN: official response about Daniel Gericke (opens in a new tab)
What remains unestablished
A deferred prosecution agreement is not a conviction. This is a dated employment relationship, not a claim that he currently works there. Current employment and later procedural disposition were not established here. Neither his nationality nor previous work alone establishes access to VPN customer data.
Sources and document locators
- Court record · DOJ-hostedUS v. Baier, Adams and Gericke: signed deferred prosecution agreement (opens in a new tab)
D.D.C. 21-CR-577 (CJN); paragraph 2 and attached factual statement
- Company responseExpressVPN: official response about Daniel Gericke (opens in a new tab)
September 16, 2021
A selected, dated case file. It does not replace reviewing the current service, policies and infrastructure. How we investigate