On March 17, 2025, Parker Conrad’s company sued its biggest rival and accused it of running a spy inside his own walls. A year and a half later, that spy has pleaded the Fifth in his own deposition, a federal judge has let civil racketeering claims against the rival go to trial, and the Justice Department is reportedly investigating whether any of it was a crime. None of it is resolved — no criminal charges have been filed, no jury has ruled — but the allegations, and the evidence Rippling says it has to back them, are already stranger than most litigation gets.
A founder who has already lived through one scandal
Conrad wasn’t a first-time founder when he built Rippling. He co-founded HR startup Zenefits in 2013 and ran it as CEO until February 2016, when he resigned amid a state-by-state compliance crisis: more than 80% of the insurance policies Zenefits sold in Washington state that year had gone through brokers who weren’t actually licensed there, and Conrad had personally written a program that let employees shortcut the hours of study required to get licensed, according to reporting at the time from BuzzFeed News, Forbes and TechCrunch. In October 2017, the SEC fined Zenefits and Conrad a combined nearly $1 million for making misleading statements to investors about the company’s compliance with state insurance law, per TechCrunch’s reporting on the settlement.
He founded Rippling the same year he left Zenefits, building an all-in-one HR, IT and payroll platform with co-founder Prasanna Sankar. It grew fast: a $450 million Series G in May 2025 valued the company at $16.8 billion, according to CNBC and Bloomberg, up from an already-large valuation the year before. By the time Rippling filed suit against Deel, it was no longer the scrappier company in the fight — it was the one with more to lose.
A LinkedIn message and a mention of James Bond
Deel is Rippling’s closest direct competitor in HR and payroll software, and by October 2025 it was valued at $17.3 billion of its own, following a $300 million round reported by Crunchbase News, Fintech Futures and Crowdfund Insider. According to a sworn statement filed in Irish court and reported by the Irish Times, Deel’s CEO Alex Bouaziz connected with Keith O’Brien, a payroll manager at Rippling’s Dublin office, on LinkedIn — and suggested O’Brien “become a ‘spy’” for Deel, specifically invoking James Bond when he pitched it.
O’Brien agreed. Per his own sworn statement, later widely quoted by TechCrunch and other outlets, he described the arrangement in his own words as: “I begin spying for Deel.”
Six thousand searches for one word
Rippling’s complaint, filed in the Northern District of California, alleges O’Brien spent roughly four months searching Rippling’s internal Slack for the word “Deel” — more than 6,000 times in total, an average of about 23 searches a day, according to figures Rippling’s own founder Parker Conrad cited when announcing the suit on X. Rippling’s general counsel, Vanessa Wu, called the alleged operation “breathtaking” in scale in the company’s own announcement of the lawsuit, saying it “permeat[ed] their sales, marketing, recruiting, and even communications operations.” Rippling says it caught O’Brien with a honeypot: a fake Slack channel referencing a fictitious meeting, which company executives at Deel — the suit alleges — accessed within hours of it being created.
Those are still allegations from the plaintiff. But the underlying financial arrangement is better corroborated: according to the affidavit reported by TechCrunch, O’Brien was paid roughly €5,000 a month, after an initial $6,000 payment, with later payments made in cryptocurrency.
An axe, a bathroom, and a court that let him walk
On March 14, 2025, according to TechCrunch’s reporting on the unsealed affidavit, a Rippling lawyer confronted O’Brien at the Dublin office with a court order to search his devices. O’Brien locked himself in a bathroom, wiped his phone to factory settings and tried to flush it, then later — by his own account — smashed the phone with an axe and disposed of the pieces down a drain at his mother-in-law’s house.
He cooperated after that. In April 2025, an Irish High Court judge, Mr Justice Sanfey, declined to sanction O’Brien for his conduct, finding — per the Irish Times’ report on the ruling — that he had taken “serious and genuine” steps to remedy it once he had legal advice, that he “has suffered considerably,” and that his post-cooperation conduct “does him credit.”
A wire transfer that took 56 seconds
The financial trail kept surfacing. Bank records Rippling filed with the court, reported by TechCrunch in January 2026, reportedly show a transfer from Deel routed through an account held by the spouse of Deel’s chief operating officer, which then moved the same amount into O’Brien’s account within 56 seconds. Days before that reporting, the Wall Street Journal reported — relayed by PYMNTS and TechCrunch — that the Justice Department had opened a criminal investigation into Deel over the alleged spying, issuing grand jury subpoenas through the U.S. Attorney’s Office for the Northern District of California. Deel said at the time it was not aware of a criminal investigation but would cooperate with authorities if contacted.
A judge lets the racketeering claims go to trial
On February 13, 2026, U.S. District Judge Charles Breyer denied Deel’s motion to dismiss the California case and rejected its bid to move the dispute to an Irish forum, according to Bloomberg Law and HR Dive. The ruling let Rippling’s civil RICO claims proceed against Deel, CEO Alex Bouaziz and other executives, with Breyer finding Rippling had plausibly alleged a coordinated scheme built on predicate acts including wire fraud, obstruction of justice and trade-secret theft. (A separate, unrelated case Deel brought in Florida saw its own fraud and RICO claims dismissed around the same period — a result Deel has publicized, but one that concerns a different lawsuit, not Rippling’s California case.)
The fight over O’Brien himself isn’t over either. In July 2026, Deel asked the court to strike key claims, arguing — per Bloomberg and Staffing Industry Analysts — that O’Brien had effectively refused to answer more than 100 of Deel’s own discovery questions by invoking his Fifth Amendment right against self-incrimination. A lawyer for Rippling countered in a filing that O’Brien has no intention of withholding information and called Deel’s characterization a “false premise.” As of this writing, the judge hasn’t ruled on that motion, and no trial date has been set.
Deel’s answer: we’re the ones who were robbed
Deel hasn’t simply denied the allegations — it countersued. In a case filed against Rippling, Deel alleges a Rippling employee posed as a prospective customer for roughly six months, gathering Deel’s pricing, benefits policies and product templates, which Deel says Rippling then used to build copycat features, according to Semafor’s reporting. A Deel spokesperson told Semafor that Rippling’s case rests on “a witness who has provided testimony pursuant to a cooperation agreement that Rippling refuses to disclose,” and that Deel’s own claims against Rippling are built on “incontrovertible evidence.”
What founders should actually take from it
Strip away the axe and the honeypot and what’s left is a more ordinary, and more useful, observation: Conrad built his second company inside the same regulatory and legal machinery that forced him out of his first one — and this time, the subpoenas are pointed at somebody else. None of that makes Rippling’s allegations true. A federal judge letting a case proceed to trial is not a verdict, the DOJ hasn’t charged anyone, and Deel’s countersuit means a jury may eventually be asked to weigh both companies’ conduct, not just one’s. What the record does show, independent of who wins, is how much of a modern SaaS rivalry now gets fought through affidavits and bank-transfer timestamps instead of product releases — and how a founder who was once the subject of a regulator’s finding can, a decade later, be the one building the case file.
This is an editorial profile assembled from public court filings, regulatory records and reporting. Sources: Rippling — lawsuit announcement, Irish Times — spy who destroyed phone with axe avoids court sanction, TechCrunch — the affidavit reads like a movie, TechCrunch — the scandal takes another wild turn, Bloomberg Law — Rippling to advance corporate espionage suit, Semafor — Deel fires back with new spying allegations, PYMNTS — DOJ investigates Deel, CNBC — Rippling valued at $16.8 billion, TechCrunch — SEC fines Zenefits nearly $1 million.
