It did go unnoticed though, for years. According to the indictment nobody detected this until the employee moved sensitive data out of Google and into a personal account while in the PRC. Even then they did not really figure it out until the person resigned.