Hayden AI sues former CEO over alleged 41GB email theft

Hayden AI, a San Francisco startup that sells “spatial analytics” to cities, has sued its co-founder and former chief executive Chris Carson, alleging he copied a 41GB email archive to a USB drive days before his September 2024 termination. According to the complaint, Carson also registered the echotwin.ai domain shortly before he was fired and later launched a rival, EchoTwin AI.

The lawsuit, first reported by Ars Technica, reads like a catalogue of control failures that are common in fast-growing venture-backed firms: blurred lines between founder authority and corporate process, weak internal checks on equity transactions, and permissive data access for executives whose incentives change overnight. Hayden AI alleges Carson sold more than $1.2 million of company stock without board approval to fund a home purchase and luxury spending, and that the company only began a formal investigation months later. If those facts hold, the operational lesson is not about a clever thief; it is about a company that treated governance as paperwork until money moved.

The data-theft claim is similarly mundane. A CEO who can ask an employee to export an entire mailbox to removable media is operating inside a system designed for trust, not for exit. Startups often grant broad access because it is faster, because “everyone needs to move,” and because founders are assumed to be aligned with the cap table. That assumption breaks precisely when boards intervene—when a CEO is “iced out,” as the complaint describes—and the time window between internal suspicion and credential lockdown becomes the most valuable asset in the building.

Hayden AI also alleges Carson misrepresented parts of his background, including claiming a PhD from Waseda University. Even if those claims are contested, the case illustrates how the market for “AI leadership” can turn credential signals into substitutes for verification. In a hiring environment where investors and customers want a recognizable résumé and a compelling founder story, the cost of deep due diligence is easy to postpone—until a dispute turns it into discovery.

If the court grants the requested injunction compelling Carson to return or destroy the allegedly taken data, it will not solve the structural problem. The next generation of AI startups will still be built on rapid hiring, permissive access, and board interventions that arrive after growth has already outrun controls.

Hayden AI says the 41GB export happened in August 2024. It fired its CEO on September 10, after the company says it had already opened an internal investigation into his conduct.