A board call and a trade
On September 23rd, 2008, as Wall Street was in free fall, the board of Goldman Sachs held an urgent phone call. Warren Buffett's Berkshire Hathaway was about to invest five billion dollars in the bank. The news was still secret. About sixty seconds after the call ended, one of the board members picked up the phone and dialed a hedge fund manager.
Minutes before the market closed, that hedge fund bought about forty-three million dollars of Goldman stock. The board member was Rajat Gupta: the former head of McKinsey and Company, and one of the most respected businessmen in the world.
Source context: [1]
Calcutta to Harvard
Rajat Gupta was born in Calcutta in 1948. By the time he was eighteen, both of his parents had died. He studied mechanical engineering at IIT Delhi, then went on to Harvard Business School. In 1973, he applied to McKinsey. The firm turned him down, until a Harvard professor stepped in. McKinsey changed its mind.
Source context: [4]
The top
Twenty-one years later, he was running the firm. In 1994, Gupta became McKinsey's managing director, the first person born outside the United States to lead it. He was re-elected twice, and served three terms. He helped found the Indian School of Business and the Public Health Foundation of India. He joined the boards of Goldman Sachs and Procter and Gamble.
To a generation of Indian professionals, he was proof of what was possible.
Source context: [4]
The friend
But Gupta had also grown close to Raj Rajaratnam, the billionaire founder of the Galleon Group, a hedge fund that at its peak managed around seven billion dollars. The two men did business together. Gupta chaired a private equity firm in which Rajaratnam invested. And he became chairman of Galleon International, where he expected a share of the fund's fees.
The calls
Prosecutors said that from 2007 to early 2009, Gupta repeatedly passed confidential information from Goldman's boardroom to Rajaratnam. The Buffett call was one. A month later came another. On October 23rd, 2008, Goldman's board learned that the bank was losing money for the quarter, for the first time since it went public. Twenty-three seconds after that board call ended, Gupta phoned Rajaratnam.
When the market reopened, Rajaratnam sold his entire Goldman position, avoiding losses of several million dollars.
Source context: [1]
The wiretaps
What neither man knew was that the FBI was listening. Investigators had wiretapped Rajaratnam's phones. The morning after the Buffett tip, he was recorded telling a colleague he'd received a call saying, "something good's gonna happen" at Goldman. In October 2009, Rajaratnam was arrested. He was convicted on fourteen counts and sentenced to eleven years in prison, at the time the longest sentence ever handed down for insider trading.
And another senior McKinsey partner, Anil Kumar, pleaded guilty, and testified against Gupta.
Source context: [1]
The boundary between access and personal advantage
- 01Entrusted information
A director receives confidential corporate information.
- 02Disclosure outside the role
Information is passed to a person without a legitimate need to know.
- 03Trading and evidence
Calls, trades and other evidence connect the disclosure to market activity.
The fall
In October 2011, Gupta was arrested by the FBI. He pleaded not guilty. But in June 2012, a jury convicted him of conspiracy and three counts of securities fraud. He was sentenced to two years in prison and fined five million dollars. Gupta has consistently denied wrongdoing. His appeals failed. And in June 2014, the man who once ran McKinsey reported to federal prison. He was released in 2016.
THE SEQUENCE
A timeline of the case
Leads McKinsey
Gupta became managing director, later serving three terms. [4]
Confidential board news
A board call concerned Berkshire Hathaway’s planned Goldman investment. [1]
Criminal charges
Federal prosecutors charged Gupta in the insider trading case. [1]
Jury verdict
The jury convicted Gupta of conspiracy and three securities fraud counts. [1]
Sentence
The court imposed a two-year prison term and a $5 million fine. [2]
The professional asset was access
The Gupta case is often told as the fall of an unusually successful individual. That biographical arc is compelling, but it can obscure the organisational problem. A director or adviser is valuable partly because an institution trusts that person with information unavailable to outsiders. Misusing that access attacks the basis on which the role exists.
The relevant boundary is not whether a conversation feels friendly, whether the recipient is already wealthy, or whether the speaker intends to place a trade personally. The information has a purpose and an authorised audience. Moving it beyond that audience can create risks for the institution, shareholders and the person receiving it. Specific legal duties depend on the facts; an organisation should make its operational rule clear before a difficult conversation occurs.
The case also illustrates why a career history should not be confused with the capacity in which someone acted. Gupta’s McKinsey leadership explains his prominence and network. The confidential Goldman information at the centre of the conviction came through his board position. A precise account names the role that supplied the information and the duty attached to that role.
Why relationships need their own conflict review
Project-level conflict checks usually ask which companies a firm advises. They may be less effective at mapping personal relationships, investments and outside appointments. Those connections can become relevant when a trusted professional has influence in several institutions at once. A declaration is useful only if someone can assess the combination of roles, rather than filing each one separately.
An outside investment does not automatically establish misconduct. Nor does friendship prove an improper exchange. The management task is to identify where confidential access could benefit another relationship and decide what protections are needed. Possible controls include recusal, narrower access, restricted communication or declining an appointment.
| Situation | Practical question | Control to consider |
|---|---|---|
| Director also advises an investor | Could board information benefit that investor? | Role-specific restrictions and documented recusal |
| Consultant has a personal stake | Could a recommendation change the investment’s value? | Disclosure and independent review |
| Friend asks about a client | Is any part of the answer confidential? | Decline the substantive discussion and escalate uncertainty |
| Former employee retains files | Is continued access authorised and necessary? | Access removal and records review |
These are proposed controls for comparable situations, not claims that a particular control was absent at Goldman or McKinsey. The point is to design a usable system around predictable human relationships. A consulting presentation may carry sensitive information long before a formal board meeting begins.
What timing can tell an investigator
The sequence of board calls, subsequent calls and trading helped prosecutors explain their case. Chronology makes a complicated record understandable because the reader can follow who knew what at each moment. However, timing alone is not a complete explanation of a criminal verdict. Witness evidence, communications, relationships and the rest of the trial record also matter.
A good investigative timeline therefore distinguishes the event from the interpretation. One line may record a board call. Another records a subsequent telephone connection. A third records a trade. The narrative can explain how prosecutors connected those events, but should not silently convert every chronological association into proof of causation.
That discipline is transferable to ordinary investigations inside a firm. Preserve original records and their time zones. Record whether a timestamp indicates a message being sent, delivered or opened. Distinguish the author of a document from the people who received it. Avoid filling gaps with assumptions simply because a visual timeline would look cleaner with a continuous story.
Build a confidentiality system people can actually use
A policy that says protect information is necessary but incomplete. Teams need to know which materials are confidential, who may access them, how to share them and whom to contact when a boundary is uncertain. The practical difficulty often occurs in a short, informal exchange rather than a deliberate transfer of a complete document.
Consider a fictional consultant working on an unannounced acquisition. An old colleague asks whether the consultant will be busy next month. An answer that names the client, describes the deal timetable or confirms a rumour may disclose more than intended. The safe operating practice is to discuss availability without revealing the underlying engagement and to ask the relevant compliance team about any uncertainty.
The example is illustrative, not an allegation drawn from Gupta’s case. It shows why training should cover indirect disclosures. A person can reveal information through a schedule, a screenshot, a meeting invitation or a casual reference to a client’s problem. Teams should practise these everyday situations, not only the obvious instruction never to email a secret deck.
Information controls should follow the material into its presentation form. Remove hidden comments and speaker notes before an external release, check the recipients of shared links, and confirm whether an appendix contains data that should remain restricted. A slide review workflow should be paired with a substantive confidentiality review; visual correctness cannot establish permission to disclose.
Seniority changes the exposure, not the rule
Experienced professionals may have wider networks and more discretion than junior staff. That can make their decisions harder to observe and their explanations easier to accept. A system that assumes senior people are safe because they are respected is weakest where the potential exposure may be greatest.
Practical safeguards should therefore apply to senior roles as well. Periodic declarations, independent review of outside interests and prompt removal of unnecessary access should not depend on rank. The person reviewing a senior professional needs enough authority to ask for clarification and enforce a restriction.
At the same time, an organisation should avoid treating suspicion as proof. A conflict review is a preventive mechanism, not a finding of dishonesty. Clear records protect both the institution and the professional by explaining why a decision was made, what information was available and what restrictions were agreed.
A board-ready explanation of the case
For a training or governance presentation, use four exhibits: the roles that created access, the relevant information boundary, the evidence chronology and the final court outcomes. Keep the career biography separate from the evidence supporting the conviction. This prevents reputation, positive or negative, from becoming a substitute for facts.
The conclusion should identify operational changes with accountable owners. For example, the board secretary may own distribution rules, compliance may review outside appointments, and an engagement leader may verify access at project close. A broad demand for an ethical culture does little unless people can see which decisions and behaviours need to change.
A team can use an executive summary to present the decision and an internal control discussion to examine how independent challenge works. The Saudi report case adds a different question: even where the input is public, what new exposure does the analysis create?
Keep motive separate from the established outcome
Ambition, friendship and status are plausible themes for a documentary. They are not measurements of what a person privately intended. The strongest version of the article makes that limit visible. Readers can understand the professional stakes without being asked to accept an invented psychological explanation.
The established legal outcome is the conviction and sentence. Gupta’s denials should also be acknowledged as his position. A careful account can be direct about both. For consultants, the usable lesson is less about guessing the motive of a famous individual and more about protecting the information entrusted to every role, every day.
TAKE IT INTO THE NEXT MEETING
Three practical lessons
Treat access as a duty
Receiving a client’s or board’s information gives you a responsibility to protect it. Seniority and personal familiarity do not create an exception.
Review overlapping roles
Outside investments, advisory positions and friendships can create conflicts that ordinary project staffing checks miss. Declare relationships before access is granted.
Make the pause practical
Give colleagues a clear compliance contact and a quick route for uncertain situations. A usable escalation path is more effective than relying on reputation.
Questions about the case
What was Rajat Gupta convicted of?
In June 2012 a federal jury convicted Gupta of one count of conspiracy and three counts of securities fraud arising from confidential information passed to Raj Rajaratnam. He was sentenced in October 2012.
Was Gupta acting as a McKinsey consultant when he received the Goldman information?
The central information in the case came through his Goldman Sachs board role. He was a former McKinsey leader. Those roles should be distinguished rather than treating every action as a consulting engagement.
What is the practical lesson for consultants?
Protect confidential information across every role and relationship. Use need-to-know access, declare outside interests, and seek compliance advice before sharing information beyond its authorised purpose.
THE EVIDENCE TRAIL
Sources & editorial notes
Adapted from the original XLSlides documentary, with additional analysis. Published 29 October 2026. Sources have different roles: primary records, investigative reporting and the positions of affected parties.
- US Department of Justice: Gupta guilty verdict ↗Conviction, board information, call sequence and trading.
- US Department of Justice: Gupta’s sentence ↗Two years in prison and the $5 million fine.
- SEC: Rajat K. Gupta enforcement action ↗The civil regulator’s account of the alleged tips and relevant board roles.
- Rajat Gupta: biographical chronology ↗Secondary career context; criminal findings are sourced separately to DOJ and SEC records.
Image credits & licences
Original illustrations and typography: XLSlides. Documentary stills have been resized and converted to WebP for this article. Underlying images retain the credits supplied with the episode.
- Rajat Gupta, Davos 2010: World Economic Forum, CC BY-SA 2.0
- Raj Rajaratnam, 2024: Shankar2001, CC BY-SA 4.0
- Warren Buffett: Mark Hirschey, CC BY-SA 2.0
- Howrah Bridge, Kolkata: Dey.sandip, CC BY-SA 3.0
- Goldman Sachs, Berkshire Hathaway, P&G and McKinsey logos: public domain
FROM EVIDENCE TO A RECOMMENDATION
Make the reasoning visible.
Use clear action titles, sourced exhibits and an explicit decision. XLSlides helps turn your analysis into an editable presentation; the evidence and judgment remain yours to verify.
Build a case-study presentation

