Build A Rocket Boy Faces Legal Action Over Invasive Surveillance Practices

Severity: Medium (Score: 54.6)

Sources: Fisherphillips, iwgb.org.uk

Published: 2026-05-27 · Updated: 2026-05-27

Keywords: build, rocket, workers, over, data, violations, management

Summary

Developers at Build A Rocket Boy (BARB) have initiated legal proceedings against their employer due to the installation of Teramind surveillance software on their devices without consent. The IWGB Game Workers Union alleges that this software recorded keystrokes, screen activity, and microphone audio, violating data protection laws and employee privacy. Over 40 employees filed a collective grievance, leading to the software's removal in March 2026. However, BARB has not provided transparency regarding the data collected or the reasons for the software's installation. The union is escalating the matter through regulatory channels, including ACAS and the Information Commissioner's Office. Additionally, BARB is facing separate legal claims related to a redundancy process that affected 300 staff members. The situation highlights the tension between employee privacy and corporate surveillance in the tech industry. Key Points: • Build A Rocket Boy installed Teramind surveillance software on employees' devices without consent. • The IWGB Game Workers Union represents over 40 affected employees seeking legal redress. • The company has not disclosed what data was collected or how it was used, raising privacy concerns.

Detailed Analysis

**Impact** Over 40 employees at Build A Rocket Boy, a UK-based video game studio, were subjected to invasive surveillance via Teramind software installed on their work devices without consent. The monitoring included keystroke logging, screen recording, and microphone audio capture, potentially collecting data from employees’ private home environments during remote work. The dispute involves legal proceedings initiated by the Independent Workers Union of Great Britain (IWGB) and is linked to broader workforce grievances including redundancy processes affecting 300 staff. The reputational and financial consequences for the company could be significant due to regulatory scrutiny and potential compensation claims. **Technical Details** The surveillance was conducted using Teramind software installed covertly on employee devices, enabling continuous monitoring of keystrokes, screen activity, and audio capture. No information on exploited vulnerabilities, malware, or external attack infrastructure was provided. The activity corresponds to internal monitoring at the data collection and exploitation stages of the kill chain. No IOCs or CVEs were mentioned in the available sources. **Recommended Response** Organizations should ensure full transparency and obtain employee consent before deploying monitoring tools, particularly those capturing audio and screen data. Review and audit existing endpoint monitoring software configurations to confirm compliance with data protection laws and limit data collection to what is strictly necessary. Monitor for unauthorized installation of surveillance software and establish clear policies balancing security needs with employee privacy. Engage legal counsel to verify compliance with jurisdictional privacy regulations and prepare for potential union or regulatory actions.

Source articles (2)

• Surveillance, Corporate Espionage, and Developer Pushback: 4 Lessons Tech Employers ... — Fisherphillips · 2026-05-27
  Recent litigation involving the video game studio Build A Rocket Boy highlights an increasingly common flashpoint for employers in the tech sector: the tension between protecting intellectual property…
• Workers At Build A Rocket Boy Take Action Over Data Privacy Violations From Management 2 — iwgb.org.uk · 2026-05-27
  Tuesday 21 April 2026: Workers at games studio Build A Rocket Boy (BARB) have initiated legal proceedings against the company over concerns of data protection violations, after management installed in…

Timeline

• 2026-03-01 — Surveillance software removed: BARB deinstalled Teramind after collective grievances from over 40 employees regarding privacy violations.
• 2026-04-21 — Workers file legal proceedings against BARB: Employees allege data protection violations due to unauthorized surveillance software installation.
• 2026-05-27 — Articles published detailing the incident: Two articles report on the legal actions taken by BARB employees and the implications for tech employers.

Related entities

• BARB (Company)
• Build A Rocket Boy (Company)
• Information Commissioner's Office (Company)
• IWGB Game Workers Union (Company)
• United Kingdom (Country)
• iwgb.co.uk (Domain)
• [email protected] (Email)
• Technology (Industry)
• T1056.001 - Keylogging (Mitre Attack)
• T1113 - Screen Capture (Mitre Attack)
• T1123 - Audio Capture (Mitre Attack)
• Teramind (Platform)