Former Google Employee Accidentally Buys Google.com for $12, Receives Unique Reward
In September 2015, Sanmay Ved, a former Google employee pursuing an MBA in the US, stumbled upon a critical vulnerability on Google Domains. While browsing out of curiosity, he searched for google.com and was astonished to find it listed for sale. Believing it to be a glitch, he proceeded to add it to his cart and, using his credit card, purchased the domain for just $12. To his surprise, the transaction was successful, and he briefly gained access to Google's webmaster tools, effectively making him the owner of google.com for a minute. Google's internal systems quickly detected the error, canceled the transaction, and refunded Ved's $12. Instead of penalizing him, Google's security team decided to reward Ved for discovering the system flaw. They presented him with a bug bounty of $6,606.13, a sum cleverly chosen to resemble the word 'GOOGLE' when written numerically. Ved, however, chose not to keep the reward for himself. He decided to donate the entire amount to 'The Art of Living India,' a charity supporting the education of underprivileged children across India. Impressed by his altruism, Google doubled their reward, further aiding the children's educational initiatives. After completing his MBA, Sanmay Ved has since established himself in the technology and investment sectors, working as a product leader on various projects.
This incident highlights the inherent risks in complex digital infrastructure and the importance of robust internal monitoring systems. While Google's rapid detection and correction of the domain sale error demonstrate system resilience, the initial availability of a core asset for purchase underscores potential vulnerabilities in domain management protocols. The company's response, rewarding the discoverer and subsequently doubling the bounty upon learning of the charitable donation, reflects a strategic approach to cybersecurity that incentivizes responsible disclosure and fosters positive public relations. This event serves as a case study in managing systemic errors, balancing security imperatives with human factors, and leveraging unexpected situations for corporate social responsibility initiatives, all within the context of an increasingly interconnected digital world.
AI-generated to prompt reflection — not editorial opinion, not advice, not a statement of fact. How this works.