Former Google Engineer Convicted in First U.S. AI Economic Espionage Case; Jury Finds He Stole AI Secrets for China
A federal jury in San Francisco on January 29, 2026, convicted former Google engineer Linwei Ding of 14 counts of theft of trade secrets and economic espionage for allegedly stealing proprietary AI hardware and software designs linked to China.
- Verdict: Guilty on 14 counts — seven counts of theft of trade secrets and seven counts of economic espionage.
- Scope: Prosecutors say Ding copied more than 1,000 unique files (about 14,000 pages, 105 core documents) between May 2022 and April 2023 (The Register, Los Angeles Times).
- Technology taken: Details on Google’s TPUs, GPUs, SmartNICs and supercomputing systems used to train advanced AI models (The Register, Fox Business).
- Penalties: Statutory exposure includes up to 10 years per theft count, up to 15 years per espionage count, and possible multimillion-dollar fines; Ding was released pending sentencing (The Register, Fox Business).
Main content
Background and charges
Employment and role: Federal prosecutors say Ding was hired by Google on May 13, 2019 to work on software optimizing GPU use in Google and Google Cloud data centers that train large AI models.
Allegations: Prosecutors allege Ding began copying sensitive internal Google documents in May 2022 and moved files to personal cloud accounts while disguising his activity to avoid detection (The Register, Los Angeles Times).
The government’s theory: According to the Justice Department’s press release, the stolen material included hardware and software designs — naming TPUs and GPUs, network interface cards (SmartNICs), and supercomputing cluster details — central to the economic espionage charges tied to foreign entities.
Timeline of alleged theft and investigation
- May 2022–April 2023: Prosecutors say Ding copied and uploaded over 1,000 unique files (roughly 14,000 pages, including 105 core documents) to personal cloud accounts (The Register, Los Angeles Times).
- Oct. 29, 2022–March 25, 2023: Ding traveled to China for investor meetings and pitched a CTO role at a company called Rongshu (The Register).
- May 30, 2023: Ding founded Shanghai Zhisuan Technology Co. Ltd., listed as building AI cluster management systems (The Register).
- Dec. 8, 2023: Court filings say Ding signed an affidavit denying retention of Google data after Google raised questions; investigators later located presentations and other evidence (The Register).
- Dec. 14–26, 2023: Ding booked a one-way flight to Beijing (Jan. 7, 2024) and resigned from Google on Dec. 26, 2023; Google then suspended his access after discovering his Zhisuan presentation and badge misuse intended to mask travel (The Register).
- Jan. 4–6, 2024: Google seized devices and the FBI executed a search warrant (The Register).
- March 5, 2024–Sept. 2025: Initial federal indictment filed March 5, 2024; superseding indictments in Feb. 2025 and Sept. 2025 expanded charges ahead of the Jan. 2026 trial (The Register, Fox Business).
Trial, defense and verdict
An 11-day trial in U.S. District Court in San Francisco produced a unanimous guilty verdict on all counts. Prosecutors argued Ding intended to help two PRC-government-controlled entities develop AI supercomputers and custom chips, citing his travel, business plans and the volume of material he took (The Register, DOJ).
Defense position: Defense attorneys moved to dismiss portions of the case and contended there was no proof Ding ever handed files to a foreign government or that the companies he dealt with were state-controlled. They also argued Google’s internal protections were inadequate and that Ding never sold or used the files. The judge denied those motions; after the verdict defense counsel said,
“We respect the jury’s verdict, but we are obviously disappointed.”
The Justice Department framed the outcome as a warning that stealing AI know‑how will be prosecuted — asserting this is the first U.S. conviction applying economic espionage law to modern AI technologies (Los Angeles Times, DOJ).
Statements from involved parties
Google: Lee‑Anne Mulholland, VP for Regulatory Affairs at Google, thanked the jury and said the verdict shows *stealing trade secrets carries serious consequences* (The Register, Los Angeles Times).
U.S. Attorney Craig H. Missakian: Said the jury delivered a clear message that theft of valuable technology will not go unpunished (Fox Business).
FBI San Francisco and DOJ officials: Described the theft as a threat to U.S. technological advantage and competitiveness with the People’s Republic of China; FBI Assistant Director Roman Rozhavsky called it the first conviction of its kind tied to AI (Fox Business, Los Angeles Times).
Sentencing and next steps
Under federal statutes, Ding faces heavy potential penalties — up to 10 years on each theft count and up to 15 years on each economic espionage count, with possible multimillion-dollar fines (The Register, Fox Business).
Judge Vince Chhabria released Ding pending sentencing after finding him a low flight risk. A status conference is set for Feb. 3, 2026, with sentencing to follow. Court filings to date do not fully disclose whether the stolen files were transferred to the named Chinese entities; Google declined further comment (The Register, Fox Business).
Implications for Sonoma, California
This high‑profile conviction — tying economic espionage law to AI technologies — has local ramifications for counties like Sonoma that are connected to the Bay Area tech ecosystem. The effects span economic, political, social and cultural dimensions.
Economic impact
Sonoma County’s growing tech‑adjacent economy depends on regional innovation hubs, cloud services and skilled labor. The case may prompt local firms to tighten security, increase compliance costs, and slow collaborative research. Startups that rely on cloud compute or partnerships may face stricter vetting and longer timelines, and investors will note the value of protecting hardware and software designs for AI (DOJ, Los Angeles Times).
Political consequences
Local officials must balance support for tech jobs with concerns about national security and foreign influence. The conviction could accelerate calls for state guidelines on corporate data protection and push for federal resources to help local businesses harden defenses, shaping policy debates ahead of elections (Fox Business, Los Angeles Times).
Social effects
Tech workers and supply‑chain employees may worry about job risk and regional reputation. Employers could increase background checks and restrict remote access — measures that alter day‑to‑day work life. At the same time, enforcement can reassure stakeholders that intellectual property rights are protected (DOJ).
Cultural relevance
Sonoma values both innovation and openness. The case highlights tensions between attracting global talent and guarding sensitive technology, likely prompting universities and colleges to emphasize ethics and security in engineering curricula. It underscores how global AI competition affects local civic conversations about privacy and public safety (Los Angeles Times).
Practical applications for residents
- For small and medium businesses: Review cloud access policies, require multi‑factor authentication, and audit access to design files and models — internal controls matter for legal risk and competitive safety (DOJ).
- For tech workers and students: Expect increased security training and more scrutiny of outside work or travel tied to foreign entities; transparency about moonlighting and consulting will be more important (The Register).
- For policymakers and local leaders: Consider funding cybersecurity assistance for startups and partner with regional federal offices for guidance on protecting trade secrets and export-control compliance (Fox Business).
Reporting notes and sources
This report draws on the U.S. Department of Justice press release and coverage from multiple outlets, including the Los Angeles Times, The Register, and Fox Business. Additional court filings and official statements informed the timeline and details of the charges.
Note: All original facts, information, and source URLs have been preserved and linked above for verification.
