Ex-Google engineer convicted in landmark AI espionage case tied to China — jury finds he stole confidential Google AI secrets
A federal jury in San Francisco convicted Linwei Ding, a former Google software engineer, of theft of AI trade secrets and economic espionage for allegedly transferring confidential Google AI files to China-linked entities, marking a first-of-its-kind DOJ conviction.
- Defendant: Linwei “Leon” Ding, 38, former Google software engineer.
- Verdict: Guilty on 14 counts — seven counts of theft of trade secrets and seven counts of economic espionage; unanimous verdict after an 11‑day trial.
- Allegations: Prosecutors say he copied and transferred confidential AI-related files and used them to help China-linked companies.
- Legal significance: The Justice Department framed the outcome as its first conviction tying economic espionage specifically to AI secrets.
Key information
Defendant: Linwei “Leon” Ding, 38, who worked as a software engineer at Google on supercomputing data‑center projects. Sources reporting on the defendant and case include The Register and official filings at the DOJ Office of Public Affairs.
Charges and verdict: The jury convicted Ding on 14 counts — seven counts of theft of trade secrets and seven counts of economic espionage — after an 11‑day trial in federal court in San Francisco. (See the U.S. Attorney’s Office, NDCA release.)
Background and employment at Google
Ding joined Google on May 13, 2019 and worked on supercomputing and data‑center projects that support training and deployment of advanced AI models. Prosecutors said his role gave him access to sensitive design and operational details for hardware and systems such as Google’s TPUs, GPUs and SmartNIC network cards used to accelerate machine learning workloads (The Register, Los Angeles Times).
According to prosecutors, beginning in May 2022 Ding copied internal documents and transferred over 1,000 unique files — roughly 14,000 pages — to personal cloud accounts; about 105 documents were later identified as central evidence. Authorities allege he also moved data to a personal computer in December 2023 shortly before leaving Google (The Register, Fox Business).
Alleged links to China-based firms and talent programs
Prosecutors presented evidence claiming Ding secretly aligned with at least two China‑based companies while still employed at Google. He is accused of serving as a chief technology officer for one firm and of founding Shanghai Zhisuan Technology Co. Ltd. on May 30, 2023, where he listed himself as CEO and worked on a Cluster Management System for machine learning (The Register, Fox Business).
Trial evidence included emails, corporate filings and investor presentations in which Ding claimed his teams could match or approach Google’s supercomputing performance. Federal prosecutors argued those materials — tied to the transferred files — were used to help China‑linked firms develop AI supercomputing capabilities and custom chips, and to support efforts to join a Chinese government‑sponsored “talent plan.”
How the conduct was detected and the path to indictment
Google’s security team flagged uploads from Ding’s company account to personal cloud storage during travel to China. On Dec. 8, 2023 prosecutors say Ding signed a “Self‑Deletion Affidavit” falsely denying retention of Google data, then booked a one‑way flight to Beijing for Jan. 7, 2024 and resigned from Google on Dec. 26, 2023. Surveillance and badge‑scan evidence suggested efforts to conceal his absence from the U.S. (The Register).
Google suspended the account and took custody of company devices on Jan. 4, 2024. The FBI executed a search warrant on Jan. 6, 2024. The government returned an indictment on March 5, 2024, and later filed superseding indictments on Feb. 4, 2025 and again in September 2025. The United States prosecuted the case in San Francisco federal court; the trial ran 11 days and resulted in the guilty verdict this week (DOJ OPA).
Reactions from government, Google and defense
Government officials framed the verdict as a strong message about protecting U.S. technology. U.S. Attorney Craig H. Missakian said the jury sent a message that theft of valuable technology will not go unpunished; FBI Special Agent Sanjay Virmani warned the theft threatened America’s technological edge and competitiveness (Fox Business).
Google spokesman Lee‑Anne Mulholland: “We are grateful to the jury for making sure justice was served today, sending a clear message that stealing trade secrets has serious consequences.”
Defense: Attorney Grant Fondo said he respected the jury’s decision but expressed disappointment, arguing Ding never sold the information or put it to use and that Google had failed to protect some documents (Fox Business).
Potential penalties and next court dates
Under federal law, each theft count carries up to 10 years and each economic espionage count up to 15 years. The theoretical maximum sentence across counts exceeds many decades; hefty fines are also possible under the U.S. Sentencing Guidelines. The court released Ding pending sentencing, finding he was not a flight risk. A status conference was set for Feb. 3, 2026 (The Register, DOJ OPA).
Why the case matters
Officials described the verdict as a warning about insider threats capable of transferring critical know‑how out of U.S. companies. The case is notable for tying economic espionage statutes directly to AI research and infrastructure, a growing enforcement and legislative priority as policymakers and national security officials express concern over export of advanced technology (Los Angeles Times, DOJ OPA).
Implications for the Inland Empire, California
Economic impact: The Inland Empire, home to many tech workers and contractors tied to Silicon Valley supply chains, could see firms tighten hiring checks and data protections, raising compliance costs but increasing demand for cybersecurity and audit services (The Register, Help Net Security).
Political and social consequences: Local elected officials may press for stronger rules on insider access to sensitive AI infrastructure. Residents and workers might grow more cautious about foreign affiliations; community colleges and universities may see elevated interest in cybersecurity and compliance training (Los Angeles Times, Fox Business).
Practical applications for residents
Employers across the region should review insider‑threat programs, tighten access controls to sensitive files, and train staff on intellectual property handling. Workers should be cautious about side projects and outside affiliations and may seek legal advice before accepting overseas work that could present conflicts. Local cybersecurity firms may find increased demand for compliance, background checks and data‑loss prevention services (Help Net Security, The Register).
