Former Google Engineer Convicted in Landmark AI Espionage Case; Jury Finds He Stole Trade Secrets for China-Linked Firms
A San Francisco federal jury convicted Linwei Ding on Jan. 29, 2026, finding him guilty on multiple counts of theft of trade secrets and economic espionage for allegedly copying confidential Google AI files and aiding China-linked companies — a landmark DOJ victory.
- Verdict: Guilty on 14 counts — seven counts of theft of trade secrets and seven counts of economic espionage; convicted Jan. 29, 2026 after an 11-day trial.
- Allegations: Prosecutors say Ding copied more than 1,000 unique files (about 14,000 pages, including 105 core documents) and uploaded them to personal cloud accounts while evading Google security systems.
- Links to China: Authorities allege Ding worked with China-linked firms, founded Shanghai Zhisuan Technology Co. Ltd., and sought to aid entities tied to the People’s Republic of China.
- Legal stakes: Ding remains free pending sentencing; each theft count carries up to 10 years, each economic espionage count up to 15 years, plus potential fines.
Background: role, access and alleged theft
Employment and access. Ding was hired by Google on May 13, 2019 as a software engineer working on GPU efficiency and machine learning infrastructure for Google and Google Cloud supercomputing centers. Prosecutors say that role gave him access to highly sensitive information about hardware and software powering advanced AI systems, including Tensor Processing Units (TPUs), Graphics Processing Units (GPUs) and SmartNICs.
Scope of the alleged exfiltration. Federal prosecutors presented evidence that Ding copied more than 1,000 unique files — roughly 14,000 pages, including 105 core documents — between May 2022 and April 2023, then uploaded them to personal cloud accounts while attempting to hide the activity from Google security systems. Court filings say he downloaded files to a personal computer shortly before resigning on Dec. 26, 2023.
Primary reporting and official notices: See the Department of Justice press release, reporting from the Los Angeles Times and investigative coverage by The Register for detailed court timelines and allegations.
Activities with China-linked companies
Prosecutors allege Ding secretly worked with at least two China-based firms while employed at Google. He is accused of serving as chief technology officer for one company and of founding Shanghai Zhisuan Technology Co. Ltd. on May 30, 2023, listing himself as CEO and pursuing cluster management systems for machine learning acceleration. He reportedly met with investors in China and worked with a firm called Rongshu between October 2022 and March 2023.
Trial evidence cited trips to China and conduct prosecutors say demonstrated intent to help PRC-controlled entities — including claims to investors that he could reproduce Google’s AI supercomputing technology and alleged falsified badge-scan logs showing U.S. presence when abroad. Prosecutors also say Ding applied to a Chinese government-sponsored “talent plan” aimed at supporting computing infrastructure in China.
Google discovery, arrest and legal steps
Google’s security team detected uploads to a second personal Drive account while Ding was in China. After discovering signs of data exfiltration, Google suspended his access, locked his laptop and reviewed prior activity. The company says it seized devices on Jan. 4, 2024; the FBI searched those devices on Jan. 6, 2024. An initial indictment followed on March 5, 2024, with superseding indictments filed in February and September 2025 expanding the charges.
The Department of Justice framed the case as its first criminal prosecution tied directly to alleged AI economic espionage, noting the conviction demonstrates the government’s commitment to protecting U.S. technological advantages. Read the DOJ statement: Department of Justice press release.
Defense, trial dynamics and judge’s views
Ding’s defense disputed central elements of the government’s case. Attorneys argued the files remained under Ding’s personal control, there was no clear transfer to a foreign power, and no proof of intent to benefit the People’s Republic of China. They also contended Google’s security and data-protection policies were inadequate and that there was no evidence the documents had been sold or used.
Judge Vince Chhabria denied a motion to dismiss while expressing skepticism about some espionage theories during pretrial hearings. Still, after an 11-day trial a jury returned a unanimous guilty verdict on all 14 counts.
Sentencing, penalties and status
Status: Ding was convicted on Jan. 29, 2026 and remains free pending sentencing; a status conference is scheduled for Feb. 3, 2026. Federal sentencing exposure is substantial: each theft count carries up to 10 years in prison, and each economic espionage count carries up to 15 years, plus potential fines in the millions. The final sentence will depend on federal sentencing guidelines and the court’s assessment of harm.
Statements from government and Google
“The jury sent a clear message that theft of valuable technology will be punished,” said U.S. Attorney Craig H. Missakian, while FBI agent Sanjay Virmani warned of the broader threat to U.S. competitiveness posed by theft of AI know-how.
Google reaction. Google vice president Lee-Anne Mulholland thanked the jury and emphasized that stealing trade secrets has serious consequences. Google has otherwise declined further comment beyond its public statements.
Implications for California
Economic impact. The conviction underscores risks companies face from insider threats and may push Silicon Valley firms and startups to strengthen monitoring, encryption, and employee training.
Workforce and hiring. Tech companies may tighten hiring and vetting for engineers working on sensitive AI infrastructure, adopt stricter noncompete and confidentiality clauses, and balance talent recruitment with loyalty protections.
Policy and security. Lawmakers and regulators in California may use the case to support legislation protecting trade secrets and critical AI research, encourage clearer export-control guidance, and promote private–public cooperation on security.
Political and daily-life effects. The case will likely influence debates over tech regulation, national security, and U.S.–China ties. If companies respond by restricting access or moving research, Californians could see slower product rollouts or changes in hiring — though improved security could protect high-paying tech jobs.
Legal precedent and future cases
As one of the Justice Department’s first widely reported convictions tied to alleged AI economic espionage, this verdict may shape future prosecution strategies and corporate compliance practices. California-based tech companies, in particular, will watch sentencing and any appeals closely for implications on trade-secret litigation and internal controls.
