Former Google Engineer Convicted in High-Stakes AI Espionage Case, Jury Finds He Stole Trade Secrets for China-Linked Firms
A federal jury in San Francisco on January 29, 2026, convicted Linwei (Leon) Ding, a former Google software engineer, on 14 counts of economic espionage and theft of AI trade secrets allegedly stolen for the benefit of China-linked firms.
Key takeaways
- Guilty verdict: Ding was convicted on 14 counts — seven counts of theft of trade secrets and seven counts of economic espionage, according to the DOJ press release.
- Evidence presented: Prosecutors say he copied thousands of pages of internal Google documents on TPUs, GPUs and SmartNICs, as reported by Help Net Security and The Register.
- Alleged beneficiaries: Prosecutors tied the theft to two China-based firms, including Rongshu and Shanghai Zhisuan Technology Co. Ltd.
- Next steps: Ding was released pending sentencing; a status conference is set for Feb. 3, 2026, per reporting by Fox Business and Los Angeles Times.
The case at a glance
Trial and verdict: An 11-day federal trial in U.S. District Court in San Francisco ended with a unanimous jury verdict on Jan. 29, 2026. Prosecutors said Ding began copying sensitive Google documents in May 2022 and continued through April 2023, uploading files to personal cloud accounts and a personal computer while allegedly disguising his activity to evade Google’s security systems (Help Net Security; The Register).
Employment and work focus: Ding was hired by Google on May 13, 2019, as a software engineer. His role emphasized optimizing GPUs for machine learning and supporting supercomputing data centers used to train and run advanced AI models. Prosecutors emphasized that the stolen materials included detailed design and operational information for Google’s Tensor Processing Units (TPUs), Graphics Processing Units (GPUs), and SmartNICs — all central to large-scale AI work (The Register; Help Net Security).
Prosecution’s theory
Federal prosecutors argued the theft was deliberate and intended to help build China-based AI infrastructure. Evidence presented at trial showed Ding founded Shanghai Zhisuan Technology Co. Ltd. on May 30, 2023, and served as chief technology officer for a company called Rongshu. Prosecutors introduced testimony and documents showing Ding pitched investors in China and sought to apply Google know‑how to replicate advanced AI systems (The Register; Los Angeles Times).
“The theft threatens our technological edge and economic competitiveness,” said FBI San Francisco special agent in charge Sanjay Virmani, as cited in coverage of the case (Fox Business).
Defense position
Key defense claims: Ding’s attorney, Grant Fondo, argued that Ding never sold the data and that Google did not adequately protect its trade secrets. The defense maintained Ding’s intent was not to commit espionage and raised questions about Google’s internal controls and security gaps (Fox Business).
Evidence cited by prosecutors
Prosecutors presented logs, file copies, and witness testimony showing that Ding allegedly copied thousands of pages of internal Google documents relating to TPUs, GPUs, SmartNICs and related AI systems. They said he used personal cloud accounts and local downloads, and took steps to avoid detection (Help Net Security; The Register).
Timeline of key events
- May 2022–April 2023: Prosecutors say Ding copied and uploaded sensitive files from Google systems (Help Net Security).
- Oct. 29, 2022–Mar. 25, 2023: Ding traveled to China and pitched investors for Rongshu (The Register).
- Dec. 8, 2023: Ding signed an affidavit denying retention of Google data, according to prosecutors (The Register).
- Dec. 14, 2023: Ding booked a one-way flight to Beijing (The Register).
- Dec. 26, 2023: Ding resigned from Google (The Register).
- Jan. 4–6, 2024: Google seized devices; the FBI executed a search warrant and an indictment followed (The Register; Fox Business).
- Feb. 4, 2025: A superseding indictment expanded the charges (Fox Business).
- Jan. 29, 2026: Jury convicts Ding on all counts; DOJ calls it the first economic espionage conviction tied directly to AI (DOJ press release; Los Angeles Times).
Statements and official reactions
Google response: Google spokeswoman Lee‑Anne Mulholland, vice president of regulatory affairs, thanked the jury and said the verdict sends a clear message that stealing trade secrets has serious consequences (Los Angeles Times; The Register).
DOJ and U.S. Attorney: U.S. Attorney Craig H. Missakian said the jury delivered a clear message that theft of valuable technology will not go unpunished, framing the case as part of broader efforts to protect U.S. innovation from foreign threats (DOJ press release; Fox Business).
Implications for Utah
Economic impact: Utah’s tech sector—often called “Silicon Slopes”—relies on talent, investment and trust. The conviction could push companies to tighten hiring and security practices, increase costs for audits and compliance, and trigger greater supply‑chain scrutiny for firms that rely on cloud services and AI chips (Help Net Security; The Register).
Political consequences: For conservative voters and leaders in Utah, the conviction reinforces calls for a tougher stance on China and stronger national security measures. State lawmakers may press for tighter export controls, reporting rules for foreign collaborations, or incentives for domestic chip and AI infrastructure (Fox Business; DOJ press release).
Social and cultural effects: Utah communities may see heightened concern about workplace privacy and surveillance as employers increase monitoring and background checks. Schools and universities partnering with industry on AI research may face new compliance hurdles. The case touches on broader cultural anxieties about foreign influence and economic competition (The Register; Los Angeles Times).
Practical takeaways for residents:
- Employers: Review data access policies, tighten endpoint protections, and run insider‑risk training (Help Net Security).
- Jobseekers: Expect more detailed background checks and disclosure questions about foreign work or affiliations.
- Universities: Reassess partnerships with foreign entities and strengthen IP protections.
- Policymakers: Consider state measures to protect critical infrastructure and incentivize domestic chip and AI investment (Fox Business; The Register).
Penalties, status and next steps
Potential penalties: Each theft count carries up to 10 years; each economic espionage count carries up to 15 years, and fines could reach millions, according to reporting (Help Net Security; The Register).
Current status: Judge Vince Chhabria released Ding pending sentencing, finding him not a flight risk. A status conference is scheduled for Feb. 3, 2026 (Fox Business; Los Angeles Times).
Sentencing outlook: Next steps include a sentencing hearing where federal guidelines, intent and assessed harm will be weighed. Observers note the case could shape how courts and prosecutors handle future AI‑related trade‑secret litigation (DOJ press release).
Additional sources
Note: This story preserves original facts and source links reported by the listed outlets and the DOJ.
