Former Google Engineer Convicted of Stealing AI Trade Secrets, Jury Finds Ties to China-Based Firms
A federal jury in San Francisco convicted former Google engineer Linwei “Leon” Ding on January 29, 2026, for stealing confidential AI technology, finding ties to China-based firms in the Justice Department’s first AI-related economic espionage conviction.
- Guilty verdict: Ding was found guilty on all 14 counts — seven counts of theft of trade secrets and seven counts of economic espionage (U.S. Department of Justice press release).
- Scope of theft: Prosecutors say Ding uploaded roughly 14,000 pages and over 1,000 unique files to personal cloud accounts while masking activity from Google (The Register; Los Angeles Times).
- China links: Evidence showed Ding held leadership roles and founded Shanghai Zhisuan Technology Co. Ltd., and traveled to China meeting investors tied to firms prosecutors connected to the PRC (The Register).
- Sentencing pending: Ding faces up to decades in prison across counts; the judge released him pending sentencing and set a status conference for February 3, 2026 (Fox Business).
Background and work at Google
Linwei “Leon” Ding, 38, joined Google on May 13, 2019, as a software engineer. Prosecutors said he worked on software for Google’s supercomputing data centers that train and deploy advanced AI models and had access to internal material on TPUs, GPUs, and SmartNICs, key components of large AI systems (The Register; Los Angeles Times).
How authorities say the theft happened
Prosecutors told jurors Ding began copying sensitive Google documents in May 2022. They say he uploaded over 1,000 unique files — roughly 14,000 pages with 105 core documents and more than 2,000 pages in total to personal Google cloud accounts, masking the activity to avoid detection and continuing until shortly before his resignation in December 2023 (The Register; Los Angeles Times).
Google flagged additional uploads from a second personal Drive account while Ding was in China. On December 8, 2023, he signed a self-deletion affidavit claiming he did not retain Google data; prosecutors say that affidavit obscured prior uploads. Google suspended his access on December 29, 2023, after learning of his role with a China-linked startup; the FBI executed a search warrant on his devices on January 6, 2024 (The Register).
Connections to China-based firms
Prosecutors presented evidence that Ding secretly affiliated with at least two China-based companies while employed at Google. He served as chief technology officer for one firm and founded Shanghai Zhisuan Technology Co. Ltd. (Zhisuan) on May 30, 2023, listing himself as CEO. Zhisuan described plans to build a cluster management system for machine learning workloads; prosecutors say Ding misled investors by implying he could replicate Google’s AI supercomputing technology (The Register; Fox Business).
Ding traveled to China from October 29, 2022, to March 25, 2023, to meet investors tied to a firm called Rongshu and later applied for a Chinese government “talent plan” aimed at boosting computing infrastructure. Prosecutors argued these steps showed intent to benefit entities linked to the People’s Republic of China in AI supercomputing and custom chip development (The Register; Los Angeles Times).
Investigation, arrest and legal filings
The initial criminal complaint was filed in March 2024, with superseding indictments returned in 2025. After Google detected access-badge inconsistencies and possible misuse, the company suspended Ding and seized devices; the FBI executed a search warrant on his devices in early January 2024 (The Register).
Judge Vince Chhabria denied defense motions to dismiss, acknowledging questions about whether evidence showed Ding worked for the PRC government specifically but concluding there was sufficient basis to proceed under 18 U.S. Code § 1831 (The Register).
Defense arguments at trial
Ding’s lawyers disputed the government’s claims, arguing there was no proof the stolen information was sold or handed off to the Chinese government or a Chinese entity. The defense also contended Google had inadequate protections and that Ding lacked intent to benefit the PRC. After the verdict, defense attorney Grant Fondo said he was disappointed and indicated the defense would review options, including appeal (Fox Business).
Prosecutors and law enforcement response
“The jury sent a clear message that the theft of this valuable technology will not go unpunished,” said U.S. Attorney Craig H. Missakian.
“A threat to the nation’s technological edge,” the FBI’s San Francisco special agent in charge said, and FBI Assistant Director Roman Rozhavsky called the case the department’s first conviction for AI-related economic espionage (Los Angeles Times; U.S. Department of Justice press release).
Google’s statement and company stance
Google praised the verdict. Lee-Anne Mulholland, Google’s vice president for regulatory affairs, said the company was “grateful to the jury for making sure justice was served today, sending a clear message that stealing trade secrets has serious consequences.” Google declined further comment on investigation details or whether the stolen files reached PRC entities (The Register; Los Angeles Times).
Sentencing and next steps
Ding faces substantial penalties under federal guidelines — up to 10 years for each theft count and up to 15 years for each economic espionage count, plus potential multimillion-dollar fines. Judge Chhabria released Ding pending sentencing, finding he did not appear to be a flight risk; the court set a status conference for February 3, 2026, with formal sentencing filings to follow (Fox Business; Los Angeles Times).
Implications for the United States
Economic impact: The conviction highlights how valuable AI knowledge and hardware designs are to U.S. companies; trade-secret theft can erode market positions and may prompt firms to boost security and tighten oversight (U.S. Department of Justice press release).
Political consequences: The verdict may harden bipartisan support for stronger export controls, vetting of foreign-linked startups, and penalties for economic espionage, and could influence policies around talent programs tied to the PRC (Los Angeles Times).
Practical steps: Businesses should review insider-threat policies, tighten cloud access controls, and increase employee training; investors and incubators may raise due diligence on foreign ties. For policymakers, the case is a prosecutorial model for AI-related economic espionage (The Register; U.S. Department of Justice press release).
Responses in media and analysis
News coverage framed the case as a landmark in policing AI-related theft and technology transfers to China, noting both the volume of documents involved and legal challenges in proving links to foreign governments (The Register; Los Angeles Times; Fox Business).
