Former Google Engineer Convicted of Stealing AI Trade Secrets, Jury Finds He Spied for China-Linked Firms
A San Francisco federal jury on January 29, 2026, convicted former Google engineer Linwei “Leon” Ding on 14 counts for stealing confidential AI technology and transferring critical Google AI data to benefit China-linked entities.
Key takeaways
- Convicted on 14 counts: jury found Ding guilty of seven counts of theft of trade secrets and seven counts of economic espionage — economic espionage.
- Large volume of files copied: prosecutors say Ding copied more than 1,000 unique files — roughly 14,000 pages — detailing Google’s AI hardware, software and networking systems — networking systems.
- Ties to China-based firms: the government alleges Ding worked with Rongshu and Shanghai Zhisuan Technology Co. Ltd. to benefit PRC entities.
- Sentencing exposure: Ding faces decades in prison under federal guidelines; a status conference is set for February 3, 2026.
Main coverage
Background and charges
Employment and access: Prosecutors say Ding was hired by Google on May 13, 2019, as a software engineer working on code and systems for GPUs and other hardware used in machine learning at Google and Google Cloud data centers — reporting sourced to The Register and Fox Business. He had access to sensitive information about Tensor Processing Units (TPUs), Graphics Processing Units (GPUs) and SmartNIC network interface cards — the equipment that powers AI supercomputing workloads.
Alleged theft timeline: Federal prosecutors presented evidence that Ding began copying confidential Google documents in May 2022 and continued through April 2023, uploading files to personal cloud accounts and disguising transfers to evade Google security systems. The indictment alleges he downloaded material to a personal computer shortly before resigning on December 26, 2023 — reporting from The Register and HelpNetSecurity.
Timeline of key events
- May 2022: Prosecutors say Ding began copying sensitive Google documents — Fox Business.
- Oct. 2022 – Mar. 2023: Ding traveled to China for investor meetings tied to Rongshu, and by May 30, 2023 had founded Shanghai Zhisuan Technology Co. Ltd. — reported by The Register.
- Dec. 8, 2023: Prosecutors allege Ding uploaded more files from China to a second personal Google Drive and signed an affidavit falsely denying retention of Google data — The Register.
- Late Dec. 2023 – Jan. 2024: Google flagged Ding after a public presentation listing him as Zhisuan’s CEO, suspended his access and seized devices; the FBI executed a search warrant on Jan. 6, 2024 — reported by The Register and Los Angeles Times.
- March 5, 2024: Initial grand jury indictment — The Register.
- Feb. 4, 2025 & Sept. 2025: Superseding indictments expanded the charges — Fox Business and The Register.
- Jan. 2026: After an 11-day trial, a federal jury returned a unanimous guilty verdict on all counts — The Register and the Department of Justice.
Evidence presented at trial
Prosecutors introduced logs, file lists and digital evidence tying Ding to the transfers, estimating more than 2,000 pages of sensitive AI hardware, software and networking data taken from Google systems, including 105 “core” documents the government said were central to Google’s competitive edge — reported by The Register and HelpNetSecurity.
Surveillance and access anomalies: Surveillance footage and internal records were shown to the jury. Prosecutors highlighted apparent badge-scan fraud in which another employee scanned Ding’s badge to create the appearance he was in the U.S. while he was in China — The Register.
Connections to China and alleged intent
The trial examined Ding’s ties to two China-based firms. Prosecutors allege he served as CTO at Rongshu and founded Shanghai Zhisuan Technology Co. Ltd. to build tools for managing AI clusters and machine-learning workloads, seeking to sell or transfer knowledge to benefit Chinese organizations — covered by The Register and Fox Business.
Prosecutors argued Ding misled investors and partners about how quickly Google-level systems could be replicated; they asserted the stolen material would accelerate development of AI supercomputers and custom chips in China, posing a threat to U.S. technology leadership — reporting from The Register and HelpNetSecurity.
Defense position and judge’s rulings
Defense: Ding’s attorney, Grant Fondo, contended he never sold or used the data and argued Google failed to protect its own information; Fondo described the verdict as disappointing — Fox Business.
Judge’s action: U.S. District Judge Vince Chhabria released Ding pending sentencing, concluding he was not a flight risk; a status conference is scheduled for February 3, 2026 — noted by Fox Business and the U.S. Attorney’s Office.
Statements from government and Google
“The jury’s verdict sends a message that theft of valuable U.S. technology will not go unpunished,” said U.S. Attorney Craig H. Missakian, per the Department of Justice.
FBI warning: FBI Special Agent Sanjay Virmani cautioned that such thefts threaten America’s technological edge and competitiveness with the People’s Republic of China — Fox Business.
Google: Lee-Anne Mulholland, vice president of regulatory affairs at Google, thanked the jury and said the verdict shows stealing trade secrets has serious consequences — statements reported by The Register and the Los Angeles Times.
Sentencing exposure
Under federal sentencing rules, Ding faces up to 10 years in prison for each theft count and up to 15 years for each economic espionage count; the theoretical maximum across counts is extremely high, though actual sentences typically are lower and depend on guidelines and judge discretion — analysis cited in The Register and HelpNetSecurity.
Implications for United States
Economic and national security: The case underscores growing U.S. concern about intellectual property theft tied to advanced AI work. Prosecutors and the FBI framed the verdict as a warning that theft of trade secrets that could aid rival nations will be pursued aggressively — per the DOJ and Fox Business.
Corporate policies and hiring: Tech firms may limit remote work, increase monitoring, and tighten access to proprietary systems. Companies may demand more stringent background checks for employees with access to high-value AI designs — reporting from Los Angeles Times and The Register.
Legal and regulatory ripple effects: This conviction — the DOJ’s first tied to AI economic espionage — could spur more criminal investigations and prosecutions when companies suspect insider theft linked to foreign competitors and may influence lawmakers and regulators to adopt clearer rules on AI-sensitive information sharing — DOJ.
Scientific collaboration and diplomacy: Experts warn an overly restrictive approach could slow legitimate scientific exchange; policymakers will face pressure to balance protecting national interests with supporting innovation and partnerships — analysis by HelpNetSecurity.
Practical note: Companies building AI systems should expect tighter security audits and more rigorous compliance programs. Engineers and contractors should know that taking sensitive information, even if not sold, can trigger criminal charges and long prison sentences — coverage by The Register and Fox Business.
