San Francisco jury convicts ex-Google engineer of stealing AI secrets for Chinese companies
A San Francisco federal jury convicted Linwei “Leon” Ding, a former Google engineer, on 14 counts of economic espionage and theft of trade secrets for allegedly transferring thousands of pages of confidential Google AI documents to benefit Chinese companies.
Key takeaways
- Defendant: Linwei “Leon” Ding, 38, former Google software engineer.
- Verdict: Guilty on 14 counts — seven counts of economic espionage and seven counts of theft of trade secrets (The Register).
- Scope: Prosecutors say Ding copied more than 1,000 unique files — roughly 14,000 pages — including 105 documents central to the indictment (Fox Business; Help Net Security).
- Significance: The Justice Department’s first AI-related economic espionage conviction (Los Angeles Times).
Conviction details
A federal jury in San Francisco returned guilty verdicts after an 11-day trial, convicting Ding on all fourteen counts brought by prosecutors — seven counts of theft of trade secrets and seven counts of economic espionage. Prosecutors told the court Ding began copying internal Google documents in May 2022 and continued through April 2023 (The Register; Help Net Security).
The government said the material totaled more than 1,000 unique files — about 14,000 pages — and identified 105 documents at the core of the indictment that contained proprietary technical details used to train and deploy advanced AI models (Fox Business).
Employment and access
Google hired Ding in May 2019. In his role he worked on software to optimize GPUs and other hardware for machine-learning tasks at Google and Google Cloud, giving him access to confidential information about Tensor Processing Units (TPUs), Graphics Processing Units (GPUs), and SmartNIC network cards — components central to large-scale AI training and inference (The Register).
The theft and transfers
Prosecutors say Ding began copying internal documents in May 2022, uploading material to personal cloud accounts and taking steps to disguise the activity to evade Google security systems. They allege he transferred more than 2,000 pages of confidential material and later downloaded much of it to a personal computer in December 2023, shortly before resigning (The Register; Help Net Security).
The indictment details use of two personal Google Drive accounts and other staging methods; government experts isolated 105 documents they said would be useful to those building AI supercomputers and custom machine-learning chips (Fox Business).
Connections to Chinese firms
While employed at Google, Ding maintained ties with two Chinese technology companies. Court records show he traveled to China on Oct. 29, 2022, remained there until March 25, 2023, took part in investor meetings and later founded Shanghai Zhisuan Technology Co. Ltd. (Zhisuan) on May 30, 2023 — naming himself CEO. Zhisuan stated it would build a Cluster Management System to speed up machine‑learning workloads (The Register).
Prosecutors presented evidence Ding sought to benefit entities tied to the Chinese government, worked to develop an AI supercomputer and custom chips, and applied to a Chinese government “talent plan,” saying he wanted to help China build computing infrastructure on par with international levels. Federal officials characterized these acts as economic espionage for China (Los Angeles Times).
Discovery, investigation and internal response
Google’s security team flagged Ding after he uploaded files to a second personal Google Drive while in China. Company investigators questioned him; Ding signed a Self‑Deletion Affidavit on Dec. 8, 2023, saying he had not retained Google information. He resigned on Dec. 26, 2023, and three days later Google learned he had presented at a Chinese tech conference as CEO of Zhisuan (The Register).
Investigators uncovered footage showing another employee scanning Ding’s badge to give the appearance he was in the U.S. on days he was in China. Google suspended his access, remotely locked his laptop and seized devices on Jan. 4, 2024; the FBI executed a search warrant Jan. 6, 2024, and a grand jury returned an indictment on March 5, 2024 (The Register).
Official statements and defense
Google: Lee‑Anne Mulholland, vice president of regulatory affairs, thanked the jury and said the verdict sends a message that stealing trade secrets carries serious consequences (The Register).
FBI: San Francisco Special Agent in Charge Sanjay Virmani described the matter as one of national security, warning theft of advanced AI technology threatens the U.S. technological edge and economic competitiveness (Fox Business).
Ding’s defense argued he never sold or used the information and contended Google did not adequately protect the documents. His attorney, Grant Fondo of Goodwin Procter, said the team respected the jury’s verdict but was disappointed (Fox Business).
Sentencing and legal exposure
Ding faces maximum penalties of up to 15 years for each economic espionage count and up to 10 years for each trade secrets count. A superseding indictment in February 2025 expanded charges. U.S. District Judge Vince Chhabria ordered Ding released pending sentencing, finding he was not a flight risk. His next court date was scheduled for Feb. 3, 2026, for sentencing proceedings (The Register; Fox Business).
Why the case matters
Prosecutors framed the trial as a test of how U.S. law protects advanced AI work. The Justice Department noted this is its first conviction on AI‑related economic espionage, a potential precedent for how companies and federal agencies pursue theft tied to artificial intelligence. For readers focused on national security and economic competition, the verdict underscores concerns about protecting high‑value technology from foreign rivals, particularly those linked to the People’s Republic of China (Los Angeles Times).
Implications for Redding, California
Economic and job security
Redding’s economy includes technology service providers, data centers, and defense contractors that rely on secure access to advanced technology. The conviction highlights the risk that ex‑Google engineer AI secrets could reach competitors overseas, prompting local businesses to review cybersecurity practices and employee vetting (The Register).
National security and state interests
Conservative voters and local officials may see the case as evidence to push for stricter federal reviews of foreign investments and closer state coordination to protect sensitive projects tied to defense and critical infrastructure (Los Angeles Times).
Policy and regulation
The verdict could spur stronger enforcement of export controls and talent‑plan screening. Businesses around Redding that work with cloud services, GPUs, or AI infrastructure should monitor regulatory changes and consider compliance audits (Help Net Security).
Community awareness and practical steps
Small and midsize tech employers in Shasta County and the region are encouraged to increase employee training on data handling and adopt basic measures — two‑factor authentication, stricter cloud‑account policies, regular audits of sensitive project access, and prompt incident reporting — to reduce risk. Local colleges might emphasize cybersecurity skills to support a workforce that protects regional tech assets (Help Net Security).
Cultural and political resonance
For conservatives in Redding, the story reinforces skepticism about technology transfers and supports calls for tougher screening of foreign talent programs and investment ties that could enable trade‑secret breaches (The Register).
