Skip to main content
Mallory
Mallory

Ex-Google Engineer Convicted of Economic Espionage and AI Trade Secret Theft

economic espionagetrade secretsintellectual propertyinsider threatartificial intelligencedocument exfiltrationdepartment of justicegoogle
Updated February 2, 2026 at 08:01 PM7 sources
Ex-Google Engineer Convicted of Economic Espionage and AI Trade Secret Theft

Get Ahead of Threats Like This

Know if you're exposed — before adversaries strike.

A U.S. federal jury convicted former Google engineer Linwei Ding (aka Leon Ding) on 14 counts spanning economic espionage and theft of trade secrets after prosecutors said he stole thousands of confidential Google documents tied to the company’s artificial intelligence technology for the benefit of a China-based startup. The U.S. Department of Justice framed the case as protection of U.S. intellectual property and national security, alleging the theft was intended to advantage the People’s Republic of China (PRC).

Reporting indicates Ding began exfiltrating internal materials as early as May 2022, including by copying content into the Apple Notes app, converting it to PDFs, and uploading it to a personal cloud account. The stolen information reportedly covered sensitive AI infrastructure and chip-related technology, including details associated with Google’s AI supercomputing environment (e.g., data center/cluster management components) and hardware/software used to run AI workloads (including TPU/GPU systems and related networking components). Ding was initially indicted in March 2024, with subsequent superseding indictments expanding the alleged timeframe and charges; the case is cited as USA v. Ding, N.D. Cal., No. 3:24-cr-00141.

Related Entities

Related Stories

China-Linked Espionage Targeting U.S. Government and Technology Talent

China-Linked Espionage Targeting U.S. Government and Technology Talent

U.S. authorities and researchers are highlighting **China-linked espionage** that increasingly leverages online recruitment and employment channels to access sensitive information. Reporting on recent federal cases describes foreign intelligence services posing as consulting firms, research groups, or recruiters to approach current and former U.S. government personnel—often starting via email or job platforms and escalating through staged interviews, fake websites, and payment offers—to solicit **classified or sensitive information**; multiple Justice Department actions in 2025 reportedly involved such virtual-first recruitment approaches. Separately, a former Google engineer, **Linwei Ding**, was found guilty of **economic espionage and trade secret theft** after prosecutors said he exfiltrated over 2,000 pages of confidential AI supercomputing documents (including TPU/GPU architecture details, orchestration software, SmartNIC networking designs, and internal system configurations) and uploaded them to a personal cloud account while maintaining undisclosed ties to China-based companies and engaging with a Shanghai-sponsored talent program. Broader context from CSIS’ long-running survey of Chinese espionage cases underscores that these incidents fit a sustained pattern since 2000 spanning both **human intelligence** and **cyber-enabled theft** targeting U.S. government and commercial technologies, while noting open-source case lists likely undercount the true scope.

1 months ago
Former Google Engineers Indicted for Alleged Theft of Chip Security and Cryptography Trade Secrets Sent to Iran

Former Google Engineers Indicted for Alleged Theft of Chip Security and Cryptography Trade Secrets Sent to Iran

US federal prosecutors indicted **Samaneh Ghandali** and **Soroor Ghandali** (former Google engineers) and **Mohammadjavad Khosravi** (Samaneh’s husband, employed at another unnamed tech firm) for alleged **trade secret theft**, **conspiracy**, and **obstruction of justice** tied to the exfiltration of sensitive processor-related information. The Department of Justice alleges the trio used their roles at multiple Silicon Valley companies to access and steal confidential documents covering **processor security** and **cryptography**, and moved the material to unauthorized third-party and personal locations, including destinations linked to **Iran**. Investigators allege the activity included transferring large volumes of internal files to external communications platforms and sharing them in channels associated with the defendants, with additional copies later found on personal devices and systems connected to the group. Prosecutors also claim the defendants attempted to conceal the scheme through actions such as destroying records, making false statements, and photographing screens to avoid direct document transfers. Google said it enhanced safeguards and alerted law enforcement after discovering the incident; the alleged stolen trade secrets reportedly included information related to Google’s **Tensor** processor used in *Pixel* phones.

3 weeks ago

US Charges Over Smuggling of Nvidia AI Chips and Supercomputers to China

US federal authorities have charged four individuals—Hon Ning Ho, Brian Curtis Raymond, Cham Li, and Jing Chen—with conspiring to illegally export restricted Nvidia AI chips and supercomputers to China. The indictment alleges that the group used shell companies, falsified invoices, and covert shipping routes through Malaysia and Thailand to bypass US export controls, which have been in place since October 2022 to prevent advanced AI hardware from reaching China. Prosecutors claim the operation involved at least four export attempts, two of which succeeded, resulting in the shipment of approximately 400 Nvidia A100 GPUs to China, while two other attempts involving HPE supercomputers with Nvidia H100 accelerators and 50 Nvidia H200 GPUs were disrupted by law enforcement. The US government asserts that these export controls are critical to limiting China's access to advanced AI technology, which could be used for military modernization and surveillance. The indictment highlights the use of a Florida-based sham real estate company, Janford Realtor LLC, as a front for the purchases, and details how the defendants allegedly doctored customs paperwork to facilitate the smuggling. The case is part of a broader crackdown on efforts to circumvent US technology restrictions, as authorities seek to prevent the transfer of high-performance computing hardware to Chinese entities.

3 months ago

Get Ahead of Threats Like This

Mallory continuously monitors global threat intelligence and correlates it with your attack surface. Know if you're exposed — before adversaries strike.