Skip to content

Crime and JusticeCalifornia6 min read

Ex-Google Engineer Linwei Ding Convicted of AI Espionage in San Francisco

Former Google software engineer Linwei Ding found guilty of economic espionage and theft of AI trade secrets, marking the U.S. Justice Department's first AI espionage conviction.

Share

Topics

Ex‑Google Engineer Convicted in Landmark AI Espionage Case, Jury Finds He Stole Google AI Trade Secrets for China‑Linked Firms

 

San Francisco, California (High Desert News Online) – A federal jury in San Francisco convicted former Google engineer Linwei (Leon) Ding on Jan. 29, 2026, of stealing confidential AI technology and committing economic espionage, marking a landmark DOJ victory in an AI-related trade secrets case.

 

Key takeaways

  • Linwei (Leon) Ding, 38, former Google software engineer was convicted Jan. 29, 2026.
  • Guilty on 14 counts — seven counts of theft of trade secrets and seven counts of economic espionage, after an 11‑day federal trial in San Francisco; reported by Los Angeles Times and The Register.
  • Prosecutors say he copied roughly 1,000 unique files (about 14,000 pages, including 105 core documents) and moved them to personal cloud accounts, per reporting by The Register.
  • A status conference is scheduled for Feb. 3, 2026; Ding remains released pending further proceedings.

 

Case overview

What happened: On Jan. 29, 2026, a federal jury in San Francisco found Linwei (Leon) Ding guilty on 14 counts — seven counts of theft of trade secrets and seven counts of economic espionage. The government framed the verdict as a major step in protecting U.S. technology and intellectual property; the Department of Justice issued a press release describing the conviction.

 

Background: role at Google and what was taken

Ding was hired by Google on May 13, 2019 and worked on software to help GPUs run machine‑learning tasks more efficiently at Google and Google Cloud supercomputing data centers, according to reporting from The Register. Prosecutors said that work gave him access to proprietary designs and operational details for Tensor Processing Units (TPUs), Graphics Processing Units (GPUs) and SmartNIC network cards, which are crucial for training and running advanced AI models (Los Angeles Times).

 

Theft, concealment and transfer

Prosecutors told jurors Ding began copying sensitive internal Google documents in May 2022 and continued through April 2023. They presented technical logs, file counts and forensic evidence showing roughly 1,000 unique files (about 14,000 pages, including 105 core documents) were removed and uploaded to personal cloud accounts, per The Register. Google detected suspicious uploads while Ding was in China between Oct. 29, 2022, and March 25, 2023 (Los Angeles Times).

The government also presented evidence that Ding took steps to conceal his activity: he had a colleague swipe his badge to create a false appearance of being in the U.S., signed an affidavit on Dec. 8, 2023, denying retention of Google data, and then had his access suspended. Google seized devices on Jan. 4, 2024, and the FBI executed a search warrant on Jan. 6, 2024; indictment and superseding indictments followed (The Register).

 

Federal prosecutors presented evidence that Ding held roles with China‑based firms while planning to build AI supercomputing clusters and custom machine‑learning chips. He served as a chief technical officer for at least one China‑based company and founded Shanghai Zhisuan Technology Co. Ltd. by May 30, 2023, and presented himself as CEO at investor and industry events. The government argued those activities showed an intent to benefit PRC‑linked entities (Fox Business reported related aspects).

 

Defense case and legal questions

Ding’s lawyers disputed the government’s narrative, asserting he never turned over materials to foreign entities, had no specific intent to assist the PRC government, and that Google failed to secure the documents adequately. The defense emphasised gaps in proof about downstream use of the files (The Register; Los Angeles Times).

 

Potential penalties and next steps

Statutory maximums include up to 10 years per theft count and up to 15 years per espionage count, creating substantial theoretical exposure, though the actual sentence will be set later (The Register). A status conference is scheduled for Feb. 3, 2026; Ding remains released pending further proceedings.

 

Reactions from officials and Google

The Justice Department called the verdict a major step in protecting U.S. technology in a public statement (DOJ press release). U.S. Attorney Craig H. Missakian emphasised that theft of U.S. intellectual capital is punishable, and the FBI warned that theft of AI know‑how threatens the U.S. technology edge (Fox Business).

A Google spokeswoman, Lee‑Anne Mulholland, said the verdict shows that “stealing trade secrets has serious consequences,” and noted the company cooperated with investigators (Los Angeles Times; The Register). Defense counsel Grant Fondo said the team was disappointed and will review options, including appeals (Fox Business).

 

Status of the stolen material

Court filings reflect uncertainty about whether the removed documents were fully transferred or used by the China‑linked entities. The government presented evidence of downloads and transfers; the defense highlighted gaps about downstream use. The exact status of the proprietary material remains part of the ongoing record (The Register).

 

Implications for The High Desert, California

Economic impact

The High Desert region — including Victorville and Lancaster — has attracted infrastructure projects that rely on cheap land and renewable power. The conviction highlights risks to companies and local economies when intellectual property is exposed and may prompt greater scrutiny from partners and investors, possibly slowing projects but increasing demand for cybersecurity services and audits.

 

Political and regulatory consequences

For moderate conservative readers in the High Desert, the case underscores bipartisan concerns about protecting U.S. technology and supply chains. Local officials may face pressure to tighten industrial security, screen foreign investment more carefully, and pursue grants to harden cyber defenses (Los Angeles Times).

 

Social and workforce effects

The verdict could affect hiring and retention in local tech roles. Employers should strengthen onboarding, non‑disclosure agreements and monitoring of sensitive work. Community colleges and vocational centers can add curricula on IP protection and cybersecurity to prepare a trusted local workforce.

 

Cultural relevance and community trust

The High Desert’s mix of conservative values, small businesses and defense contractors may view the case as a call for vigilance in guarding American innovation while balancing openness to foreign talent and investment. Community leaders can use the moment to explain lawful collaboration versus unlawful theft to preserve employer‑worker trust.

 

Practical applications for residents and businesses

 

Reporting and records

This article draws on court filings and reporting from government and media sources. Primary sources and reporting include:

 

“Theft of U.S. intellectual capital will be punished,” said U.S. Attorney Craig H. Missakian, reflecting the Justice Department’s framing of the verdict as protective of national technology interests (DOJ statement).

Share

Topics

Aaron Yates

Aaron Yates is a senior national crime and justice reporter for Times Media Service, based in the Washington bureau. Yates covers criminal investigations, federal prosecutions, fraud and the courts, following law enforcement agencies and the legal issues surrounding major cases nationwide. Yates holds a master's degree in criminal justice and grew up in Bridgeport, Connecticut.

Write to Aaron