Google Engineer Convicted of Stealing AI Secrets for China

The case and charges

Prosecutors say Ding joined Google on May 13, 2019, to work on supercomputing data centers that train and deploy advanced AI models using specialized hardware such as Tensor Processing Units (TPUs), Graphics Processing Units (GPUs), and SmartNICs. The government contends he had access to detailed, proprietary technical files about those systems and removed them over an extended period.

An 11-day trial in U.S. District Court in San Francisco ended with a unanimous jury verdict on Jan. 29, 2026. The Department of Justice called the outcome the first U.S. economic-espionage conviction tied to artificial intelligence; see the DOJ press release and Los Angeles Times coverage for court details.

How prosecutors say he stole secrets

According to evidence described at trial, Ding copied more than 1,000 unique files — roughly 14,000 pages — including 105 core documents between May 2022 and April 2023. Prosecutors presented logs showing uploads to personal cloud accounts (including non‑corporate Google Drive) and steps taken to disguise transfers to evade detection (The Register).

They also say Ding downloaded confidential documents to a personal computer shortly before resigning on Dec. 26, 2023, and booking a one-way flight to Beijing. Prosecutors presented evidence he used another employee’s badge to misrepresent his physical location while traveling in China from Oct. 29, 2022, to March 25, 2023 (reporting).

Links to China and company ties

Court filings and testimony tied Ding to two China-related firms. He was publicly listed as founder or officer of Shanghai Zhisuan Technology Co. Ltd., which pitched building AI supercomputer clusters and replicating advanced computing stacks. Prosecutors said Ding sought to help organizations in China build advanced AI infrastructure and had applied to a Chinese government talent program to support technology development (The Register; Fox Business).

The defense position

Defense counsel disputed intent, arguing prosecutors failed to prove Ding shared trade secrets with a foreign government or intended to benefit the Chinese government specifically. The defense emphasized alleged shortcomings in Google’s internal controls and said Ding had not sold or demonstrated use of the material. Attorney Grant Fondo said the team respected the jury’s decision but was disappointed (Fox Business).

“We respect the jury’s verdict,” defense counsel said, while continuing to challenge the government’s portrayal of intent and use.

Judge rulings and pretrial issues

Judge Vince Chhabria denied motions to dismiss key charges and questioned whether the evidence met the statutory requirement that espionage charges prove intent to benefit “China as a country” rather than private Chinese companies. Despite those pretrial concerns, the jury returned guilty verdicts. The judge released Ding pending sentencing, finding him not a flight risk at this stage (reporting).

Sentencing and next steps

Ding faces statutory maximums of up to 10 years per theft count and up to 15 years per economic-espionage count, plus potential fines set by sentencing guidelines. A status conference is scheduled for Feb. 3, 2026, with further sentencing proceedings to follow. Court filings did not make clear whether all copied files remain with any foreign entity, and Google has declined to disclose detailed recovery information (The Register; LA Times).

Reactions from officials and companies

Google officials emphasized the seriousness of the verdict. Lee-Anne Mulholland said the company was “grateful to the jury” and stressed that stealing trade secrets has serious consequences. The Department of Justice framed the case as a signal that the U.S. will protect intellectual property; U.S. Attorney Craig H. Missakian said the jury sent a “clear message” about protecting U.S. innovation. FBI officials warned theft of advanced computing details threatens the U.S. technological edge (LA Times; DOJ).

Investigative notes on evidence handling

Prosecutors relied on logs of file transfers, cloud account records, travel data, and public presentation materials tying Ding to a China-based company. They presented a timeline of access and removal. The defense highlighted intent and monitoring shortcomings; the jury’s verdict indicates jurors credited the government’s narrative that theft was intended to aid foreign-linked entities (The Register; LA Times).

Implications for Fresno, California

Economic and workforce effects: Though Fresno’s tech sector is smaller than Silicon Valley’s, the conviction highlights supply-chain and IP risks that could affect local employers and startups that rely on cloud services and AI research. Businesses may expand cybersecurity and data-governance roles (DOJ).

Local research and education: Fresno colleges may use the case to teach ethics, export controls, and legal risks tied to proprietary research, increasing emphasis on cybersecurity in curricula (LA Times).

Practical steps: Local stakeholders are advised to review access controls, enforce least-privilege policies, audit cloud storage, and expand staff training; chambers and legal advisers should prepare guidance on export controls and partnership best practices (DOJ).

Court records and source material

This report draws on court filings and major news reporting, including the Department of Justice press release, coverage from the Los Angeles Times, Fox Business, and The Register.

What this means going forward

The jury’s verdict in the Linwei Ding trial marks a significant development in how U.S. authorities handle alleged theft of AI-related trade secrets. Corporations and local governments alike will likely increase scrutiny of data access, monitoring, and export-control compliance as federal enforcement evolves.