01 / Executive brief
Executive summary
For roughly eleven months, Google engineer Linwei Ding moved more than 2,000 pages describing the infrastructure behind Google's large AI systems into personal cloud storage. He copied source material into a text application, converted it to PDFs, and uploaded it while concealing executive and founder roles with AI ventures in China. S1 S2
A jury found that Ding stole seven categories of trade secrets covering TPU and GPU systems, cluster software, networking, and SmartNIC components. The current legal boundary is important: all seven theft convictions remain, but on August 20, 2026 the judge set aside the economic-espionage verdicts because government benefit was not proved beyond a reasonable doubt. The surviving record establishes theft for Ding and a China-based venture, not a PRC state nexus. S1 S2 S4
The written judgment now closes the sentencing gap: 12 months minus one day in prison, concurrent across the seven theft counts, followed by two years of supervised release. It orders $189,098.01 in restitution to Google and a $2,500 fine. Those are amounts ordered, not evidence of collection. S5
Large AI systems depend on tightly integrated compute, storage, and networking infrastructure. Ding's surviving convictions concern confidential designs spanning that stack. Contextual image; not Google equipment from the case.
Federal Bureau of Investigation · Public domain ↗02 / The vignette
What happened
The target was the system behind the model
Ding's access reached beneath AI applications to the infrastructure required to train and operate them at scale: custom accelerator systems, GPU systems, cluster-management software, high-performance networking, and SmartNIC technology. Those components describe how thousands of processors can be made to function as one dependable AI supercomputer. S1 S2
Copying and outside business advanced together
Between May 2022 and April 2023, Ding converted confidential source files into PDFs and uploaded them to a personal account. At the same time, he pursued a chief-technology role and founded his own AI company in China without disclosing those activities to Google. Trial evidence included representations that the venture could build a company 'like Google' and copy and modify Google's technology. S1 S2
Theft survived; espionage did not
The jury returned fourteen guilty verdicts in January 2026. Post-trial review divided them: the court preserved seven trade-secret-theft convictions, then acquitted Ding on seven economic-espionage counts after finding the Chinese-government-benefit element legally insufficient. The later sentence rests on the theft counts; it does not reinstate the acquitted espionage charges. S1 S2 S4 S5
A sentence is not a collected payment
Judgment was imposed September 1 and filed in writing September 8, 2026. The court set a custodial term of 12 months minus one day on each surviving count, to run concurrently, followed by two concurrent years of supervised release. It ordered surrender by December 1, 2026. The document does not establish that surrender has already occurred. S5
The monetary schedule lists $189,098.01 in restitution to Google, a $2,500 fine and a $700 special assessment. The distinction matters: a restitution order records an obligation, not a receipt or the market value of the technology. This file does not claim that Google has collected the amount. S5
03 / Anatomy
How access became transfer
This six-part framework asks the same questions of every file. Each stage carries its own evidence state; a listed stage can be alleged, inferred, interrupted, disputed, or not established. The structure does not manufacture a completed transfer or harm.
- 01
- 02
Access assessed Documented
Seven technical domains
The protected material covered TPU and GPU systems, cluster-management software, networking, and SmartNIC components. S1
- 03
Acquisition assessed Adjudicated or admitted
Uploads disguised
Ding copied source files into a text application, converted them to PDFs, and uploaded more than 2,000 pages to a personal cloud account. S1
- 04
- 05
- 06
04 / Evidence boundary
What is established—and what is not
Established in the record
- The surviving jury verdicts establish that Ding stole seven categories of Google AI trade secrets to benefit himself and a China-based company. S2 S4
- The copying occurred alongside undisclosed outside business activity and investor claims about a Google-like venture; the court found that Ding did not use the documents to build comparable technology. S1 S4
- A federal judge expressly rejected the claim that the evidence proved the required Chinese-government benefit beyond a reasonable doubt. S4
Uncertain, limited, or unresolved
- This review verifies the written sentence, not a completed prison term or collected restitution. Any later appeal, stay, amended judgment or change to the surrender instruction requires a subsequent court record. S5
- The original Justice Department release described all fourteen jury verdicts, but the later court ruling controls this file's current status and eliminates the economic-espionage findings. S1 S4
05 / Sequence
Timeline
-
Outside roles concealed
He pursued executive and founder roles in China while remaining a Google employee. S1
-
Jury verdict
The jury returned guilty verdicts on seven theft and seven economic-espionage counts. S1
-
Theft verdict challenges rejected
The court rejected Ding's post-trial challenges other than the government-benefit question reserved for a separate opinion. S2
-
Sentence imposed
The court imposed 12 months minus one day in prison and two years of supervised release on the surviving theft convictions. The espionage acquittals remain in place. S5
-
Written judgment filed
The seven-page judgment records the sentence, December 1 surrender date, $189,098.01 restitution, $2,500 fine and $700 special assessment. It does not show that restitution has been collected. S5
06 / People and institutions
Who appears in the public record
Linwei Ding
Former Google software engineer and founder of Zhisuan Technology S1 S2 S4
Outcome: Sentenced to 12 months minus one day on seven theft counts; seven economic-espionage counts ended in acquittal; surrender ordered by December 1, 2026. S4 S5
Linwei Ding: The trial judge found the evidence insufficient to prove beyond a reasonable doubt that Ding intended or knew his conduct would benefit the Chinese government. The surviving theft convictions establish benefit to Ding and a China-based venture, not a state nexus. S1 S2 S4
Zhisuan Technology
China-based AI venture Ding was forming while uploading Google material S1 S2 S4
Zhisuan Technology: The trial judge found the evidence insufficient to prove beyond a reasonable doubt that Ding intended or knew his conduct would benefit the Chinese government. The surviving theft convictions establish benefit to Ding and a China-based venture, not a state nexus. S1 S2 S4
Rongshu
China-based technology company that hired Ding as chief technology officer while he remained at Google S1 S2 S4
Rongshu: The trial judge found the evidence insufficient to prove beyond a reasonable doubt that Ding intended or knew his conduct would benefit the Chinese government. The surviving theft convictions establish benefit to Ding and a China-based venture, not a state nexus. S1 S2 S4
Originator / affected institution
Google LLC
Developer and owner of the protected AI-supercomputing architecture and operations information S1 S2 S4
07 / Consequences
Documented, attributed, potential, and unknown consequences
The theft placed seven categories of Google's AI-supercomputing information in Ding's personal possession while he was launching a China-based venture. The court found that he did not use the documents to build comparable technology. S1 S4
The written judgment orders $189,098.01 restitution to Google. That amount is an ordered obligation, not verified recovery, a valuation of the stolen technology or an estimate of wider competitive harm. S5
08 / Hindsight analysis
Where leadership could have seen risk
These are our analytic judgments based on the public record, not court findings. They are framed to improve controls without treating nationality as a risk factor.
Cloud-native theft looked like ordinary work
Reformatting and uploading documents through familiar applications can evade controls aimed only at removable media or raw source-file transfers.
Outside leadership remained undisclosed
A sensitive engineer could pursue executive and founder roles overlapping his employer's technology. Conflict review and access governance were not joined quickly enough.
State nexus was overclaimed
The post-trial ruling shows why institutional risk teams must distinguish a China-based competitor and talent-plan activity from proof of government direction or benefit.
09 / Apply the lesson
Actions leaders can take
- companies
Detect content transformation
Monitor unusual print-to-PDF, copy-paste, mass document rendering, and personal-cloud upload patterns around crown-jewel repositories, with privacy and employment-law review.
- both
Join conflicts to access
Require disclosure of overlapping founder, executive, advisory, and fundraising roles and route relevant conflicts to a documented least-privilege access review.
- companies
Separate conduct from attribution
Investigate copying and conflicts based on logs and behavior; assign government nexus only when evidence supports it, and keep that conclusion independently reviewable.
10 / Source record
Sources
Links point to the public record reviewed for this file. Government releases can summarize court proceedings but remain government-authored sources; the source note identifies those limits.
- S1 official summary government release
Former Google Engineer Found Guilty of Economic Espionage and Theft of Confidential AI Technology ↗
U.S. Department of Justice · Published Jan 30, 2026 · Retrieved Aug 23, 2026
Jury-verdict and trial-evidence summary; the later partial acquittal supersedes its description of the economic-espionage outcome.
- S2 adjudicative record court record
United States v. Ding, Order on Motion for Judgment of Acquittal or New Trial ↗
U.S. District Court for the Northern District of California via GovInfo · Published Jun 29, 2026 · Retrieved Aug 23, 2026
Court order sustaining the theft verdicts and reserving the government-benefit question for a later opinion.
- S3 independent reporting reputable reporting
Ex-Google Engineer's Conviction for Stealing AI Secrets Partially Overturned ↗
Reuters via StreetInsider · Published Aug 20, 2026 · Retrieved Aug 23, 2026
Contemporaneous report on the August 20 acquittal of the economic-espionage counts, the surviving theft convictions and then-pending sentencing; superseded on sentencing by S5.
- S4 adjudicative record court record
United States v. Ding, Order Granting Judgment of Acquittal for Economic Espionage Counts ↗
U.S. District Court for the Northern District of California via GovInfo · Published Aug 20, 2026 · Retrieved Aug 25, 2026
Locator: United States v. Ding, No. 3:24-cr-00141, ECF No. 447
Controlling post-trial order acquitting Ding on the seven economic-espionage counts, preserving the seven theft convictions, and limiting claims about PRC-government benefit and downstream technical use.
- S5 adjudicative record court record
United States v. Ding, Judgment in a Criminal Case ↗
U.S. District Court for the Northern District of California via CourtListener / RECAP · Published Sep 8, 2026 · Retrieved Sep 9, 2026
Locator: No. 3:24-cr-00141-VC, ECF No. 459; p. 1 (counts and judgment dates), pp. 2–3 (custody and supervision), pp. 6–7 (monetary obligations).
Sentence imposed September 1; written judgment filed September 8. Controls the fine and restitution amounts. Records obligations and a future surrender date, not proof of payment or surrender; does not resolve later appeals or amendments.
12 / Reference
Cite this dossier
Use the permanent URL and review date below so readers can identify the version of the public-source record you consulted.
ChinaSteals. “A Google engineer copied AI-supercomputer secrets while building China-based ventures.” CS-006. Published Aug 23, 2026; last reviewed Sep 9, 2026. https://chinasteals.com/cases/linwei-ding-google-ai/