{ "schemaVersion": "1.0", "generatedFrom": "published case records", "caseCount": 27, "cases": [ { "slug": "sinovel-amsc", "caseId": "CS-001", "title": "Sinovel turned a supplier relationship into stolen wind-turbine software", "shortTitle": "Sinovel — AMSC", "deck": "A customer owing more than $800 million recruited the head of its supplier’s automation engineering department, obtained proprietary source code, and used compiled versions in turbines.", "finding": "A federal jury convicted Sinovel Wind Group of conspiring to steal AMSC trade secrets, trade-secret theft, and wire fraud. The court found that AMSC’s losses from the theft exceeded $550 million.", "executiveSummary": [ { "text": "Sinovel was not an unknown outsider probing AMSC from a distance. It was one of the American supplier's largest customers, committed to buy more than $800 million in wind-turbine products and services. That commercial dependence gave Sinovel both a reason to understand AMSC's control software and a powerful incentive to escape the relationship.", "sourceIds": [ "S1" ] }, { "text": "A federal jury found that Sinovel employees recruited AMSC automation chief Dejan Karabasevic, obtained proprietary source code he secretly downloaded, and used software compiled from it in turbines installed in Massachusetts. The court found more than $550 million in AMSC losses; Sinovel was convicted of conspiracy, trade-secret theft, and wire fraud.", "sourceIds": [ "S1" ] } ], "narrative": [ { "heading": "A customer with leverage", "paragraphs": [ { "text": "AMSC supplied the power-converter systems and control software that helped Sinovel's turbines operate. The relationship was commercially intimate and enormous: Sinovel had contracted for more than $800 million in AMSC products and services. The same integration that made the partnership valuable also revealed where the critical dependency sat—in software AMSC controlled.", "sourceIds": [ "S1" ] } ] }, { "heading": "The insider and the source code", "paragraphs": [ { "text": "Trial evidence showed that Sinovel personnel persuaded Karabasevic, the head of automation engineering at AMSC Windtec, to leave his employer and secretly download AMSC's proprietary control-system source code. On March 7, 2011, the code moved from an AMSC computer in Wisconsin to a computer in Klagenfurt, Austria—a trusted engineer turning customer knowledge into a portable substitute for the supplier.", "sourceIds": [ "S1" ] } ] }, { "heading": "Copied software became operating equipment", "paragraphs": [ { "text": "The transfer did not end as files on a computer. Investigators traced compiled versions of the stolen code into Sinovel turbines commissioned in Massachusetts. After an eleven-day trial, the jury convicted the company on every charged count; the sentence included the statutory maximum fine, probation, restitution, and additional victim payments. The cited record proves corporate theft, but does not establish PRC government direction.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/wind-turbine.jpg", "alt": "Close view looking upward at the nacelle and blades of a large wind turbine", "caption": "Modern wind turbines depend on control software as much as steel and fiberglass. In this case, copied source code was compiled into software found in operating Sinovel turbines. Contextual image; not a pictured turbine from the case.", "credit": "Keith Evans", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Close_Up_Of_Wind_Turbine_-_geograph.org.uk_-_366947.jpg", "license": "CC BY-SA 2.0", "licenseUrl": "https://creativecommons.org/licenses/by-sa/2.0/", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Corporate jury conviction on all charged counts; $1.5 million statutory maximum fine, negotiated restitution, additional victim payments, and probation imposed in 2018.", "statusDate": "2018-07-06", "lastReviewed": "2026-08-23", "nextReview": "2027-02-23", "stateNexus": "none_established", "stateNexusSummary": "The public trial and sentencing records establish conduct by Sinovel and named employees, but the cited records do not establish direction by the PRC government.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "United States", "Austria" ], "countries": [ "United States", "China", "Austria", "Serbia" ], "period": "2011–2018", "accessVectors": [ "Customer–supplier relationship", "Privileged employee access", "Recruitment of key personnel" ], "methods": [ "Insider recruitment", "Source-code exfiltration", "Unauthorized copying", "Product integration" ], "assets": [ "Wind-turbine control source code", "Power-converter software", "Automation engineering know-how" ], "actors": [ { "name": "Sinovel Wind Group LLC", "role": "AMSC customer and Chinese wind-turbine manufacturer", "outcome": "Convicted by a U.S. federal jury; fined and ordered to make negotiated restitution and victim payments" }, { "name": "Su Liying", "role": "Deputy director of Sinovel’s research and development department; charged co-defendant" }, { "name": "Zhao Haichun", "role": "Sinovel technology manager; charged co-defendant" }, { "name": "Dejan Karabasevic", "role": "Former head of automation engineering at AMSC Windtec; charged co-defendant" } ], "originators": [ { "name": "AMSC (formerly American Superconductor Inc.)", "role": "Developer and owner of the wind-turbine control technology" }, { "name": "AMSC Windtec GmbH", "role": "AMSC subsidiary that employed Karabasevic in Austria" } ], "transferChain": [ { "stage": "relationship", "label": "Major customer", "detail": "Sinovel had contracted to buy more than $800 million in AMSC products and services for its wind turbines.", "sourceIds": [ "S1" ] }, { "stage": "access", "label": "Trusted engineer", "detail": "Karabasevic led automation engineering at AMSC Windtec and had access to proprietary control software.", "sourceIds": [ "S1" ] }, { "stage": "acquisition", "label": "Recruit and extract", "detail": "Trial evidence showed Sinovel employees persuaded Karabasevic to leave AMSC, join Sinovel, and secretly download source code.", "sourceIds": [ "S1" ] }, { "stage": "movement", "label": "Code crossed borders", "detail": "The source code was downloaded from an AMSC computer in Wisconsin to a computer in Klagenfurt, Austria.", "sourceIds": [ "S1" ] }, { "stage": "use", "label": "Software deployed", "detail": "Sinovel commissioned turbines in Massachusetts containing software compiled from the stolen AMSC source code.", "sourceIds": [ "S1" ] }, { "stage": "consequence", "label": "Supplier displaced", "detail": "The court found more than $550 million in AMSC losses; prosecutors and AMSC attributed almost 700 lost jobs and more than $1 billion in lost shareholder equity to the theft.", "sourceIds": [ "S1" ] } ], "timeline": [ { "date": "2011-03-07", "label": "Source code downloaded", "detail": "Trial evidence showed Karabasevic secretly downloaded AMSC source code from Wisconsin to Austria.", "sourceIds": [ "S1" ] }, { "date": "2013-06-27", "label": "Federal charges announced", "detail": "The United States charged Sinovel and three individuals with conspiracy, trade-secret theft, and related offenses.", "sourceIds": [ "S2" ] }, { "date": "2018-01-24", "label": "Jury conviction", "detail": "After an eleven-day trial, the jury convicted Sinovel of conspiracy, trade-secret theft, and wire fraud.", "sourceIds": [ "S1" ] }, { "date": "2018-07-06", "label": "Sentence imposed", "detail": "The court imposed the maximum statutory fine, probation, negotiated restitution, and additional victim payments.", "sourceIds": [ "S1" ] } ], "established": [ { "text": "Sinovel was convicted after trial, not merely accused, of conspiracy to commit trade-secret theft, theft of trade secrets, and wire fraud.", "sourceIds": [ "S1" ] }, { "text": "Trial evidence traced the copied source code from an AMSC computer through Karabasevic to software installed in Sinovel turbines in Massachusetts.", "sourceIds": [ "S1" ] }, { "text": "At the time of the theft, Sinovel was both a major customer and a direct beneficiary of AMSC’s proprietary technology.", "sourceIds": [ "S1" ] } ], "uncertainties": [ { "text": "The cited trial and sentencing materials do not establish that PRC officials directed or sponsored the scheme; this file therefore records no established state nexus.", "sourceIds": [ "S1" ] }, { "text": "The public sources reviewed here do not establish final case outcomes for each charged individual, so this file does not assign them an adjudicated outcome.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Before trial, Sinovel challenged service and personal jurisdiction and argued that adjudication should occur in China; the Seventh Circuit rejected its request for immediate appellate relief without deciding the merits of the criminal charges.", "sourceIds": [ "S3" ] } ], "harm": [ { "text": "The sentencing court found that AMSC’s losses from the theft exceeded $550 million.", "sourceIds": [ "S1" ], "qualifier": "court_found" }, { "text": "Prosecutors and AMSC attributed almost 700 lost jobs and more than $1 billion in lost shareholder equity to the theft and resulting financial hardship.", "sourceIds": [ "S1" ], "qualifier": "attributed_estimate" }, { "text": "Sinovel avoided paying for contracted technology by using software compiled from stolen AMSC source code in its own turbines.", "sourceIds": [ "S1" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "One role concentrated exceptional access", "detail": "A senior engineering leader could reach high-value source code and became the recruitment target. Privileged technical access deserved tighter segmentation and monitoring.", "hindsight": true }, { "title": "Commercial dependence became technical exposure", "detail": "A strategically important customer had deep product knowledge and leverage. Customer risk and insider risk were treated as separate problems when they reinforced each other.", "hindsight": true }, { "title": "Compiled-code misuse surfaced downstream", "detail": "Builders examining turbines in Massachusetts helped connect copied code to deployed products. Earlier integrity checks and technical telemetry could have shortened detection time.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Segment crown-jewel source code", "detail": "Separate source repositories, build systems, and exportable binaries by role; require time-bounded elevation and preserve high-fidelity download and compilation logs." }, { "audience": "companies", "title": "Pair account risk with insider risk", "detail": "When a customer disputes payments, recruits key staff, or seeks deeper technical access, trigger a joint commercial, legal, counterintelligence, and security review." }, { "audience": "both", "title": "Pre-plan departures from sensitive teams", "detail": "Use lawful access reviews, prompt credential changes, device preservation, and targeted log analysis when personnel with crown-jewel access announce a move to a customer or competitor." }, { "audience": "companies", "title": "Fingerprint high-value software", "detail": "Maintain reproducible builds, code provenance, watermarking where appropriate, and a rapid forensic path for comparing suspect products with protected software." } ], "sources": [ { "id": "S1", "title": "Court Imposes Maximum Fine on Sinovel Wind Group for Theft of Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2018-07-06", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/court-imposes-maximum-fine-sinovel-wind-group-theft-trade-secrets", "type": "government_release", "note": "Sentencing release summarizing the jury verdict, trial evidence, court loss finding, and sentence." }, { "id": "S2", "title": "Sinovel Corporation and Three Individuals Charged in Wisconsin with Theft of AMSC Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2013-06-27", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/sinovel-corporation-and-three-individuals-charged-wisconsin-theft-amsc-trade-secrets", "type": "government_release", "note": "Charging-stage source; allegations in this release are not treated as findings unless later established at trial." }, { "id": "S3", "title": "United States v. Sinovel Wind Group Co., Ltd., No. 14-3013", "publisher": "U.S. Court of Appeals for the Seventh Circuit via Justia", "published": "2015-07-23", "retrieved": "2026-08-23", "url": "https://law.justia.com/cases/federal/appellate-courts/ca7/14-3013/14-3013-2015-07-23.html", "type": "court_record", "note": "Pretrial procedural opinion describing Sinovel’s jurisdictional and comity arguments." } ] }, { "slug": "yanjun-xu-ge-aviation", "caseId": "CS-002", "title": "An intelligence officer used a university invitation to target GE Aviation technology", "shortTitle": "Yanjun Xu — GE Aviation", "deck": "A Chinese Ministry of State Security officer recruited aviation employees through presentations and paid travel, then sought proprietary design-process information and access to a GE engineer’s company computer.", "finding": "A federal jury convicted Yanjun Xu of conspiracy and attempt offenses involving economic espionage and trade-secret theft. His conviction was affirmed on appeal; his prison sentence was later commuted to time served without disturbing the conviction.", "executiveSummary": [ { "text": "The approach looked academic: a purported university contact reached a GE Aviation engineer through LinkedIn and invited him to present research in China, with travel expenses and a stipend. Behind the invitation was Yanjun Xu, a career officer of China's Ministry of State Security tasked with targeting foreign aviation technology.", "sourceIds": [ "S1", "S2" ] }, { "text": "After meeting the engineer in China, Xu escalated from professional hospitality to requests for proprietary composite-fan design information, a directory from the engineer's company computer, and a European meeting where the computer and a portable drive would be present. GE, the employee, the FBI, and Belgian authorities turned the attempted transfer into a controlled operation; Xu was arrested, convicted on all counts, and later had only his custodial sentence commuted.", "sourceIds": [ "S1", "S2", "S3", "S4" ] } ], "narrative": [ { "heading": "A university invitation opened the door", "paragraphs": [ { "text": "In 2017, the GE engineer received what appeared to be a conventional invitation to share expertise at a Chinese university. He traveled, presented, received expenses and a stipend, and was introduced to Xu. The setting supplied legitimacy and created a relationship without beginning with an overt intelligence demand.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Requests moved from collegial to proprietary", "paragraphs": [ { "text": "Xu sought information about GE's composite fan module, including system specifications and design-process material. He then asked for a directory from the company computer and proposed meeting in Europe, where the engineer would bring that computer and a portable drive. The progression matters: sponsored travel and professional recognition became a channel for increasingly specific requests.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Cooperation interrupted the handoff", "paragraphs": [ { "text": "The engineer and GE reported the activity and worked with the FBI, allowing investigators to control later communications. Belgian authorities arrested Xu when he arrived for the planned meeting in April 2018. A U.S. jury convicted him in 2021, the Sixth Circuit affirmed the judgment in 2024, and a later clemency grant commuted imprisonment to time served without pardoning him or erasing the conviction.", "sourceIds": [ "S1", "S2", "S3", "S4" ] } ] } ], "media": [ { "src": "/media/cases/yanjun-xu.jpg", "alt": "Official identification photograph of Yanjun Xu wearing an orange-and-white jail uniform", "caption": "Yanjun Xu, the Chinese intelligence officer convicted of directing the effort to obtain GE Aviation trade secrets. This identification photograph was published by the federal court that prosecuted the case.", "credit": "U.S. District Court for the Southern District of Ohio, via Wikimedia Commons", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Xu_Yanjun_mugshot.jpg", "license": "Public domain (U.S. federal court work)", "licenseUrl": "https://creativecommons.org/publicdomain/mark/1.0/", "kind": "portrait" }, { "src": "/media/cases/jet-engine.jpg", "alt": "Detailed frontal view of a GE90 aircraft engine showing its large composite fan blades", "caption": "Composite fan systems are a high-value aviation capability. Xu's operation targeted proprietary GE design-process information associated with composite fan modules. Contextual image; this engine was not evidence in the prosecution.", "credit": "Hermann Luyken", "sourceUrl": "https://commons.wikimedia.org/wiki/File:2016.10.13.111918_Detail_GE90_jet_engine_Future_of_Flight_Center_%26_Boeing_Tour_Everett_Washington.jpg", "license": "CC0 1.0", "licenseUrl": "https://creativecommons.org/publicdomain/zero/1.0/", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Convicted on all counts in 2021; sentenced to 20 years in 2022; conviction and sentence affirmed in 2024; imprisonment commuted to time served on November 22, 2024, with the conviction left intact.", "statusDate": "2024-11-22", "lastReviewed": "2026-08-23", "nextReview": "2027-02-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "Trial and appellate records established that Xu was a deputy division director in China’s Ministry of State Security and acted to obtain aviation technology for the Chinese state.", "featured": true, "sector": { "slug": "aerospace-and-defense", "label": "Aerospace & defense" }, "jurisdictions": [ "United States", "Belgium" ], "countries": [ "United States", "China", "Belgium", "France" ], "period": "2013–2024", "accessVectors": [ "Academic invitation", "Professional networking", "Sponsored travel", "Trusted employee access" ], "methods": [ "Relationship cultivation", "Use of aliases and front entities", "Insider solicitation", "Device-access request", "Controlled document exchange" ], "assets": [ "Composite aircraft-engine fan-module technology", "System specifications", "Design processes", "Proprietary and export-controlled training materials" ], "actors": [ { "name": "Yanjun Xu", "role": "Deputy division director in the Jiangsu Province Ministry of State Security", "outcome": "Convicted on all counts; conviction affirmed; custodial sentence later commuted to time served" }, { "name": "Nanjing University of Aeronautics and Astronautics", "role": "University used as the setting for an invitation and presentation in the recruitment sequence described by the court" }, { "name": "David Zheng", "role": "GE Aviation engineer approached through LinkedIn and invited to China; later cooperated with the FBI under a non-prosecution agreement" } ], "originators": [ { "name": "GE Aviation", "role": "Developer and owner of the targeted composite fan-module technology and proprietary information" } ], "transferChain": [ { "stage": "relationship", "label": "Academic approach", "detail": "A purported university contact approached a GE engineer through LinkedIn and invited him to present research in China.", "sourceIds": [ "S2" ] }, { "stage": "access", "label": "Travel and hospitality", "detail": "The engineer traveled to China, received expenses and a stipend, presented at the university, and met Xu.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Proprietary material requested", "detail": "Xu sought system-specification and design-process information related to GE’s composite fan module.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Device access escalated", "detail": "Xu requested a directory from the company computer and proposed a European meeting where the engineer would bring his work computer and a portable drive.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Operation interrupted", "detail": "GE and the engineer worked with the FBI; investigators controlled later communications and arrested Xu in Belgium before the requested exchange occurred.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Attempt adjudicated", "detail": "A jury convicted Xu of conspiracy and attempt offenses, and the Sixth Circuit affirmed the judgment before his custodial sentence was commuted.", "sourceIds": [ "S1", "S2", "S3", "S4" ] } ], "timeline": [ { "date": "2017-03", "label": "GE engineer solicited", "detail": "A GE Aviation engineer was invited to give a university presentation in China after an approach through LinkedIn.", "sourceIds": [ "S1", "S2" ] }, { "date": "2017-05", "label": "Presentation and introduction", "detail": "The engineer traveled to China, presented at the university, and was introduced to Xu.", "sourceIds": [ "S1", "S2" ] }, { "date": "2018-04-01", "label": "Arrest in Belgium", "detail": "Belgian authorities arrested Xu as he arrived for the planned meeting with the GE engineer.", "sourceIds": [ "S1", "S2" ] }, { "date": "2021-11-05", "label": "Convicted on all counts", "detail": "A federal jury convicted Xu of two conspiracy counts and two attempt counts.", "sourceIds": [ "S1", "S2" ] }, { "date": "2024-08-30", "label": "Judgment affirmed", "detail": "The Sixth Circuit’s amended opinion affirmed Xu’s conviction and 240-month sentence.", "sourceIds": [ "S2" ] }, { "date": "2024-11-22", "label": "Sentence commuted", "detail": "President Joseph Biden commuted Xu’s imprisonment to time served, subject to conditions including departure from and remaining outside the United States; the conviction remained intact.", "sourceIds": [ "S3", "S4" ] } ], "established": [ { "text": "Xu was a career Ministry of State Security officer and deputy division director responsible for targeting foreign aviation technology.", "sourceIds": [ "S1", "S2" ] }, { "text": "The GE operation used the credibility of a university presentation, sponsored travel, and continued personal contact to cultivate access to proprietary information.", "sourceIds": [ "S1", "S2" ] }, { "text": "The charged GE trade-secret transfer was an attempt interrupted through cooperation among the employee, GE, the FBI, and Belgian authorities.", "sourceIds": [ "S1", "S2" ] }, { "text": "The 2024 clemency action shortened Xu’s imprisonment but did not pardon him or erase the conviction.", "sourceIds": [ "S3", "S4" ] } ], "uncertainties": [ { "text": "The public record establishes the attempted acquisition of GE’s core fan-module trade secrets, but it does not quantify a completed GE technology transfer or a monetary loss caused by that attempted exchange.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Xu appealed on grounds including duplicity, the admission of expert testimony, and the procedural and substantive reasonableness of his sentence; the Sixth Circuit rejected those arguments and affirmed.", "sourceIds": [ "S2" ] }, { "text": "The later clemency warrant commuted only the imprisonment component to time served and expressly left the judgment of conviction intact.", "sourceIds": [ "S4" ] } ], "harm": [ { "text": "Five proprietary or export-controlled GE training documents were taken to China during the initial trip, according to the appellate record.", "sourceIds": [ "S2" ], "qualifier": "documented" }, { "text": "The attempted acquisition targeted design-process and system-specification information for GE’s exclusive composite aircraft-engine fan module, but the FBI-controlled operation interrupted the requested exchange.", "sourceIds": [ "S1", "S2" ], "qualifier": "potential" } ], "leadershipGaps": [ { "title": "A university invitation lowered defenses", "detail": "The approach looked like professional recognition and academic exchange. The invitation, sponsor, agenda, and participants needed independent institutional verification before travel.", "hindsight": true }, { "title": "Travel and document controls diverged", "detail": "The employee downloaded proprietary and export-controlled materials before travel. International travel controls should join export, data-loss, and device-risk review in one workflow.", "hindsight": true }, { "title": "Requests escalated gradually", "detail": "The sequence moved from a presentation to technical requests and then to work-device access. Individually plausible requests formed a high-risk pattern when viewed together.", "hindsight": true } ], "actions": [ { "audience": "both", "title": "Verify invitations independently", "detail": "Confirm the host, funding source, agenda, attendees, and institutional affiliation through channels the inviter did not supply; document unresolved discrepancies before approving travel." }, { "audience": "companies", "title": "Use clean travel devices", "detail": "For sensitive personnel, issue minimally provisioned devices, prohibit unapproved technical files, disable removable media where practical, and inspect or reimage devices after return." }, { "audience": "both", "title": "Create an escalation path", "detail": "Train staff to report unusual requests for directories, specifications, unpublished methods, source code, or work devices without fear that reporting will automatically end legitimate collaboration." }, { "audience": "companies", "title": "Correlate relationship signals", "detail": "Join travel, gifts, outside engagements, sensitive downloads, and new external contacts in a privacy-respecting risk review focused on conduct and access—not nationality." } ], "sources": [ { "id": "S1", "title": "Chinese Government Intelligence Officer Sentenced to 20 Years in Prison for Espionage Crimes, Attempting to Steal Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2022-11-16", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-government-intelligence-officer-sentenced-20-years-prison-espionage-crimes-attempting", "type": "government_release", "note": "Trial and sentencing summary; the later commutation is documented separately." }, { "id": "S2", "title": "United States v. Yanjun Xu, Amended Opinion, No. 22-4056", "publisher": "U.S. Court of Appeals for the Sixth Circuit", "published": "2024-08-30", "retrieved": "2026-08-23", "url": "https://www.opn.ca6.uscourts.gov/opinions.pdf/24a0208p-06.pdf", "type": "court_record", "note": "Appellate opinion affirming the conviction and sentence and describing the evidentiary record." }, { "id": "S3", "title": "Commutations Granted by President Joseph Biden (2021–2025)", "publisher": "U.S. Department of Justice, Office of the Pardon Attorney", "published": "2025-01-19", "retrieved": "2026-08-23", "url": "https://www.justice.gov/pardon/commutations-granted-president-joseph-biden-2021-2025", "type": "government_release", "note": "Official index recording Xu’s November 22, 2024 commutation and linking the signed warrant." }, { "id": "S4", "title": "Executive Grant of Clemency for Yanjun Xu", "publisher": "The White House via U.S. Department of Justice", "published": "2024-11-22", "retrieved": "2026-08-23", "url": "https://www.justice.gov/d9/2024-11/xu_signed_warrant.pdf", "type": "government_release", "note": "Signed clemency warrant commuting imprisonment to time served while leaving the conviction intact." } ] }, { "slug": "liew-maegerle-dupont-tio2", "caseId": "CS-003", "title": "Former DuPont insiders sold chloride-process trade secrets into a Chinese state-owned project", "shortTitle": "Liew & Maegerle — DuPont", "deck": "A consulting company recruited retired DuPont engineers, assembled protected titanium-dioxide plant knowledge, and contracted to transfer it to Pangang projects in China.", "finding": "A federal jury convicted Walter Liew, Robert Maegerle, and USA Performance Technology on trade-secret offenses; Liew and his company were also convicted of economic espionage. The remaining charges against the Pangang companies were dismissed with prejudice during trial in 2026.", "executiveSummary": [ { "text": "DuPont's chloride-route process for making titanium-dioxide pigment was not one secret blueprint. It was a body of plant design, flow sheets, specifications, and operating knowledge accumulated inside a tightly protected industrial system. Walter Liew assembled access to that system by recruiting retired DuPont engineers whose careers carried the process in documents and memory.", "sourceIds": [ "S1", "S2" ] }, { "text": "Liew's companies entered contracts worth more than $20 million to provide chloride-process technology for Pangang projects in China without a DuPont license. Liew, Robert Maegerle, and USA Performance Technology were convicted on core trade-secret counts, and Liew and his company on economic espionage; however, the separate prosecution of the Pangang companies ended in a 2026 dismissal with prejudice and no corporate verdict.", "sourceIds": [ "S1", "S2", "S3", "S4" ] } ], "narrative": [ { "heading": "Industrial knowledge walked out in people", "paragraphs": [ { "text": "The route to DuPont's process ran through experienced retirees. Liew retained former engineers, including Maegerle, who had spent years around DuPont's titanium-dioxide plants. The prosecution showed how post-employment consulting can reunite protected drawings and specifications with tacit knowledge held by specialists who know why a plant is designed the way it is.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Consulting contracts packaged the transfer", "paragraphs": [ { "text": "Liew's U.S. business signed a multimillion-dollar Pangang contract in 2005 and a $17.8 million agreement for a Chongqing project in 2009. Trial evidence connected those projects to protected DuPont drawings, flow sheets, specifications, and process knowledge aimed at building or upgrading chloride-route facilities in China.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The record has two different outcomes", "paragraphs": [ { "text": "A jury convicted Liew, Maegerle, and the U.S. consulting company in 2014; the core trade-secret and economic-espionage convictions survived appeal, and Liew was resentenced to 144 months. The Pangang entities require separate treatment: prosecutors dismissed their charges with prejudice during trial in July 2026. That dismissal is not a conviction, and this dossier does not present it as one.", "sourceIds": [ "S1", "S3", "S4" ] } ] } ], "media": [ { "src": "/media/cases/walter-liew.png", "alt": "Head-and-shoulders identification photograph of Walter Liew wearing glasses", "caption": "Walter Liew, the USA Performance Technology executive convicted in the DuPont titanium-dioxide case. DCSA/CDSE publishes this portrait with its official insider-threat case study.", "credit": "Defense Counterintelligence and Security Agency / CDSE", "sourceUrl": "https://www.cdse.edu/Portals/124/Documents/casestudies/walter-liew.pdf", "license": "Editorial use; published by DCSA/CDSE", "kind": "portrait" }, { "src": "/media/cases/titanium-dioxide.jpg", "alt": "White titanium dioxide powder displayed in a clear laboratory container", "caption": "Titanium dioxide is a high-volume white pigment used in products including paints, plastics, and paper. The stolen asset was the protected chloride-route plant process for manufacturing it at scale. Contextual image.", "credit": "ATGabdrahmanov", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Powder_TiO2.jpg", "license": "CC BY-SA 4.0", "licenseUrl": "https://creativecommons.org/licenses/by-sa/4.0/", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Core trade-secret and economic-espionage convictions survived appeal; Liew was resentenced to 144 months. The government dismissed the separate Pangang corporate prosecution with prejudice on July 13, 2026, without a corporate verdict.", "statusDate": "2026-07-13", "lastReviewed": "2026-08-23", "nextReview": "2027-02-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "Liew's surviving economic-espionage convictions required a jury finding that he intended or knew the conduct would benefit a foreign government, instrumentality, or agent. That finding does not convert the later-dismissed charges against Pangang into corporate convictions.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "1997–2026", "accessVectors": [ "Former-employee expertise", "Consulting engagements", "Industrial contracts" ], "methods": [ "Recruitment of former insiders", "Document collection", "Engineering reconstruction", "Cross-border contracting" ], "assets": [ "Chloride-route titanium-dioxide process", "Plant drawings and flow sheets", "Low-grade ore processing know-how" ], "actors": [ { "name": "Walter Liew", "role": "Owner and president of USA Performance Technology", "outcome": "Convicted of economic-espionage and trade-secret offenses; resentenced to 144 months after appeal" }, { "name": "Robert Maegerle", "role": "Retired DuPont engineer retained as a consultant", "outcome": "Convicted of trade-secret offenses; sentenced to 30 months" }, { "name": "USA Performance Technology Inc.", "role": "Engineering company that contracted on Pangang titanium-dioxide projects", "outcome": "Convicted of economic-espionage and trade-secret offenses" }, { "name": "Pangang Group companies", "role": "Chinese state-owned project customers and separately charged corporate defendants", "outcome": "Charges dismissed with prejudice during trial in July 2026; no corporate conviction" } ], "originators": [ { "name": "E. I. du Pont de Nemours and Company", "role": "Developer and owner of the protected chloride-route titanium-dioxide technology" } ], "transferChain": [ { "stage": "relationship", "label": "Industrial mandate", "detail": "Liew pursued chloride-route titanium-dioxide projects after learning that the technology was a Chinese industrial priority.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Retirees recruited", "detail": "Liew retained former DuPont engineers, including Maegerle, whose careers had given them detailed knowledge of DuPont plants and processes.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Protected compilation assembled", "detail": "Trial evidence tied protected drawings, flow sheets, specifications, and process knowledge to the consulting team's work.", "sourceIds": [ "S1" ] }, { "stage": "movement", "label": "Contracts carried the package", "detail": "Liew's companies entered contracts worth more than $20 million to convey plant design and process technology to Pangang projects in China.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Plant projects advanced", "detail": "The work was directed toward upgrading and building chloride-route titanium-dioxide facilities without DuPont licensing its protected process.", "sourceIds": [ "S1" ] }, { "stage": "consequence", "label": "Individuals convicted; company case dismissed", "detail": "The individual and U.S. corporate convictions remained, but prosecutors dismissed the separate Pangang prosecution with prejudice in July 2026.", "sourceIds": [ "S1", "S3", "S4" ] } ], "timeline": [ { "date": "2005-11", "label": "First Pangang contract", "detail": "A Liew company signed a multimillion-dollar agreement for a chloride-process project.", "sourceIds": [ "S1" ] }, { "date": "2009-05", "label": "Chongqing project contracted", "detail": "USA Performance Technology signed a $17.8 million agreement for another chloride-route facility.", "sourceIds": [ "S1" ] }, { "date": "2014-03-05", "label": "Jury verdict", "detail": "The jury convicted Liew, Maegerle, and USA Performance Technology on the central trade-secret counts; Liew and the company were convicted of economic espionage.", "sourceIds": [ "S1", "S2" ] }, { "date": "2017-05-05", "label": "Core convictions upheld", "detail": "The Ninth Circuit upheld the trade-secret and economic-espionage rulings while reversing separate obstruction and witness-tampering counts and remanding.", "sourceIds": [ "S1" ] }, { "date": "2018-10-30", "label": "Liew resentenced", "detail": "On remand, the district court imposed a 144-month prison term.", "sourceIds": [ "S3" ] }, { "date": "2026-07-13", "label": "Pangang charges dismissed", "detail": "After trial began, the government dismissed the charges against Pangang and its subsidiaries with prejudice.", "sourceIds": [ "S4" ] } ], "established": [ { "text": "The surviving convictions establish that Liew and his U.S. company attempted to obtain and convey protected DuPont process technology and intended to benefit a foreign instrumentality.", "sourceIds": [ "S1", "S3" ] }, { "text": "The record shows deliberate recruitment of former DuPont personnel and use of protected technical compilations rather than lawful independent development alone.", "sourceIds": [ "S1", "S2" ] }, { "text": "The Pangang companies were never convicted: their separate charges were dismissed with prejudice in July 2026.", "sourceIds": [ "S4" ] } ], "uncertainties": [ { "text": "The public dismissal did not adjudicate the Pangang companies' factual innocence or liability; it ended the prosecution without a verdict, so this file assigns them no criminal finding.", "sourceIds": [ "S4" ] } ], "response": [ { "text": "Liew and USA Performance Technology challenged whether the material remained secret and whether the instructions permitted conviction without proof of a trade secret; the Ninth Circuit rejected the core challenges but reversed unrelated counts and required further proceedings.", "sourceIds": [ "S1" ] }, { "text": "Pangang defended the corporate prosecution through trial; the Justice Department then voluntarily dismissed those charges with prejudice, foreclosing a later retrial on them.", "sourceIds": [ "S4" ] } ], "harm": [ { "text": "The scheme converted decades of protected process development into a commercial engineering package sold through contracts exceeding $20 million.", "sourceIds": [ "S1", "S2" ], "qualifier": "court_found" }, { "text": "The district court's original sentence included $511,667.82 in restitution and $27.8 million in forfeiture; the custodial term was later reduced on remand.", "sourceIds": [ "S2", "S3" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "Retirement did not end exposure", "detail": "Former employees retained both documents and deep tacit knowledge. Offboarding, continuing confidentiality reminders, and post-employment conflict controls needed to match the asset's long useful life.", "hindsight": true }, { "title": "Know-how was valuable as a compilation", "detail": "Individual facts could look familiar or public while the protected selection, sequence, and operating detail remained commercially decisive.", "hindsight": true }, { "title": "Commercial projects obscured provenance", "detail": "Engineering contracts can make acquired capability look ordinary. Buyers, suppliers, and boards need a defensible provenance record for designs assembled from former-employer knowledge.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Extend crown-jewel offboarding", "detail": "Inventory returned media, preserve access logs, issue tailored continuing-duty notices, and use counsel-approved follow-up when former insiders join a customer, consultant, or competitor project involving the same process." }, { "audience": "both", "title": "Protect compilations explicitly", "detail": "Document why the combination of parameters, drawings, sequences, and troubleshooting knowledge is secret, valuable, and access-controlled even where individual elements are public." }, { "audience": "companies", "title": "Demand design provenance", "detail": "Require project teams and acquired vendors to identify prior-employer inputs, licenses, clean-room boundaries, and independent-development records before sensitive technology is delivered." } ], "sources": [ { "id": "S1", "title": "United States v. Liew, 856 F.3d 585", "publisher": "U.S. Court of Appeals for the Ninth Circuit", "published": "2017-05-05", "retrieved": "2026-08-23", "url": "https://cdn.ca9.uscourts.gov/datastore/opinions/2017/05/05/14-10367.pdf", "type": "court_record", "note": "Published appellate opinion describing the evidence, affirming the core trade-secret and economic-espionage convictions, reversing separate counts, and remanding." }, { "id": "S2", "title": "Walter Liew Sentenced to Fifteen Years in Prison for Economic Espionage", "publisher": "U.S. Department of Justice", "published": "2014-07-11", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-ndca/pr/walter-liew-sentenced-fifteen-years-prison-economic-espionage", "type": "government_release", "note": "Original sentencing summary; the later appellate remand and resentencing are separately documented." }, { "id": "S3", "title": "United States v. Liew, Order Granting Motion to Reduce Sentence", "publisher": "U.S. District Court for the Northern District of California via FindLaw", "published": "2020-06-15", "retrieved": "2026-08-23", "url": "https://caselaw.findlaw.com/court/us-dis-crt-n-d-cal/2071961.html", "type": "court_record", "note": "Court order recounting the surviving convictions and 2018 resentencing to 144 months." }, { "id": "S4", "title": "DOJ Drops Espionage Charges Against DuPont's Chinese Competitor", "publisher": "Bloomberg Law", "published": "2026-07-14", "retrieved": "2026-08-23", "url": "https://news.bloomberglaw.com/esg/doj-drops-espionage-charges-against-duponts-chinese-competitor", "type": "reputable_reporting", "note": "Current procedural reporting on the government's dismissal with prejudice during the Pangang trial." } ] }, { "slug": "xiaorong-you-can-coatings", "caseId": "CS-004", "title": "A trusted coatings chemist copied seven companies' BPA-free formulas for a China venture", "shortTitle": "Xiaorong You — can coatings", "deck": "Limited access at Coca-Cola and Eastman exposed a chemist to suppliers' protected formulas; she copied files to personal storage while pursuing a government-supported coatings business in China.", "finding": "A federal jury convicted Xiaorong You of economic espionage, trade-secret offenses, and wire fraud. The Sixth Circuit affirmed every conviction but vacated the original sentence because the loss calculation was flawed.", "executiveSummary": [ { "text": "Coca-Cola invited coatings suppliers to share protected BPA-free formulas so it could test safer linings for beverage cans. Xiaorong You was one of the few customer employees permitted to see those competitors' submissions—a legitimate evaluation role that concentrated seven companies' confidential chemistry in one trusted account.", "sourceIds": [ "S1", "S2" ] }, { "text": "As she pursued a coatings venture in China, You copied supplier and Eastman files to personal cloud and removable storage. Grant materials portrayed the planned company as possessing technology capable of breaking an international market monopoly. A jury convicted her; the Sixth Circuit affirmed the convictions but rejected the original sentencing-loss calculation, and a district court later recalculated intended loss at $30.45 million.", "sourceIds": [ "S1", "S2", "S3" ] } ], "narrative": [ { "heading": "A customer's test program became an aggregation point", "paragraphs": [ { "text": "Coatings makers disclosed formulations to Coca-Cola under nondisclosure agreements so the beverage company could compare BPA-free alternatives. You's testing position gave her rare access across multiple suppliers. The case illustrates a recurring risk: a neutral customer, integrator, or evaluator can become the only place where several competitors' secrets sit side by side.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Blocked copying shifted to personal channels", "paragraphs": [ { "text": "Near the end of her Coca-Cola employment, You attempted to move protected files and, after one transfer path was blocked, uploaded material to a personal Google Drive account and copied it to removable storage. She later took Eastman information as well, retaining the combined portfolio while developing a separate China-based coatings business.", "sourceIds": [ "S2" ] } ] }, { "heading": "The venture advertised a shortcut", "paragraphs": [ { "text": "You worked with Weihai Jinhong Group and pursued Chinese national, provincial, and city support. Venture materials claimed advanced BPA-free capability that could break a foreign market monopoly. Her convictions remain intact, but the penalty record needs precision: the appellate court vacated the original sentence for a flawed loss calculation, and the reviewed sources do not establish a final amended prison term after the $30.45 million recalculation.", "sourceIds": [ "S1", "S2", "S3" ] } ] } ], "media": [ { "src": "/media/cases/xiaorong-you.jpg", "alt": "Identification photograph of Xiaorong You displayed against a federal courthouse background", "caption": "Xiaorong You, also known as Shannon You, whose convictions and 14-year sentence arose from the theft of BPA-free coating trade secrets. WCYB published this identification image with its sentencing coverage.", "credit": "WCYB / Caleb Perhne", "sourceUrl": "https://wcyb.com/news/local/chinese-born-us-citizen-gets-14-years-for-stealing-trade-secrets-from-eastman-coca-cola", "license": "Editorial use; all rights remain with WCYB / Sinclair", "kind": "portrait" }, { "src": "/media/cases/can-top.png", "alt": "Close-up view of the opened top and interior edge of an aluminum beverage can", "caption": "A beverage can's thin internal coating separates the drink from the metal. The case concerned proprietary BPA-free coating formulations shared for customer testing. Contextual image; not evidence from the prosecution.", "credit": "Adodge", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Can_top_closeup.png", "license": "Public domain", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Convictions affirmed in 2023; original 168-month sentence vacated and remanded. In 2024 the district court recalculated intended loss at $30.45 million; the reviewed public sources do not establish the final amended prison term.", "statusDate": "2024-09-11", "lastReviewed": "2026-08-23", "nextReview": "2027-02-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "The affirmed economic-espionage convictions establish the required intent or knowledge that the conduct would benefit a foreign government, instrumentality, or agent; the appellate record also documents national and local Chinese government grants.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2012–2024", "accessVectors": [ "Trusted technical employment", "Supplier nondisclosure relationships", "Limited formula access" ], "methods": [ "Personal cloud upload", "USB copying", "Undisclosed outside venture", "Government grant applications" ], "assets": [ "BPA-free beverage-can coating formulas", "Test results", "Formulation and manufacturing know-how" ], "actors": [ { "name": "Xiaorong You", "role": "Former Coca-Cola and Eastman chemist", "outcome": "Convicted on all counts; convictions affirmed; original sentence vacated for resentencing" }, { "name": "Weihai Jinhong Group", "role": "Proposed Chinese corporate partner in the coatings venture" } ], "originators": [ { "name": "AkzoNobel, BASF, Dow, PPG, Sherwin-Williams, ToyoChem, and Eastman", "role": "Owners of the protected BPA-free coating formulations and related information" }, { "name": "The Coca-Cola Company", "role": "Testing customer entrusted with suppliers' formulas and You's employer during the initial access period" } ], "transferChain": [ { "stage": "relationship", "label": "Supplier testing role", "detail": "Coatings companies shared formulas with Coca-Cola under nondisclosure agreements so the beverage company could test BPA-free alternatives.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Rare formula access", "detail": "You was among a small group of Coca-Cola employees allowed to review the suppliers' protected formulations and later gained access to Eastman information.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Cloud and USB copying", "detail": "After a blocked transfer attempt, You uploaded files to a personal Google Drive account and copied them to removable storage; she later copied Eastman files as well.", "sourceIds": [ "S2" ] }, { "stage": "movement", "label": "China venture prepared", "detail": "You pursued a coatings company with Weihai Jinhong Group and sought national, provincial, and city support while retaining the files.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Technology marketed in grant plans", "detail": "Grant materials represented that the planned company possessed advanced BPA-free technology capable of breaking an international market monopoly.", "sourceIds": [ "S2" ] }, { "stage": "consequence", "label": "Convictions affirmed", "detail": "The appellate court affirmed the convictions but ordered resentencing; the district court later set intended loss at $30.45 million.", "sourceIds": [ "S2", "S3" ] } ], "timeline": [ { "date": "2012", "label": "Coca-Cola access begins", "detail": "You began testing BPA-free can-coating technologies and obtained access to suppliers' protected formulas.", "sourceIds": [ "S2" ] }, { "date": "2017-08", "label": "Files moved to personal storage", "detail": "Near the end of her Coca-Cola employment, You copied protected coating files to personal cloud and removable storage.", "sourceIds": [ "S2" ] }, { "date": "2021-04-22", "label": "Jury conviction", "detail": "A federal jury convicted You of economic espionage, trade-secret, and wire-fraud offenses.", "sourceIds": [ "S1" ] }, { "date": "2022-05-09", "label": "Initial sentence", "detail": "The district court imposed 168 months in prison, supervised release, and a fine.", "sourceIds": [ "S1" ] }, { "date": "2023-07-11", "label": "Convictions affirmed; sentence vacated", "detail": "The Sixth Circuit upheld all convictions but found clear error in the intended-loss calculation and remanded for resentencing.", "sourceIds": [ "S2" ] }, { "date": "2024-09-11", "label": "Loss recalculated", "detail": "On remand, the district court estimated intended loss at $30.45 million for sentencing purposes.", "sourceIds": [ "S3" ] } ], "established": [ { "text": "You's convictions establish unauthorized possession of seven companies' protected coating information and an economic-espionage conspiracy; the convictions were affirmed on appeal.", "sourceIds": [ "S1", "S2" ] }, { "text": "The scheme exploited a customer's legitimate testing access to multiple suppliers' secrets, then carried those files into a separate commercial plan.", "sourceIds": [ "S1", "S2" ] }, { "text": "Chinese national, provincial, and city grant support was part of the venture record considered at trial.", "sourceIds": [ "S2" ] } ], "uncertainties": [ { "text": "The reviewed public materials document the 2024 intended-loss ruling but not the final amended prison judgment; this file therefore does not present the original 168-month term as current.", "sourceIds": [ "S2", "S3" ] }, { "text": "The nearly $120 million development-cost figure described at the first sentencing is not a finding of actual loss, and the appellate court rejected the original intended-loss calculation.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "You argued on appeal that trial testimony was racially prejudicial, that the jury instructions misstated the required knowledge, and that the loss analysis was improper. The court rejected the trial challenges but agreed that the sentencing calculation was clearly erroneous.", "sourceIds": [ "S2" ] } ], "harm": [ { "text": "The sentencing court's post-remand estimate of intended pecuniary loss was $30.45 million; it was not an actual-loss award.", "sourceIds": [ "S3" ], "qualifier": "court_found" }, { "text": "The copying exposed the research investments and formulas of seven coating companies through one trusted customer and one employee.", "sourceIds": [ "S1", "S2" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "A customer became an aggregation point", "detail": "Coca-Cola legitimately held competing suppliers' formulas. Concentrating multiple firms' crown jewels in one testing environment magnified the impact of one insider.", "hindsight": true }, { "title": "A blocked copy was an escalation signal", "detail": "The first transfer attempt was stopped, but the same objective was achieved through personal cloud storage. Controls needed correlation across channels, not a single blocked event.", "hindsight": true }, { "title": "Outside venture signals were disconnected", "detail": "Grant applications and a planned competing company were relevant to the employee's access risk but were not surfaced to the organizations holding the formulas.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Partition supplier-confidential data", "detail": "Keep each supplier's formulas in separate workspaces, restrict cross-project search and export, and require named, time-limited access tied to a testing purpose." }, { "audience": "both", "title": "Correlate blocked exfiltration", "detail": "Treat a blocked bulk copy as an investigation trigger across cloud uploads, removable media, printing, messaging, and nearby account activity rather than as a completed control." }, { "audience": "companies", "title": "Reconcile outside ventures", "detail": "Require periodic disclosure of relevant ownership, grant applications, consulting, and commercialization plans, then compare them with sensitive-access roles using counsel-approved criteria." } ], "sources": [ { "id": "S1", "title": "Ph.D. Chemist Sentenced to 168 Months for Economic Espionage and Trade-Secret Offenses", "publisher": "U.S. Department of Justice", "published": "2022-05-09", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-edtn/pr/phd-chemist-sentenced-168-months-conspiracy-steal-traded-secrets-economic-espionage", "type": "government_release", "note": "Original sentencing summary; the prison sentence was later vacated and is not presented as the final term." }, { "id": "S2", "title": "United States v. You, 74 F.4th 378", "publisher": "U.S. Court of Appeals for the Sixth Circuit", "published": "2023-07-11", "retrieved": "2026-08-23", "url": "https://www.opn.ca6.uscourts.gov/opinions.pdf/23a0148p-06.pdf", "type": "court_record", "note": "Published opinion affirming every conviction, vacating the sentence, and describing the access, copying, grant, and defense record." }, { "id": "S3", "title": "United States v. Xiaorong You, Memorandum Opinion and Order on Intended Loss", "publisher": "U.S. District Court for the Eastern District of Tennessee via GovInfo", "published": "2024-09-11", "retrieved": "2026-08-23", "url": "https://www.govinfo.gov/content/pkg/USCOURTS-tned-2_19-cr-00014/pdf/USCOURTS-tned-2_19-cr-00014-11.pdf", "type": "court_record", "note": "Post-remand ruling estimating intended loss at $30.45 million before resentencing." } ] }, { "slug": "pflugbeil-shao-battery-assembly", "caseId": "CS-005", "title": "Battery-equipment veterans repackaged former-employer drawings for a competing China business", "shortTitle": "Pflugbeil & Shao — battery assembly", "deck": "Two former employees of a Canadian automation manufacturer built a China-based equipment company and offered a prospective buyer a proposal containing their former employer's proprietary drawings.", "finding": "Klaus Pflugbeil pleaded guilty to conspiring to send trade secrets belonging to a leading U.S.-based electric-vehicle company and was sentenced to 24 months. Co-defendant Yilong Shao remained at large at sentencing.", "executiveSummary": [ { "text": "Klaus Pflugbeil and Yilong Shao spent years inside a Canadian manufacturer of automated, precision battery-assembly systems. After the business and its technology were acquired by a leading U.S. electric-vehicle company, the two veterans operated a competing equipment business in China built around the same specialized manufacturing capability.", "sourceIds": [ "S1", "S2" ] }, { "text": "The decisive proof appeared in a sales proposal. Responding to an undercover buyer, the business quoted roughly $15 million for an assembly line and delivered 66 pages containing at least six proprietary drawings owned by the victim. Pflugbeil pleaded guilty, forfeited $1.3 million in proceeds, and received 24 months in prison; Shao remained charged and at large, not convicted.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "Expertise moved into a competing company", "paragraphs": [ { "text": "The former employer made continuous-motion systems used to assemble batteries with precision and speed. Pflugbeil and Shao's managerial and engineering work exposed them to the machinery, drawings, and integration knowledge needed to reproduce that capability. By 2019, their China-based company was marketing an alternative source of battery-manufacturing equipment.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "A bid revealed what the business carried", "paragraphs": [ { "text": "In 2023, an undercover buyer asked the company for battery-assembly equipment. Its response was commercially concrete: a 66-page proposal, a price near $15 million, and technical drawings. Investigators identified at least six of those drawings as the victim company's property, turning suspicion about employee know-how into evidence of retained and reused documents.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "One plea does not decide every defendant", "paragraphs": [ { "text": "Pflugbeil admitted conspiring to transmit the protected technology and was sentenced in December 2024 to two years in prison with a $1.3 million forfeiture judgment. The sources anonymize the victim company, so this dossier preserves that limitation. They also report Shao as charged and at large; allegations against him are not presented as an adjudicated finding.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/klaus-pflugbeil.jpg", "alt": "Corporate headshot of Klaus Pflugbeil wearing glasses and a dark jacket", "caption": "Klaus Pflugbeil, pictured in 2018 while serving as general manager of Veit Zhejiang. He later pleaded guilty in the battery-assembly trade-secret case; this is a pre-case corporate portrait, not a booking photograph.", "credit": "Klaus Pflugbeil, via Enterprise Times", "sourceUrl": "https://www.enterprisetimes.co.uk/2018/07/30/veit-group-irons-out-its-erp-software/klaus-pflugbeil/", "license": "Editorial use; © 2018 Klaus Pflugbeil", "kind": "portrait" }, { "src": "/media/cases/battery-cells.jpg", "alt": "Two cylindrical lithium-ion battery cells of different industrial sizes on a dark surface", "caption": "Scaling battery production depends on precision assembly equipment as well as cell chemistry. The stolen material concerned drawings for automated manufacturing systems. Contextual image; not the equipment at issue.", "credit": "Sevenethics", "sourceUrl": "https://commons.wikimedia.org/wiki/File:18650_and_21700_lithium_ion_battery_cell.jpg", "license": "CC0 1.0", "licenseUrl": "https://creativecommons.org/publicdomain/zero/1.0/", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Pflugbeil pleaded guilty and was sentenced to 24 months in prison in December 2024. Shao was charged but remained at large; this file assigns him no conviction.", "statusDate": "2024-12-16", "lastReviewed": "2026-08-23", "nextReview": "2027-02-23", "stateNexus": "none_established", "stateNexusSummary": "The cited plea and sentencing materials establish a China-based competing business but do not establish PRC government direction, sponsorship, or control.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "United States" ], "countries": [ "Canada", "United States", "China" ], "period": "2019–2024", "accessVectors": [ "Former employment", "Engineering management access", "Sales solicitation" ], "methods": [ "Retention of technical drawings", "Proposal reuse", "Online competitive marketing", "Undercover purchase response" ], "assets": [ "Continuous-motion battery assembly technology", "Engineering drawings", "Assembly-line specifications" ], "actors": [ { "name": "Klaus Pflugbeil", "role": "Former engineering manager and co-owner of a China-based battery-equipment business", "outcome": "Pleaded guilty; sentenced to 24 months and ordered to forfeit $1.3 million" }, { "name": "Yilong Shao", "role": "Former engineer and co-owner of the China-based business", "outcome": "Charged; remained at large as of Pflugbeil's sentencing" } ], "originators": [ { "name": "Victim Company-1", "role": "Court-anonymized leading U.S.-based electric-vehicle company that acquired the Canadian manufacturer and owned the battery-assembly trade secrets" }, { "name": "Canadian Manufacturer", "role": "Court-anonymized developer of the proprietary continuous-motion assembly technology and former employer of the defendants" } ], "transferChain": [ { "stage": "relationship", "label": "Long technical tenure", "detail": "Pflugbeil and Shao worked for the Canadian manufacturer that developed automated precision battery-assembly systems.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Manager and engineer access", "detail": "Their roles exposed them to proprietary continuous-motion assembly technology and the drawings needed to reproduce it.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Drawings retained", "detail": "The complaint alleged, and Pflugbeil's later plea resolved his role in, a conspiracy using former-employer drawings without authorization.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "China competitor formed", "detail": "The defendants established a China-based business that marketed equipment relying on the protected battery-assembly technology.", "sourceIds": [ "S1" ] }, { "stage": "use", "label": "Drawings inserted into bid", "detail": "A 66-page proposal responding to an undercover buyer contained at least six drawings owned by the victim company and quoted roughly $15 million for an assembly line.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Competition monetized", "detail": "Pflugbeil earned more than $1.3 million from the business before receiving a two-year prison sentence and forfeiture order.", "sourceIds": [ "S1" ] } ], "timeline": [ { "date": "2019", "label": "China business operating", "detail": "The former employees' business marketed battery-manufacturing equipment as an alternative source.", "sourceIds": [ "S1", "S2" ] }, { "date": "2023-09", "label": "Undercover solicitation", "detail": "The business responded to a buyer seeking battery-assembly equipment and supplied a detailed technical proposal.", "sourceIds": [ "S2" ] }, { "date": "2024-03-19", "label": "Complaint unsealed", "detail": "Federal authorities announced the arrest and charged the two owners with a trade-secret conspiracy.", "sourceIds": [ "S2" ] }, { "date": "2024-12-16", "label": "Pflugbeil sentenced", "detail": "After pleading guilty, Pflugbeil received 24 months in prison and a $1.3 million forfeiture money judgment.", "sourceIds": [ "S1" ] } ], "established": [ { "text": "Pflugbeil admitted a conspiracy to transmit proprietary battery-assembly technology belonging to his former employer's U.S. acquirer.", "sourceIds": [ "S1" ] }, { "text": "The competing business used protected drawings in a commercial proposal and marketed equipment based on the same manufacturing capability.", "sourceIds": [ "S1" ] } ], "uncertainties": [ { "text": "The victim company is anonymized in the court and Justice Department sources. Public reporting has named companies, but this file does not elevate that attribution into a court finding.", "sourceIds": [ "S1", "S2" ] }, { "text": "Shao had not been adjudicated as of the sentencing release and is described only as a charged co-defendant.", "sourceIds": [ "S1" ] } ], "response": [ { "text": "Pflugbeil resolved his case through a guilty plea. The reviewed public record contains no adjudicated defense or denial by Shao because he remained at large.", "sourceIds": [ "S1" ] } ], "harm": [ { "text": "The competing business monetized equipment built around protected know-how, with Pflugbeil earning more than $1.3 million.", "sourceIds": [ "S1" ], "qualifier": "court_found" }, { "text": "The proposal offered a roughly $15 million assembly line and embedded at least six proprietary drawings, demonstrating commercial readiness rather than mere possession.", "sourceIds": [ "S1", "S2" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "Acquisition changed ownership, not exposure", "detail": "The technology moved through a corporate acquisition while former employees retained knowledge and materials. Integration diligence needed to include legacy insider and document risk.", "hindsight": true }, { "title": "Drawings made tacit know-how saleable", "detail": "Experienced engineers could combine retained drawings with years of practice to offer a replacement line. Protecting files without mapping the enabling people left a major gap.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Include trade secrets in M&A integration", "detail": "During acquisitions, map inherited crown jewels, former-employee obligations, historical exports, repository permissions, and known competitors before systems and teams are merged." }, { "audience": "companies", "title": "Monitor technical market overlap", "detail": "Use lawful competitive intelligence to flag new vendors whose drawings, specifications, product language, or lead times overlap unusually with protected systems." }, { "audience": "both", "title": "Control proposal-ready packages", "detail": "Treat drawing bundles, bills of material, tolerances, supplier lists, and commissioning guides as a single reproducible package with tighter export and download controls." } ], "sources": [ { "id": "S1", "title": "Resident of China Sentenced for Conspiring to Send Electric-Vehicle Company Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2024-12-16", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-edny/pr/resident-china-sentenced-24-months-prison-conspiring-send-trade-secrets-belonging", "type": "government_release", "note": "Guilty-plea and sentencing summary using the court's anonymized victim designations." }, { "id": "S2", "title": "Complaint and Affidavit, United States v. Pflugbeil and Shao", "publisher": "U.S. District Court for the Eastern District of New York via U.S. Department of Justice", "published": "2024-03-18", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-edny/media/1344196/dl", "type": "court_record", "note": "Probable-cause allegations used for sequence detail; unadjudicated allegations are not presented as findings against Shao." } ] }, { "slug": "linwei-ding-google-ai", "caseId": "CS-006", "title": "A Google engineer copied AI-supercomputer secrets while building China-based ventures", "shortTitle": "Linwei Ding — Google AI", "deck": "An engineer uploaded more than 2,000 pages of Google AI-infrastructure material to personal cloud storage while pursuing senior roles, investors, and a startup in China.", "finding": "A jury convicted Linwei Ding on seven trade-secret-theft and seven economic-espionage counts. On August 20, 2026, the judge left the theft convictions intact but acquitted him on the espionage counts for insufficient proof that he intended or knew the theft would benefit the Chinese government.", "executiveSummary": [ { "text": "For roughly eleven months, Google engineer Linwei Ding moved more than 2,000 pages describing the infrastructure behind Google's large AI systems into personal cloud storage. He copied source material into a text application, converted it to PDFs, and uploaded it while concealing executive and founder roles with AI ventures in China.", "sourceIds": [ "S1", "S2" ] }, { "text": "A jury found that Ding stole seven categories of trade secrets covering TPU and GPU systems, cluster software, networking, and SmartNIC components. The current legal boundary is important: all seven theft convictions remain, but on August 20, 2026 the judge set aside the economic-espionage verdicts because government benefit was not proved beyond a reasonable doubt. The surviving record establishes theft for Ding and a China-based venture, not a PRC state nexus.", "sourceIds": [ "S1", "S2", "S3" ] } ], "narrative": [ { "heading": "The target was the system behind the model", "paragraphs": [ { "text": "Ding's access reached beneath AI applications to the infrastructure required to train and operate them at scale: custom accelerator systems, GPU systems, cluster-management software, high-performance networking, and SmartNIC technology. Those components describe how thousands of processors can be made to function as one dependable AI supercomputer.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Copying and outside business advanced together", "paragraphs": [ { "text": "Between May 2022 and April 2023, Ding converted confidential source files into PDFs and uploaded them to a personal account. At the same time, he pursued a chief-technology role and founded his own AI company in China without disclosing those activities to Google. Trial evidence included representations that the venture could build a company 'like Google' and copy and modify Google's technology.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Theft survived; espionage did not", "paragraphs": [ { "text": "The jury returned fourteen guilty verdicts in January 2026. Post-trial review divided them: the court preserved seven trade-secret-theft convictions, then acquitted Ding on seven economic-espionage counts after finding the Chinese-government-benefit element legally insufficient. Sentencing on the surviving counts was still pending at this dossier's review date, so the file treats the theft as adjudicated and the alleged state nexus as unproved.", "sourceIds": [ "S1", "S2", "S3" ] } ] } ], "media": [ { "src": "/media/cases/linwei-ding.png", "alt": "Screenshot of Linwei Ding's former LinkedIn profile with his profile photograph and Google job title", "caption": "Linwei Ding in a screenshot of his since-removed LinkedIn profile, reproduced by Xataka México. The profile identified him as a software engineer and lead at Google; it predates the criminal case.", "credit": "LinkedIn profile screenshot, via Xataka México", "sourceUrl": "https://www.xataka.com.mx/robotica-e-ia/ingeniero-robo-secretos-ia-google-para-venderlos-al-mayor-rival-estados-unidos-china", "license": "Editorial use; all rights remain with the source", "kind": "document" }, { "src": "/media/cases/data-center.jpg", "alt": "Dense server rack filled with hard drives, network switches, and connected data cables", "caption": "Large AI systems depend on tightly integrated compute, storage, and networking infrastructure. Ding's surviving convictions concern confidential designs spanning that stack. Contextual image; not Google equipment from the case.", "credit": "Federal Bureau of Investigation", "sourceUrl": "https://commons.wikimedia.org/wiki/File:EFTA00002518_-_Server_rack_with_multiple_hard_drives_and_network_cables_connected_in_a_data_center_environment.jpg", "license": "Public domain", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Seven trade-secret-theft convictions remain. Seven economic-espionage verdicts were set aside on August 20, 2026; sentencing on the surviving counts was scheduled for September 1, 2026 and had not occurred at review.", "statusDate": "2026-08-20", "lastReviewed": "2026-08-23", "nextReview": "2026-09-05", "stateNexus": "none_established", "stateNexusSummary": "The trial judge found the evidence insufficient to prove beyond a reasonable doubt that Ding intended or knew his conduct would benefit the Chinese government. The surviving theft convictions establish benefit to Ding and a China-based venture, not a state nexus.", "featured": true, "sector": { "slug": "ai-semiconductors-and-telecommunications", "label": "AI, semiconductors & telecommunications" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2022–2026", "accessVectors": [ "Software-engineering employment", "AI infrastructure access", "Undisclosed outside roles" ], "methods": [ "Personal cloud uploads", "Document reformatting", "Concealed outside employment", "Investor presentations" ], "assets": [ "TPU and GPU architecture", "AI cluster-management software", "SmartNIC design", "AI supercomputer operations" ], "actors": [ { "name": "Linwei Ding", "role": "Former Google software engineer and founder of Zhisuan Technology", "outcome": "Convicted on seven trade-secret counts; acquitted post-trial on seven economic-espionage counts; awaiting sentencing at review" }, { "name": "Zhisuan Technology", "role": "China-based AI venture Ding was forming while uploading Google material" }, { "name": "Rongshu", "role": "China-based technology company that hired Ding as chief technology officer while he remained at Google" } ], "originators": [ { "name": "Google LLC", "role": "Developer and owner of the protected AI-supercomputing architecture and operations information" } ], "transferChain": [ { "stage": "relationship", "label": "AI engineering role", "detail": "Ding's Google position gave him access to confidential systems used to build and operate large AI supercomputers.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Seven technical domains", "detail": "The protected material covered TPU and GPU systems, cluster-management software, networking, and SmartNIC components.", "sourceIds": [ "S1" ] }, { "stage": "acquisition", "label": "Uploads disguised", "detail": "Ding copied source files into a text application, converted them to PDFs, and uploaded more than 2,000 pages to a personal cloud account.", "sourceIds": [ "S1" ] }, { "stage": "movement", "label": "Outside ventures developed", "detail": "While still employed at Google, he pursued a chief-technology role and built his own AI company in China without disclosing the activity.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Investor capability claims", "detail": "Trial evidence showed that Ding described plans for a company 'like Google' and represented that his venture could copy and modify Google's technology.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Theft proved; state benefit not proved", "detail": "The judge sustained the seven theft verdicts but found the evidence legally insufficient on the separate government-benefit element required for economic espionage.", "sourceIds": [ "S2", "S3" ] } ], "timeline": [ { "date": "2022-05–2023-04", "label": "Files uploaded", "detail": "Ding moved confidential Google AI documents to personal cloud storage over roughly eleven months.", "sourceIds": [ "S1", "S2" ] }, { "date": "2023", "label": "Outside roles concealed", "detail": "He pursued executive and founder roles in China while remaining a Google employee.", "sourceIds": [ "S1" ] }, { "date": "2026-01-29", "label": "Jury verdict", "detail": "The jury returned guilty verdicts on seven theft and seven economic-espionage counts.", "sourceIds": [ "S1" ] }, { "date": "2026-06-29", "label": "Theft verdict challenges rejected", "detail": "The court rejected Ding's post-trial challenges other than the government-benefit question reserved for a separate opinion.", "sourceIds": [ "S2" ] }, { "date": "2026-08-20", "label": "Espionage counts set aside", "detail": "The court acquitted Ding on the seven economic-espionage counts while leaving all seven trade-secret-theft convictions standing.", "sourceIds": [ "S3" ] } ], "established": [ { "text": "The surviving jury verdicts establish that Ding stole seven categories of Google AI trade secrets to benefit himself and a China-based company.", "sourceIds": [ "S2", "S3" ] }, { "text": "The copying occurred alongside undisclosed outside business activity and was used to support a venture claiming Google-like AI infrastructure capabilities.", "sourceIds": [ "S1", "S2" ] }, { "text": "A federal judge expressly rejected the claim that the evidence proved the required Chinese-government benefit beyond a reasonable doubt.", "sourceIds": [ "S3" ] } ], "uncertainties": [ { "text": "Sentencing and any appeal had not occurred by the August 23 review date; the case requires a prompt procedural refresh after September 1.", "sourceIds": [ "S3" ] }, { "text": "The original Justice Department release described all fourteen jury verdicts, but the later court ruling controls this file's current status and eliminates the economic-espionage findings.", "sourceIds": [ "S1", "S3" ] } ], "response": [ { "text": "Ding sought a judgment of acquittal or new trial. The judge rejected his challenges to the theft verdicts but granted acquittal on the economic-espionage counts because the government-benefit element was not proved sufficiently.", "sourceIds": [ "S2", "S3" ] } ], "harm": [ { "text": "The theft exposed design and operating details across seven categories of Google's AI-supercomputing stack to a founder building a competing capability.", "sourceIds": [ "S1", "S2" ], "qualifier": "documented" }, { "text": "No monetary loss or sentence is assigned here because the surviving convictions had not yet reached sentencing at the review date.", "sourceIds": [ "S3" ], "qualifier": "unknown" } ], "leadershipGaps": [ { "title": "Cloud-native theft looked like ordinary work", "detail": "Reformatting and uploading documents through familiar applications can evade controls aimed only at removable media or raw source-file transfers.", "hindsight": true }, { "title": "Outside leadership remained undisclosed", "detail": "A sensitive engineer could pursue executive and founder roles overlapping his employer's technology. Conflict review and access governance were not joined quickly enough.", "hindsight": true }, { "title": "State nexus was overclaimed", "detail": "The post-trial ruling shows why institutional risk teams must distinguish a China-based competitor and talent-plan activity from proof of government direction or benefit.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Detect content transformation", "detail": "Monitor unusual print-to-PDF, copy-paste, mass document rendering, and personal-cloud upload patterns around crown-jewel repositories, with privacy and employment-law review." }, { "audience": "both", "title": "Join conflicts to access", "detail": "Require disclosure of overlapping founder, executive, advisory, and fundraising roles and route relevant conflicts to a documented least-privilege access review." }, { "audience": "companies", "title": "Separate conduct from attribution", "detail": "Investigate copying and conflicts based on logs and behavior; assign government nexus only when evidence supports it, and keep that conclusion independently reviewable." } ], "sources": [ { "id": "S1", "title": "Former Google Engineer Found Guilty of Economic Espionage and Theft of Confidential AI Technology", "publisher": "U.S. Department of Justice", "published": "2026-01-30", "retrieved": "2026-08-23", "url": "https://www.justice.gov/opa/pr/former-google-engineer-found-guilty-economic-espionage-and-theft-confidential-ai-technology", "type": "government_release", "note": "Jury-verdict and trial-evidence summary; the later partial acquittal supersedes its description of the economic-espionage outcome." }, { "id": "S2", "title": "United States v. Ding, Order on Motion for Judgment of Acquittal or New Trial", "publisher": "U.S. District Court for the Northern District of California via GovInfo", "published": "2026-06-29", "retrieved": "2026-08-23", "url": "https://www.govinfo.gov/content/pkg/USCOURTS-cand-3_24-cr-00141/pdf/USCOURTS-cand-3_24-cr-00141-5.pdf", "type": "court_record", "note": "Court order sustaining the theft verdicts and reserving the government-benefit question for a later opinion." }, { "id": "S3", "title": "Ex-Google Engineer's Conviction for Stealing AI Secrets Partially Overturned", "publisher": "Reuters via StreetInsider", "published": "2026-08-20", "retrieved": "2026-08-23", "url": "https://www.streetinsider.com/Reuters/Ex-Google%2Bengineers%2Bconviction%2Bfor%2Bstealing%2BAI%2Bsecrets%2Bpartially%2Boverturned/26957433.html", "type": "reputable_reporting", "note": "Current report on the August 20 acquittal of the economic-espionage counts, the surviving theft convictions, and pending sentencing." } ] }, { "slug": "hao-zhang-rf-filters", "caseId": "CS-007", "title": "A semiconductor engineer used U.S. filter secrets to build a university-backed competitor in China", "shortTitle": "Hao Zhang — Avago & Skyworks", "deck": "A bench trial found that Hao Zhang and collaborators moved radio-frequency filter know-how from Avago and Skyworks into a Tianjin University-linked manufacturing venture.", "finding": "A federal judge convicted Hao Zhang of economic espionage, trade-secret theft, and related conspiracies after finding that he intended to build a competing business with stolen technology and knew the venture would benefit PRC instrumentalities, including Tianjin University.", "executiveSummary": [ { "text": "Hao Zhang worked at Skyworks while a collaborator worked at Avago, placing the pair on opposite sides of the specialized radio-frequency filter market. Instead of treating their employers' surface- and bulk-acoustic-wave processes as separate confidential portfolios, the collaborators shared protected know-how and used the combined package to plan a competing manufacturing business in China.", "sourceIds": [ "S1", "S2" ] }, { "text": "The commercialization route ran through Tianjin University appointments, Chinese patent applications, an offshore entity, a university subsidiary, and a manufacturing venture called ROFS. After a bench trial, a federal judge convicted Zhang of economic espionage, trade-secret theft, and conspiracy, ordered $476,835 in restitution, and required forfeiture of patents derived from stolen Avago technology.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "Two employers supplied complementary secrets", "paragraphs": [ { "text": "Mobile devices rely on tiny acoustic filters to isolate desired radio bands. Zhang's Skyworks role and Wei Pang's Avago role exposed them to different confidential designs, processes, and manufacturing methods. Trial evidence showed that those employer boundaries were crossed as secrets moved among collaborators developing a single competing plan.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Academic appointments became industrial infrastructure", "paragraphs": [ { "text": "In 2009, Zhang and Pang obtained Tianjin University professorships tied to creating a micro-electromechanical-systems laboratory. The group pursued Chinese patent applications and organized corporate entities; a Tianjin University subsidiary and an offshore collaborator entity then formed ROFS to manufacture products realized from the acquired technology.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The court connected theft to state benefit", "paragraphs": [ { "text": "Zhang was arrested after arriving in Los Angeles in 2015. Following a four-day bench trial, the court found that he stole Avago and Skyworks trade secrets, intended to build a competing China-based business, and knew it would benefit PRC instrumentalities including Tianjin University. He received 18 months in prison, restitution, supervised release, and forfeiture of patents obtained with stolen Avago technology.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/hao-zhang.png", "alt": "Identification photograph of Hao Zhang wearing glasses and a dark shirt", "caption": "Hao Zhang, the former Skyworks engineer and Tianjin University professor convicted in the radio-frequency filter case. DCSA/CDSE publishes this portrait with its official case study.", "credit": "Defense Counterintelligence and Security Agency / CDSE", "sourceUrl": "https://www.cdse.edu/Portals/124/Documents/casestudies/case-study-zhang.pdf", "license": "Editorial use; published by DCSA/CDSE", "kind": "portrait" }, { "src": "/media/cases/saw-filter.jpg", "alt": "Small surface acoustic wave radio-frequency filter component photographed beside a ruler", "caption": "Surface-acoustic-wave filters are compact components that separate radio bands inside communications equipment. The case concerned protected filter designs and manufacturing processes. Contextual image; not a component made by the parties.", "credit": "Mister rf", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Kyocera_38.9MN_SAW_filter_01.jpg", "license": "CC BY-SA 4.0", "licenseUrl": "https://creativecommons.org/licenses/by-sa/4.0/", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Convicted after a four-day bench trial; sentenced in 2020 to 18 months in prison, three years of supervised release, $476,835 in restitution, and forfeiture of patents obtained with stolen Avago technology.", "statusDate": "2020-08-31", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "The trial judge found that Zhang knew the China-based business would benefit PRC instrumentalities, including Tianjin University. That adjudicated finding applies to Zhang's conduct; it should not be generalized to every person or institution named in the original indictment.", "featured": true, "sector": { "slug": "ai-semiconductors-and-telecommunications", "label": "AI, semiconductors & telecommunications" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2006–2020", "accessVectors": [ "Semiconductor engineering employment", "University appointments", "Joint-venture formation" ], "methods": [ "Insider sharing", "Patent filings", "Cross-border commercialization", "University-linked manufacturing" ], "assets": [ "Surface acoustic wave filters", "Bulk acoustic wave filters", "Film bulk acoustic resonators", "Manufacturing processes" ], "actors": [ { "name": "Hao Zhang", "role": "Former Skyworks engineer, Tianjin University professor, and venture participant", "outcome": "Convicted at trial and sentenced to 18 months, restitution, supervised release, and patent forfeiture" }, { "name": "Wei Pang", "role": "Former Avago engineer and alleged co-conspirator named in the charging record", "outcome": "Not adjudicated in the sources cited here" }, { "name": "Tianjin University", "role": "PRC university found by the trial court to be an instrumentality expected to benefit from the venture" }, { "name": "ROFS Microsystems", "role": "Joint venture formed to manufacture products using the transferred filter technology" } ], "originators": [ { "name": "Avago Technologies", "role": "Developer and owner of protected FBAR and related filter technology" }, { "name": "Skyworks Solutions", "role": "Developer and owner of protected radio-frequency filter technology" } ], "transferChain": [ { "stage": "relationship", "label": "Specialist engineering roles", "detail": "Zhang worked at Skyworks while Pang worked at Avago, placing both inside firms developing advanced mobile-device filters.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Complementary filter know-how", "detail": "Their jobs exposed them to confidential surface- and bulk-acoustic-wave designs, processes, and manufacturing information.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Secrets shared across employers", "detail": "Trial evidence showed Zhang and Pang illicitly shared employer trade secrets with one another and with collaborators in China.", "sourceIds": [ "S1" ] }, { "stage": "movement", "label": "University and patent pathway", "detail": "They obtained Tianjin University professorships, pursued Chinese patent applications, and organized entities to carry the technology into a China-based venture.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Manufacturing venture created", "detail": "A Tianjin University subsidiary and the collaborators' offshore entity formed ROFS to manufacture products realized from the trade secrets.", "sourceIds": [ "S1" ] }, { "stage": "consequence", "label": "Economic espionage proved", "detail": "The court convicted Zhang and ordered imprisonment, restitution, supervised release, and forfeiture of U.S. patents derived from stolen Avago technology.", "sourceIds": [ "S1" ] } ], "timeline": [ { "date": "2006", "label": "Parallel employment begins", "detail": "Zhang joined Skyworks, Pang joined Avago, and the collaborators began formulating a China-based competing business.", "sourceIds": [ "S1" ] }, { "date": "2009", "label": "University appointments", "detail": "Zhang and Pang obtained Tianjin University professorships tied to creating a micro-electromechanical-systems laboratory.", "sourceIds": [ "S1" ] }, { "date": "2015-05-16", "label": "Zhang arrested", "detail": "Federal agents arrested Zhang after he arrived in Los Angeles; the Justice Department announced the charges three days later.", "sourceIds": [ "S2" ] }, { "date": "2020-08-31", "label": "Sentence imposed", "detail": "Following his bench-trial conviction, Zhang received 18 months in prison and was ordered to pay $476,835 in restitution.", "sourceIds": [ "S1" ] } ], "established": [ { "text": "The trial court found that Zhang stole Avago and Skyworks filter trade secrets and intended to use them in a new China-based business.", "sourceIds": [ "S1" ] }, { "text": "The court found that Zhang knew the venture would benefit PRC instrumentalities, including Tianjin University.", "sourceIds": [ "S1" ] }, { "text": "The commercialization structure joined university appointments, patent filings, an offshore entity, a university subsidiary, and a manufacturing venture.", "sourceIds": [ "S1", "S2" ] } ], "uncertainties": [ { "text": "The 2015 announcement charged six people, but this file treats only Zhang's later conviction as adjudicated and does not assign his outcome to the other defendants.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Zhang contested the case at a bench trial. The judge found him guilty; this file does not treat the original allegations against other defendants as proven by Zhang's judgment.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "The sentencing court ordered $476,835 in restitution to Avago and Skyworks and forfeiture of patents obtained with stolen Avago technology.", "sourceIds": [ "S1" ], "qualifier": "court_found" }, { "text": "The trade secrets supported a manufacturing venture positioned to compete in radio-frequency components used in consumer and military applications.", "sourceIds": [ "S1" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "Complementary insiders bridged silos", "detail": "Employees at two competing firms could combine protected knowledge into a fuller manufacturing package than either person held alone.", "hindsight": true }, { "title": "Appointments became a transfer channel", "detail": "University roles, patents, offshore entities, and a joint venture converted insider knowledge into an organized commercialization pathway.", "hindsight": true }, { "title": "Patent activity surfaced too late", "detail": "Related patent filings can reveal protected technical claims, but only if employers monitor inventor and affiliate activity through a lawful review process.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Model collusive insider risk", "detail": "Look for coordinated access, communications, and departures across employees who hold complementary portions of a crown-jewel process, subject to legal and privacy controls." }, { "audience": "both", "title": "Reconcile appointments and patents", "detail": "Compare disclosed outside appointments, company formation, and inventor activity with confidentiality, invention-assignment, and sponsored-research obligations." }, { "audience": "companies", "title": "Protect process combinations", "detail": "Map the set of recipes, tolerances, tooling, and troubleshooting knowledge needed to reproduce a product—not just individual files—and segment access accordingly." } ], "sources": [ { "id": "S1", "title": "Chinese Citizen Sentenced for Economic Espionage, Theft of Trade Secrets, and Conspiracy", "publisher": "U.S. Attorney's Office for the Northern District of California", "published": "2020-09-01", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-ndca/pr/chinese-citizen-sentenced-economic-espionage-theft-trade-secrets-and-conspiracy", "type": "government_release", "note": "Sentencing and bench-trial findings, including the beneficiary, commercialization path, restitution, and forfeiture." }, { "id": "S2", "title": "Chinese Professors Among Six Defendants Charged with Economic Espionage and Theft of Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2015-05-19", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-professors-among-six-defendants-charged-economic-espionage-and-theft-trade-secrets", "type": "government_release", "note": "Charging-stage chronology and entity structure; allegations against people other than Zhang are not treated as adjudicated." } ] }, { "slug": "hytera-motorola-dmr", "caseId": "CS-008", "title": "Hytera recruited Motorola engineers and used stolen source code to enter the digital-radio market", "shortTitle": "Hytera — Motorola Solutions", "deck": "Hytera admitted that it hired Motorola personnel, directed the removal of proprietary digital-mobile-radio material, and used the information to develop competing products at a fraction of Motorola's development cost.", "finding": "Hytera Communications pleaded guilty to conspiring to steal Motorola Solutions trade secrets. A federal judge imposed a $50 million fine and found that the conspiracy caused $214 million in lost profits.", "executiveSummary": [ { "text": "Hytera wanted to enter the digital-mobile-radio market without paying the full time and cost Motorola had invested in developing it. Beginning in 2006, the Chinese telecommunications company recruited Motorola engineers who possessed source code, technical documents, and the practical knowledge needed to turn those files into competing products.", "sourceIds": [ "S1", "S2" ] }, { "text": "This is a corporate admission, not merely an accusation against former employees. Hytera pleaded guilty to directing recruits to take Motorola's proprietary material and using it to develop radios at a fraction of the original cost. In March 2026, the court imposed a $50 million fine and five years of compliance-focused probation and found $214 million in Motorola lost profits.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "Recruitment targeted a ready-made development team", "paragraphs": [ { "text": "The engineers Hytera recruited did not bring only general experience. Their Motorola roles had exposed them to proprietary digital-radio information, including source code produced through years of research and development. Hytera admitted that it directed recruited employees to remove that material without authorization.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Files and know-how collapsed development time", "paragraphs": [ { "text": "Once inside Hytera, the recruits supplied both copied technical material and the knowledge needed to use it. The company admitted that the stolen information supported development of competing digital-mobile-radio products at a fraction of Motorola's original development cost, allowing those products to compete through 2020.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The company itself accepted criminal responsibility", "paragraphs": [ { "text": "Hytera pleaded guilty in 2025. The following March, the judge found $214 million in lost profits and imposed a $50 million fine, probation, and reporting and compliance conditions; restitution was offset by prior civil-judgment payments. The cited criminal record establishes the company's conspiracy, but not PRC government direction or support.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/digital-mobile-radio.png", "alt": "Handheld digital mobile radio with antenna, display screen, keypad, and control knobs", "caption": "Digital mobile radios combine embedded software with specialized communications engineering. Hytera admitted using stolen Motorola material to accelerate competing products. Contextual image; not a radio made by either company.", "credit": "RingwayManchester", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Retevis_rt3s_radio.png", "license": "CC BY-SA 4.0", "licenseUrl": "https://creativecommons.org/licenses/by-sa/4.0/", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Hytera pleaded guilty in 2025 and was sentenced in March 2026 to a $50 million fine and five years of probation with compliance and reporting conditions. The judge found $214 million in lost profits; restitution was fully offset by prior civil-judgment payments.", "statusDate": "2026-03-05", "lastReviewed": "2026-08-23", "nextReview": "2027-03-09", "stateNexus": "none_established", "stateNexusSummary": "The criminal judgment establishes corporate trade-secret theft by China-based Hytera. The cited plea and sentencing record does not establish that the PRC government directed or supported the conspiracy.", "featured": true, "sector": { "slug": "ai-semiconductors-and-telecommunications", "label": "AI, semiconductors & telecommunications" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China", "Malaysia" ], "period": "2006–2026", "accessVectors": [ "Competitor recruitment", "Engineering employment", "Source-code access" ], "methods": [ "Directed insider theft", "Source-code copying", "Product development", "Market competition" ], "assets": [ "Digital mobile radio source code", "Engineering specifications", "Product-development know-how" ], "actors": [ { "name": "Hytera Communications Corporation Ltd.", "role": "China-based radio manufacturer and admitted corporate conspirator", "outcome": "Pleaded guilty; fined $50 million and placed on five years of probation" }, { "name": "Gee Siong Kok", "role": "Former Motorola employee and Hytera employee charged in the scheme", "outcome": "Pleaded guilty in 2022; awaiting sentencing as of March 2026" }, { "name": "Six additional Hytera employees", "role": "Defendants charged in 2021", "outcome": "Arrest warrants outstanding as of March 2026; charges are allegations" } ], "originators": [ { "name": "Motorola Solutions, Inc.", "role": "Developer and owner of the protected digital-mobile-radio technology" } ], "transferChain": [ { "stage": "relationship", "label": "Competitor recruitment", "detail": "Beginning in 2006, Hytera recruited Motorola employees who possessed specialized digital-radio knowledge.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Source and design access", "detail": "The recruits had access to Motorola's proprietary digital-mobile-radio information, including source code developed over years of research.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Employees directed to take files", "detail": "Hytera admitted that it directed recruited employees to take Motorola proprietary and trade-secret information without authorization.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Knowledge moved to Hytera", "detail": "The employees brought the copied technical material and their accumulated know-how into Hytera's development effort.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Competing radios developed", "detail": "Hytera used the stolen material to develop competing products at a fraction of Motorola's original development cost and competed through 2020.", "sourceIds": [ "S1" ] }, { "stage": "consequence", "label": "Corporate conviction and loss finding", "detail": "Hytera's guilty plea produced a $50 million fine, five years of probation, and a judicial finding of $214 million in Motorola lost profits.", "sourceIds": [ "S1", "S2" ] } ], "timeline": [ { "date": "2006", "label": "Recruitment begins", "detail": "Hytera began hiring Motorola engineers and directing them to take proprietary digital-radio information.", "sourceIds": [ "S1", "S2" ] }, { "date": "2008–2020", "label": "Products compete", "detail": "Hytera developed and sold digital-radio products using the transferred material and competed against Motorola through 2020.", "sourceIds": [ "S1" ] }, { "date": "2025", "label": "Hytera pleads guilty", "detail": "The company admitted one federal count of conspiracy to steal trade secrets.", "sourceIds": [ "S1", "S2" ] }, { "date": "2026-03-05", "label": "Company sentenced", "detail": "The court imposed the $50 million fine, probation, compliance conditions, and the $214 million lost-profits finding.", "sourceIds": [ "S1" ] } ], "established": [ { "text": "Hytera admitted a corporate conspiracy to steal Motorola's digital-mobile-radio trade secrets through recruited employees.", "sourceIds": [ "S1", "S2" ] }, { "text": "The stolen material included source code and supported lower-cost development of products that competed with Motorola through 2020.", "sourceIds": [ "S1" ] }, { "text": "The judge found $214 million in lost profits and imposed a $50 million fine plus compliance-focused probation.", "sourceIds": [ "S1" ] } ], "uncertainties": [ { "text": "The cited criminal record does not establish PRC government direction or support; corporate location and nationality are not substitutes for that evidence.", "sourceIds": [ "S1", "S2" ] }, { "text": "Proceedings for the individual defendants were not all complete at review; six remained subject to warrants and Kok awaited sentencing in the March 2026 account.", "sourceIds": [ "S1" ] } ], "response": [ { "text": "Hytera resolved the corporate criminal case by pleading guilty. Restitution was offset by payments already made under a civil judgment, avoiding double recovery rather than erasing the court's loss finding.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "The sentencing judge found that Hytera caused Motorola $214 million in lost profits.", "sourceIds": [ "S1" ], "qualifier": "court_found" }, { "text": "The company bypassed years of Motorola research and development and entered the market at a fraction of the originator's cost.", "sourceIds": [ "S1" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "A competitor recruited a team", "detail": "The risk was not one departing employee but coordinated recruitment that could carry code, design context, and tacit knowledge together.", "hindsight": true }, { "title": "Source code compressed development time", "detail": "Once code and experienced engineers moved together, the competitor could avoid substantial development expense and reach the market faster.", "hindsight": true }, { "title": "Commercial harm accumulated for years", "detail": "The resulting products competed through 2020, showing why post-departure detection and rapid preservation matter as much as preventive controls.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Treat team departures as events", "detail": "Escalate clustered recruiting, unusual downloads, repository cloning, and overlapping resignations involving high-value product teams to a documented legal, security, and HR review." }, { "audience": "companies", "title": "Instrument source repositories", "detail": "Use least privilege, strong logging, code provenance, and alerts for bulk exports or anomalous access while preserving legitimate engineering workflows." }, { "audience": "companies", "title": "Prepare rapid civil and criminal paths", "detail": "Pre-plan evidence preservation, outside-counsel escalation, customer-impact analysis, and law-enforcement referral criteria so years of competitive harm do not accrue before action." } ], "sources": [ { "id": "S1", "title": "Chinese Telecommunications Company Fined $50 Million for Conspiring to Steal Technology from Motorola Solutions", "publisher": "U.S. Attorney's Office for the Northern District of Illinois", "published": "2026-03-09", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-ndil/pr/chinese-telecommunications-company-fined-50-million-conspiring-steal-technology", "type": "government_release", "note": "Current corporate sentencing, loss finding, employee-case status, and offense summary." }, { "id": "S2", "title": "Plea Agreement: United States v. Hytera Communications Corporation Ltd.", "publisher": "U.S. District Court for the Northern District of Illinois via U.S. Department of Justice", "published": "2025-01-14", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-ndil/media/1384221/dl", "type": "court_record", "note": "Corporate admissions and agreed factual basis; used independently from unresolved allegations against individual defendants." } ] }, { "slug": "huawei-tmobile-tappy", "caseId": "CS-009", "title": "Supplier access to T-Mobile's test lab became a pathway to Huawei's competing robot program", "shortTitle": "Huawei — T-Mobile Tappy", "deck": "T-Mobile admitted Huawei engineers to a protected test lab under nondisclosure agreements. A civil jury later found trade-secret misappropriation, while a related federal criminal prosecution remains unresolved.", "finding": "A 2017 civil jury found that Huawei Device USA misappropriated T-Mobile trade secrets, but awarded no damages on that claim and found no willful or malicious misappropriation. It awarded $4.8 million on contract claims. Huawei entities pleaded not guilty to later criminal charges, which remained pending at review.", "executiveSummary": [ { "text": "Huawei supplied phones to T-Mobile and needed T-Mobile's protected 'Tappy' robot to test how devices responded to repeated touchscreen use. T-Mobile granted selected Huawei employees controlled lab access under agreements that prohibited photography, reverse engineering, and use beyond testing Huawei handsets.", "sourceIds": [ "S1", "S2" ] }, { "text": "A civil jury later found that Huawei Device USA misappropriated T-Mobile trade secrets and breached contractual obligations. It awarded $4.8 million on contract claims, but zero damages for trade-secret misappropriation and no willfulness finding. A later indictment alleged a broader campaign to photograph, measure, and remove part of Tappy for Huawei's own robot program; Huawei pleaded not guilty, and those criminal allegations remained unresolved at review.", "sourceIds": [ "S1", "S2", "S3", "S4" ] } ], "narrative": [ { "heading": "Supplier access came with explicit limits", "paragraphs": [ { "text": "T-Mobile's test lab gave handset suppliers a valuable way to diagnose device performance before release. Huawei obtained selected access to Tappy because of that commercial relationship, but the permission was narrow: confidentiality agreements barred photography, reverse engineering, and unrelated use. The issue was not that a supplier entered the lab; it was whether trusted access was repurposed.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Civil findings and criminal allegations diverge", "paragraphs": [ { "text": "The 2017 civil jury found misappropriation and contract breaches, yet drew important limits around the result: it awarded no trade-secret damages and found no willful or malicious misappropriation. The $4.8 million judgment came from contract claims, not a $4.8 million trade-secret award.", "sourceIds": [ "S1", "S3" ] }, { "text": "The federal indictment later alleged unauthorized photographs, measurements, technical requests, removal of a robot-tip component, and transmission of information to engineers building Huawei's xDeviceRobot in China. Those details are accusations, not adjudicated facts. Huawei denied the charges, and an April 2026 order showed the criminal case still in pretrial litigation.", "sourceIds": [ "S2", "S3", "S4" ] } ] }, { "heading": "The governance lesson survives the uncertainty", "paragraphs": [ { "text": "Even with the criminal case unresolved, the civil verdict shows that written restrictions alone did not prevent misuse of protected lab access. Supplier enablement, physical access, and a partner's internal development incentives must be monitored together. This dossier preserves the mixed outcome so leaders can learn from the control failure without converting pending allegations into guilt.", "sourceIds": [ "S1", "S2", "S3", "S4" ] } ] } ], "media": [ { "src": "/media/cases/smartphone-inspection.jpg", "alt": "Technician performs quality inspection on smartphones in an electronics production environment", "caption": "Automated and repeatable device testing can itself become valuable engineering know-how. Tappy tested phone touchscreens; this contextual image shows smartphone quality inspection, not T-Mobile's robot or lab.", "credit": "Kathinka Engels and Inke Pickhardt", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Gigaset_Smartphone_Production_IV_Quality_Inspection.webm", "license": "CC BY 3.0", "licenseUrl": "https://creativecommons.org/licenses/by/3.0/", "kind": "technology" } ], "status": "disputed_or_developing", "legalOutcome": "Civil judgment entered for T-Mobile in 2017 for $4.8 million, reflecting contract liability; the jury found misappropriation but zero trade-secret damages and no willful or malicious conduct. The related federal criminal allegations remained unadjudicated, with an upcoming trial referenced in an April 2026 order.", "statusDate": "2026-04-13", "lastReviewed": "2026-08-23", "nextReview": "2026-11-23", "stateNexus": "unknown", "stateNexusSummary": "The cited Tappy civil judgment and criminal indictment concern Huawei corporate conduct. They do not establish that the PRC government directed the Tappy activity; the criminal allegations were still pending and nationality is not evidence of state control.", "featured": true, "sector": { "slug": "ai-semiconductors-and-telecommunications", "label": "AI, semiconductors & telecommunications" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2010–2026", "accessVectors": [ "Supplier relationship", "Protected laboratory access", "Nondisclosure agreements" ], "methods": [ "Unauthorized photography", "Technical questioning", "Physical measurement", "Component removal alleged", "Parallel robot development" ], "assets": [ "Robotic phone-testing design", "Mechanical specifications", "Test methods", "Component information" ], "actors": [ { "name": "Huawei Device USA, Inc.", "role": "T-Mobile handset supplier and civil defendant", "outcome": "Civil jury found misappropriation and contract liability; later pleaded not guilty to criminal charges" }, { "name": "Huawei Device Co., Ltd.", "role": "China-based Huawei entity and criminal defendant", "outcome": "Pleaded not guilty; criminal allegations remained pending at review" } ], "originators": [ { "name": "T-Mobile USA, Inc.", "role": "Developer and owner of the Tappy robotic phone-testing system and associated trade secrets" } ], "transferChain": [ { "stage": "relationship", "label": "Handset supply agreement", "detail": "Huawei supplied phones to T-Mobile and depended on T-Mobile's pre-release device-testing process.", "sourceIds": [ "S2" ] }, { "stage": "access", "label": "Restricted lab permission", "detail": "T-Mobile allowed selected Huawei employees to use Tappy for phone testing under agreements barring photography, reverse engineering, and unrelated use.", "sourceIds": [ "S2" ] }, { "stage": "acquisition", "label": "Misappropriation found", "detail": "The civil jury found trade-secret misappropriation. The later indictment alleged unauthorized photographs, measurements, technical requests, and removal of a robot-tip component; those additional criminal details remain allegations.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Information sent to China", "detail": "The indictment alleges that U.S.-based employees relayed Tappy details to engineers developing Huawei's xDeviceRobot in China.", "sourceIds": [ "S2" ] }, { "stage": "use", "label": "Competing test capability", "detail": "Prosecutors alleged that the acquired information supported Huawei's own phone-testing robot; that criminal-use theory had not been decided at review.", "sourceIds": [ "S2", "S4" ] }, { "stage": "consequence", "label": "Mixed civil findings; criminal case pending", "detail": "The civil case produced a $4.8 million judgment but no trade-secret damages or willfulness finding. Huawei denied the criminal charges, and the later case remained in pretrial litigation.", "sourceIds": [ "S1", "S3", "S4" ] } ], "timeline": [ { "date": "2010–2012", "label": "Commercial trust established", "detail": "A handset-supply relationship expanded into controlled Tappy access after Huawei entities signed confidentiality restrictions.", "sourceIds": [ "S2" ] }, { "date": "2012–2013", "label": "Technical collection alleged", "detail": "The indictment describes repeated efforts to obtain Tappy specifications, photographs, measurements, and a component for Huawei's robot effort.", "sourceIds": [ "S2" ] }, { "date": "2017-05-18", "label": "Civil verdict entered", "detail": "The jury found misappropriation and contract liability, awarded zero damages for the trade-secret claim, and did not find willful or malicious conduct.", "sourceIds": [ "S1", "S3" ] }, { "date": "2019-01-16", "label": "Criminal indictment filed", "detail": "A federal grand jury charged Huawei Device entities with offenses arising from the Tappy conduct; the companies later pleaded not guilty.", "sourceIds": [ "S2" ] }, { "date": "2026-04-13", "label": "Criminal pretrial litigation continues", "detail": "A court order referred to motions in limine, witness protection, and an upcoming criminal trial, confirming that the broader Huawei prosecution was not resolved.", "sourceIds": [ "S4" ] } ], "established": [ { "text": "A civil jury found that Huawei Device USA misappropriated T-Mobile trade secrets and breached contractual obligations.", "sourceIds": [ "S1", "S3" ] }, { "text": "The same jury awarded no damages for trade-secret misappropriation and did not find the conduct willful or malicious; the $4.8 million award arose from contract claims.", "sourceIds": [ "S1", "S3" ] }, { "text": "T-Mobile's supplier access was conditioned on explicit confidentiality, no-photography, no-reverse-engineering, and limited-purpose rules.", "sourceIds": [ "S2" ] } ], "uncertainties": [ { "text": "The 2019 criminal indictment is an accusation, not evidence of guilt. Huawei pleaded not guilty, and the prosecution had not reached a verdict at review.", "sourceIds": [ "S2", "S4" ] }, { "text": "The civil verdict established misappropriation but rejected trade-secret damages and willfulness; it cannot be summarized accurately as a $4.8 million trade-secret award.", "sourceIds": [ "S1", "S3" ] } ], "response": [ { "text": "Huawei emphasized that the civil jury found no trade-secret damages, unjust enrichment, or willful and malicious conduct and said the parties settled their disputes in 2017. Huawei pleaded not guilty in the criminal case.", "sourceIds": [ "S3", "S4" ] } ], "harm": [ { "text": "The civil judgment awarded T-Mobile $4.8 million on contract claims, not on the trade-secret claim.", "sourceIds": [ "S1", "S3" ], "qualifier": "court_found" }, { "text": "The jury found no compensable trade-secret loss or unjust enrichment and no willful or malicious misappropriation.", "sourceIds": [ "S1", "S3" ], "qualifier": "court_found" }, { "text": "Prosecutors allege that access shortened Huawei's path to a competing test system, but that alleged criminal consequence remains unadjudicated.", "sourceIds": [ "S2", "S4" ], "qualifier": "potential" } ], "leadershipGaps": [ { "title": "Necessary supplier access exposed the asset", "detail": "T-Mobile needed handset vendors to test products, but that operational requirement also exposed a proprietary test capability to a potential replicator.", "hindsight": true }, { "title": "Contracts did not enforce themselves", "detail": "Detailed restrictions framed the duty of care and later litigation, yet physical observation, photography, and technical questioning still required active supervision.", "hindsight": true }, { "title": "Mixed outcomes invite exaggeration", "detail": "Leadership decisions should rest on the precise civil findings and pending criminal status, not a compressed narrative that overstates damages or state attribution.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Design observable supplier access", "detail": "Use escorted sessions, purpose-limited work areas, device controls, session logs, and post-visit review for vendors exposed to unique tools or processes." }, { "audience": "companies", "title": "Answer refused requests consistently", "detail": "Record requests for restricted specifications and ensure employees, affiliates, and regional teams receive one documented answer with escalation for repeated attempts." }, { "audience": "both", "title": "Track findings separately", "detail": "Maintain distinct fields for civil findings, criminal allegations, damages, willfulness, appeals, and state nexus so risk briefings cannot silently convert one into another." } ], "sources": [ { "id": "S1", "title": "Jury Verdict: T-Mobile USA, Inc. v. Huawei Device USA, Inc.", "publisher": "U.S. District Court for the Western District of Washington via China IPR", "published": "2017-05-18", "retrieved": "2026-08-23", "url": "https://chinaipr.com/wp-content/uploads/2019/04/huawei-v.-t-mobile-verdict-sheet-1.pdf", "type": "court_record", "note": "Public mirror of docket document 484; the verdict form separates misappropriation, damages, willfulness, and contract findings." }, { "id": "S2", "title": "Indictment: United States v. Huawei Device Co., Ltd. and Huawei Device USA, Inc.", "publisher": "U.S. District Court for the Western District of Washington via U.S. Department of Justice", "published": "2019-01-16", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/press-release/file/1124996/dl", "type": "court_record", "note": "Detailed criminal allegations; cited as allegations only because the defendants pleaded not guilty and no verdict had been entered." }, { "id": "S3", "title": "Statement Regarding T-Mobile's Trade Secret Allegation", "publisher": "Huawei Technologies Co., Ltd.", "published": "2019-01-28", "retrieved": "2026-08-23", "url": "https://www.huawei.com/en/news/2019/1/huawei-t-mobile-trade-secret", "type": "company_statement", "note": "Huawei's response stressing the civil jury's zero trade-secret damages, no unjust enrichment, and no willfulness finding." }, { "id": "S4", "title": "Memorandum Decision and Order: United States v. Huawei Technologies Co., Ltd., et al.", "publisher": "U.S. District Court for the Eastern District of New York via GovInfo", "published": "2026-04-13", "retrieved": "2026-08-23", "url": "https://www.govinfo.gov/content/pkg/USCOURTS-nyed-1_18-cr-00457/pdf/USCOURTS-nyed-1_18-cr-00457-2.pdf", "type": "court_record", "note": "Current procedural evidence that the broader Huawei criminal case remained in pretrial litigation with an upcoming trial." } ] }, { "slug": "zhou-chen-nationwide-childrens", "caseId": "CS-010", "title": "Two hospital researchers commercialized stolen exosome trade secrets in China", "shortTitle": "Zhou & Chen — Nationwide Children’s", "deck": "A married research team used long-term laboratory access to take exosome-isolation methods, establish a company in China, seek government support, and sell products and services built from the hospital’s work.", "finding": "Yu Zhou and Li Chen pleaded guilty to conspiring to steal trade secrets and commit wire fraud. They received prison sentences and joint restitution exceeding $2.6 million; a federal court revoked their naturalizations in 2026.", "executiveSummary": [ { "text": "Yu Zhou and Li Chen spent roughly a decade each inside research programs at Nationwide Children's Hospital. Their trusted positions exposed them to methods for isolating exosomes—tiny biological packages with potential diagnostic and therapeutic value—including a protected technique that worked from a single drop of blood.", "sourceIds": [ "S1", "S2", "S3", "S4" ] }, { "text": "While still connected to the hospital, the married researchers created and operated a company in China without the institution's knowledge, used at least five stolen trade secrets in its business, advertised related products and services, and pursued government-linked funding and benefits. Both pleaded guilty, received prison terms and joint restitution exceeding $2.6 million, and later had their U.S. naturalizations revoked in federal civil proceedings.", "sourceIds": [ "S1", "S2", "S3", "S4", "S5" ] } ], "narrative": [ { "heading": "Long tenure created deep laboratory access", "paragraphs": [ { "text": "Zhou worked at the institute from 2007 to 2017 and Chen from 2008 to 2018. Years inside the same research environment gave them more than access to documents: they learned the experimental sequence, materials, troubleshooting, and practical know-how behind exosome isolation. Their pleas covered at least five trade secrets, including the one-drop-of-blood method.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "A hidden company commercialized the work", "paragraphs": [ { "text": "The pair formed and operated a company in China without Nationwide Children's knowledge. Court records describe the company advertising products and services derived from hospital methods and entering a substantial commercialization agreement. The record also documents government-linked funding or benefits, though it does not prove that a PRC agency ordered or managed the theft.", "sourceIds": [ "S1", "S2", "S3", "S5" ] } ] }, { "heading": "Criminal pleas were followed by civil consequences", "paragraphs": [ { "text": "Chen pleaded guilty in July 2020 and Zhou that December. They received 30- and 33-month prison terms, forfeiture orders, and joint restitution of $2,616,087. In March 2026, a federal judge entered civil orders revoking both naturalizations; because those orders were recent at review, later appellate activity remains an update point.", "sourceIds": [ "S2", "S3", "S4", "S5" ] } ] } ], "media": [ { "src": "/media/cases/yu-zhou-li-chen.png", "alt": "Side-by-side identification photographs of Yu Zhou and Li Chen", "caption": "Yu Zhou, left, and Li Chen, the married researchers who pleaded guilty to conspiring to steal exosome-related trade secrets from Nationwide Children's Hospital. DCSA/CDSE publishes these identification photographs with its official case study.", "credit": "Defense Counterintelligence and Security Agency / CDSE", "sourceUrl": "https://www.cdse.edu/Portals/124/Documents/casestudies/case-study-chen.pdf", "license": "Editorial use; published by DCSA/CDSE", "kind": "portrait" }, { "src": "/media/cases/exosome-biogenesis.png", "alt": "Scientific diagram showing how extracellular vesicles called exosomes form and leave a cell", "caption": "Exosomes are nanoscale extracellular vesicles with diagnostic and therapeutic potential. The stolen methods concerned isolating them, including from a single drop of blood. Contextual scientific illustration.", "credit": "Law ZJ, Khoo XH, Lim PT, Goh BH, Ming LC, Lee WL, and Goh HP", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Biogenesis_of_exosomes.png", "license": "CC BY 4.0", "licenseUrl": "https://creativecommons.org/licenses/by/4.0/", "kind": "illustration" } ], "status": "adjudicated", "legalOutcome": "Both pleaded guilty; Chen received 30 months and Zhou 33 months in prison, with joint restitution of $2,616,087 and forfeiture orders. Federal civil orders revoked both naturalizations in March 2026.", "statusDate": "2026-03-30", "lastReviewed": "2026-08-23", "nextReview": "2026-09-30", "stateNexus": "documented_affiliation_or_support", "stateNexusSummary": "Court and plea materials document benefits and funding connected to Chinese government programs, but the cited record does not establish that the theft was directed by the PRC state.", "featured": true, "sector": { "slug": "life-sciences-and-research", "label": "Life sciences & research" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2007–2026", "accessVectors": [ "Long-term research employment", "Laboratory access", "Outside business interests", "Research funding and talent programs" ], "methods": [ "Insider appropriation", "Undisclosed outside company", "Cross-border commercialization", "Wire communications", "False statements in immigration processes" ], "assets": [ "Exosome-isolation trade secrets", "One-drop blood-isolation method", "Laboratory protocols", "Research materials and know-how" ], "actors": [ { "name": "Yu Zhou", "role": "Former Nationwide Children’s Hospital researcher and co-founder of a company in China", "outcome": "Pleaded guilty; sentenced to 33 months, a fine, restitution, and forfeiture; naturalization revoked in 2026" }, { "name": "Li Chen", "role": "Former Nationwide Children’s Hospital researcher and co-founder of a company in China", "outcome": "Pleaded guilty; sentenced to 30 months, restitution, and forfeiture; naturalization revoked in 2026" } ], "originators": [ { "name": "Nationwide Children’s Hospital Research Institute", "role": "Employer and owner of the exosome-related trade secrets developed in its laboratories" } ], "transferChain": [ { "stage": "relationship", "label": "Long-term researchers", "detail": "Zhou and Chen each worked for roughly a decade in research roles at Nationwide Children’s Hospital.", "sourceIds": [ "S1", "S3", "S4" ] }, { "stage": "access", "label": "Laboratory know-how", "detail": "Their roles gave them access to methods for isolating exosomes and related hospital research materials.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Trade secrets taken", "detail": "Their guilty pleas admitted a conspiracy to steal at least five trade secrets, including a method for isolating exosomes from a single drop of blood.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Company formed in China", "detail": "They established and operated a company in China without the hospital’s knowledge and used its communications and commercial activity to move the work outside the institution.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Commercialized abroad", "detail": "The company advertised products and services derived from the stolen exosome-isolation technology and entered a substantial commercialization agreement.", "sourceIds": [ "S2", "S3" ] }, { "stage": "consequence", "label": "Criminal and civil judgments", "detail": "Both defendants received prison and restitution sentences; in 2026 a federal judge also revoked their U.S. naturalizations.", "sourceIds": [ "S3", "S4", "S5" ] } ], "timeline": [ { "date": "2007–2018", "label": "Research access", "detail": "Zhou worked at the institute from 2007 to 2017 and Chen from 2008 to 2018.", "sourceIds": [ "S1" ] }, { "date": "2020-07-30", "label": "Chen pleads guilty", "detail": "Chen admitted conspiring to steal trade secrets and commit wire fraud, including conduct involving at least five hospital trade secrets.", "sourceIds": [ "S2" ] }, { "date": "2020-12-11", "label": "Zhou pleads guilty", "detail": "Zhou pleaded guilty to the same conspiracy offenses and admitted his role in the scheme.", "sourceIds": [ "S1" ] }, { "date": "2021-02-01", "label": "Chen sentenced", "detail": "The court sentenced Chen to 30 months in prison and ordered restitution and forfeiture.", "sourceIds": [ "S3" ] }, { "date": "2021-04-20", "label": "Zhou sentenced", "detail": "The court sentenced Zhou to 33 months in prison, imposed a fine, and ordered joint restitution and forfeiture.", "sourceIds": [ "S4" ] }, { "date": "2026-03-30", "label": "Naturalizations revoked", "detail": "A federal judge entered civil orders revoking both defendants’ naturalizations after finding they had been illegally procured.", "sourceIds": [ "S5" ] } ], "established": [ { "text": "Both researchers admitted the charged conspiracy through guilty pleas; the central misconduct is adjudicated rather than merely alleged.", "sourceIds": [ "S1", "S2" ] }, { "text": "The stolen assets included at least five trade secrets concerning exosome isolation, including a method using one drop of blood.", "sourceIds": [ "S1", "S2" ] }, { "text": "They operated a company in China without the hospital’s knowledge and pursued commercial value from the hospital-derived methods.", "sourceIds": [ "S1", "S2", "S3" ] }, { "text": "The record documents Chinese government-linked funding or benefits, but does not establish state direction of the theft.", "sourceIds": [ "S1", "S5" ] } ], "uncertainties": [ { "text": "Public records document funding and benefits associated with Chinese government programs, but do not prove that a PRC agency ordered or managed the underlying theft.", "sourceIds": [ "S1", "S5" ] }, { "text": "Because the 2026 denaturalization orders were recent when this file was reviewed, later civil appellate activity may require an update.", "sourceIds": [ "S5" ] } ], "response": [ { "text": "Zhou and Chen each pleaded guilty and admitted the conspiracy conduct described in their criminal cases; this review found no separate public denial that alters those admissions.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "The sentencing court imposed joint restitution of $2,616,087, reflecting the loss amount used in the criminal judgments.", "sourceIds": [ "S3", "S4" ], "qualifier": "court_found" }, { "text": "Chen admitted that, after the one-drop isolation method was taken, the hospital could no longer perform that isolation method in its laboratory.", "sourceIds": [ "S2" ], "qualifier": "documented" }, { "text": "The couple received nearly $1.5 million in transactions tied to the scheme, according to the 2026 Justice Department summary of the court record.", "sourceIds": [ "S5" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "Outside interests were invisible", "detail": "The researchers operated a related company abroad without the hospital’s knowledge. Conflict disclosures were not connected tightly enough to technical access and commercialization monitoring.", "hindsight": true }, { "title": "Know-how could leave without a file", "detail": "Laboratory methods include tacit steps, sample handling, and troubleshooting knowledge. Controls focused only on documents would miss much of what made the method reproducible.", "hindsight": true }, { "title": "Long tenure reduced scrutiny", "detail": "A decade of trusted work created sustained access. Mature insider-risk programs reevaluate changing outside ties and access patterns without treating longevity as a substitute for controls.", "hindsight": true } ], "actions": [ { "audience": "universities", "title": "Join disclosures to access review", "detail": "Reconcile outside appointments, equity, companies, patents, talent-program participation, and foreign funding with laboratory access and sponsored-research obligations at least annually." }, { "audience": "both", "title": "Map tacit knowledge", "detail": "Identify the protocols, samples, settings, supplier knowledge, and troubleshooting steps that make high-value research reproducible; protect them as a system, not only as files." }, { "audience": "universities", "title": "Set commercialization tripwires", "detail": "Monitor lawful public signals—new companies, patents, product claims, websites, and licensing activity—for overlap with protected institutional work, with counsel-defined review thresholds." }, { "audience": "both", "title": "Preserve a safe reporting channel", "detail": "Give colleagues a confidential route to report undeclared companies, unusual sample movements, or pressure to bypass material-transfer and licensing processes." } ], "sources": [ { "id": "S1", "title": "Man Who Worked at Local Research Institute for 10 Years Pleads Guilty to Conspiring to Steal Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2020-12-11", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/man-who-worked-local-research-institute-10-years-pleads-guilty-conspiring-steal-trade-secrets", "type": "government_release", "note": "Zhou plea summary with employment, company, technology, and government-benefit facts." }, { "id": "S2", "title": "Plea Agreement: United States v. Li Chen", "publisher": "U.S. District Court for the Southern District of Ohio via U.S. Department of Justice", "published": "2020-07-30", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/press-release/file/1299761/dl", "type": "court_record", "note": "Signed plea agreement and statement of facts." }, { "id": "S3", "title": "Hospital Researcher Sentenced to Prison for Conspiring to Steal Trade Secrets and Sell Them in China", "publisher": "U.S. Department of Justice", "published": "2021-02-01", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/hospital-researcher-sentenced-prison-conspiring-steal-trade-secrets-sell-them-china", "type": "government_release", "note": "Chen sentencing summary, including restitution and forfeiture." }, { "id": "S4", "title": "Hospital Researcher Sentenced to Prison for Conspiring to Steal Trade Secrets and Sell Them in China", "publisher": "U.S. Department of Justice", "published": "2021-04-20", "retrieved": "2026-08-23", "url": "https://www.justice.gov/opa/pr/hospital-researcher-sentenced-prison-conspiring-steal-trade-secrets-and-sell-china", "type": "government_release", "note": "Zhou sentencing summary, including the fine, joint restitution, and forfeiture." }, { "id": "S5", "title": "Federal Judge Revokes Naturalization of Married Couple Who Conspired to Steal Medical Trade Secrets and Share Them with China", "publisher": "U.S. Department of Justice", "published": "2026-03-31", "retrieved": "2026-08-23", "url": "https://www.justice.gov/opa/pr/federal-judge-revokes-naturalization-married-couple-who-conspired-steal-medical-trade", "type": "government_release", "note": "Summary of March 30, 2026 civil orders and the underlying criminal record." } ] }, { "slug": "yu-xue-tao-li-gsk", "caseId": "CS-011", "title": "A GSK scientist sent drug-development secrets to a China-based startup she co-founded", "shortTitle": "Yu Xue & Tao Li — GSK", "deck": "Yu Xue copied roughly 200 GSK documents concerning products, research, and manufacturing and sent them to collaborators at Renopharma, a China-based company she helped create.", "finding": "Yu Xue and Tao Li pleaded guilty to conspiring to steal GSK trade secrets for Renopharma. Courts also found that GSK suffered no actual monetary loss and that prosecutors did not prove intended pecuniary loss for sentencing.", "executiveSummary": [ { "text": "While conducting biopharmaceutical research at GlaxoSmithKline, Yu Xue helped create a separate company in China called Renopharma. She then copied roughly 200 GSK documents covering development products, research data, manufacturing processes, and related platforms and sent material to co-founder Tao Li and other collaborators in China.", "sourceIds": [ "S1", "S2" ] }, { "text": "Xue and Li pleaded guilty to conspiring to steal trade secrets for Renopharma's economic benefit. But the harm record is narrower than the theft: by the time of arrest, Renopharma had not sold a product or earned a profit from GSK information, and the district and appellate courts assigned $0 actual and intended pecuniary loss for the sentencing enhancement.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "A scientist built a second enterprise", "paragraphs": [ { "text": "Xue's GSK role gave her access across the drug-development pipeline: candidate products, research results, development platforms, manufacturing processes, and regulatory material. While retaining that trusted position, she co-founded Renopharma with Li and others in China, creating an undisclosed commercial destination for information she encountered at work.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Two hundred documents crossed the boundary", "paragraphs": [ { "text": "Xue copied approximately 200 GSK documents, some containing trade secrets, and moved them by email and portable storage to collaborators. Investigators found GSK confidential and trade-secret files on Li's computer, and some draft material had replaced references to GSK with Renopharma's name—evidence of an effort to repurpose, not merely archive, the work.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Theft was proved; commercial damage was not", "paragraphs": [ { "text": "Xue pleaded guilty in 2018 and received eight months in prison; Li received 59 days. Their pleas establish the conspiracy and intended benefit to Renopharma. At sentencing, however, prosecutors did not prove an intended pecuniary loss, and the courts found no realized product, sale, or profit using the information. That $0 loss finding limits the harm claim without undoing the convictions.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/yu-xue.jpg", "alt": "Yu Xue shielding part of her face with a handbag while leaving federal court beside her attorney", "caption": "Yu Xue, left, leaving the federal courthouse in Philadelphia with attorney Peter Zeidenberg in 2018. Xue later pleaded guilty and was sentenced in the GSK trade-secret case.", "credit": "Matt Rourke / Associated Press, via WHYY", "sourceUrl": "https://whyy.org/articles/researcher-stole-gsk-cancer-drug-secrets-in-case-involving-upper-merion-workers/", "license": "Editorial use; © Associated Press / Matt Rourke", "kind": "photograph" }, { "src": "/media/cases/monoclonal-antibody.png", "alt": "Scientific illustration of monoclonal antibodies attaching to target molecules on a cancer cell", "caption": "Biopharmaceutical development joins scientific data with repeatable development and manufacturing processes. The copied GSK portfolio spanned those categories. Contextual scientific illustration, not a specific stolen document.", "credit": "Cancer Research UK", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Diagram_showing_a_monoclonal_antibody_attached_to_a_cancer_cell_CRUK_070.svg", "license": "CC BY-SA 4.0", "licenseUrl": "https://creativecommons.org/licenses/by-sa/4.0/", "kind": "illustration" } ], "status": "adjudicated", "legalOutcome": "Xue and Li each pleaded guilty to one conspiracy count. Xue received eight months in prison and Li 59 days. The district court assigned $0 actual and intended pecuniary loss for the sentencing enhancement, and the Third Circuit affirmed in 2022.", "statusDate": "2022-08-02", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "documented_affiliation_or_support", "stateNexusSummary": "Public records state that Renopharma received financial support and subsidies from the Chinese government. The cited adjudications do not establish that a PRC agency directed the theft, so support is recorded separately from operational control.", "featured": true, "sector": { "slug": "life-sciences-and-research", "label": "Life sciences & research" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2012–2022", "accessVectors": [ "Biopharmaceutical research employment", "Undisclosed startup activity", "Scientific collaboration" ], "methods": [ "Email transfer", "Portable storage", "Document relabeling", "Cross-border startup formation" ], "assets": [ "Monoclonal-antibody research", "Development platforms", "Manufacturing processes", "Investigational product data" ], "actors": [ { "name": "Yu Xue", "role": "Former GSK scientist and Renopharma co-founder", "outcome": "Pleaded guilty and sentenced to eight months in prison" }, { "name": "Tao Li", "role": "Renopharma co-founder and recipient of GSK material", "outcome": "Pleaded guilty and sentenced to 59 days, or time served" }, { "name": "Renopharma", "role": "China-based pharmaceutical startup intended to benefit from the documents" } ], "originators": [ { "name": "GlaxoSmithKline", "role": "Employer and owner of the protected biopharmaceutical research and development information" } ], "transferChain": [ { "stage": "relationship", "label": "Trusted scientist and founder", "detail": "While conducting biopharmaceutical research at GSK, Xue co-founded Renopharma with Li and others in China.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Drug-development portfolio", "detail": "Her role exposed her to product research, development platforms, manufacturing processes, and regulatory-development material.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "About 200 documents copied", "detail": "Xue stole approximately 200 GSK documents, some containing trade secrets, and moved them by email and portable storage.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Files sent to collaborators", "detail": "The material was transmitted to Li and other Renopharma collaborators in China; some draft material replaced GSK references with Renopharma's name.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Startup positioned to benefit", "detail": "The guilty pleas establish intended economic benefit to Renopharma, but the sentencing record found no product, sale, or profit using GSK information by the time of arrest.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Theft proved; monetary loss not proved", "detail": "Both defendants were convicted by plea, while the district and appellate courts rejected the government's requested intended-loss enhancement.", "sourceIds": [ "S2" ] } ], "timeline": [ { "date": "Before 2016", "label": "Company and document transfer", "detail": "Xue helped form Renopharma while still at GSK and sent scientific documents to collaborators in China.", "sourceIds": [ "S1", "S2" ] }, { "date": "2016-01-05", "label": "Li arrested", "detail": "Agents found GSK confidential and trade-secret documents received from Xue on Li's computer.", "sourceIds": [ "S1" ] }, { "date": "2018-08-31", "label": "Xue pleads guilty", "detail": "Xue admitted conspiring to steal GSK trade secrets for Renopharma's economic benefit.", "sourceIds": [ "S1" ] }, { "date": "2020–2021", "label": "Sentences imposed", "detail": "The district court imposed eight months for Xue and 59 days for Li after finding no proved actual or intended pecuniary loss.", "sourceIds": [ "S2" ] }, { "date": "2022-08-02", "label": "Loss ruling affirmed", "detail": "The Third Circuit upheld the district court's refusal to apply the intended-loss enhancement.", "sourceIds": [ "S2" ] } ], "established": [ { "text": "Xue and Li admitted conspiring to steal GSK trade secrets for the benefit of their China-based startup.", "sourceIds": [ "S1", "S2" ] }, { "text": "Xue stole approximately 200 documents spanning development products, research data, and development and manufacturing processes.", "sourceIds": [ "S1", "S2" ] }, { "text": "At arrest, Renopharma had made no profit and had not developed or sold a product using GSK information; courts assigned $0 actual and intended pecuniary loss for sentencing.", "sourceIds": [ "S2" ] } ], "uncertainties": [ { "text": "Government support to Renopharma is documented, but the cited courts did not find that the PRC government ordered or managed the theft.", "sourceIds": [ "S1", "S2" ] }, { "text": "A $0 sentencing-loss finding does not undo the guilty pleas; it limits claims about realized or deliberately inflicted monetary harm.", "sourceIds": [ "S2" ] } ], "response": [ { "text": "At sentencing, the defendants disputed the government's valuation and presented evidence that Renopharma pursued different targets and had not used the material to develop a competing product. The district court credited the absence of proved pecuniary intent, and the Third Circuit affirmed.", "sourceIds": [ "S2" ] } ], "harm": [ { "text": "GSK suffered no proved actual monetary loss, and prosecutors did not establish that Xue and Li purposely sought to inflict pecuniary loss for the sentencing enhancement.", "sourceIds": [ "S2" ], "qualifier": "court_found" }, { "text": "The transfer nonetheless exposed protected research and process information across multiple products to an outside startup.", "sourceIds": [ "S1", "S2" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "Founder activity overlapped employment", "detail": "A scientist could build an outside company in the same technical field while retaining access to a broad internal development portfolio.", "hindsight": true }, { "title": "Routine transfer paths carried research", "detail": "Email and portable storage moved a large document set, showing that ordinary collaboration channels can become high-value exfiltration routes.", "hindsight": true }, { "title": "Value and harm were conflated", "detail": "Expensive research may be valuable without proving an equal realized or intended monetary loss; leadership reporting should keep those measures distinct.", "hindsight": true } ], "actions": [ { "audience": "both", "title": "Join founder disclosures to access", "detail": "Require and verify disclosure of outside companies, equity, fundraising, appointments, and overlapping research, then conduct a documented conflict and least-privilege review." }, { "audience": "both", "title": "Control portfolio-scale exports", "detail": "Detect unusual cross-project email, removable-media, print, and cloud activity while keeping monitoring proportionate, transparent, and reviewed by counsel." }, { "audience": "both", "title": "Use precise harm language", "detail": "Report what was exposed, what was used, and what monetary harm was proved as separate fields; do not substitute development cost for court-found loss." } ], "sources": [ { "id": "S1", "title": "Former GlaxoSmithKline Scientist Pleads Guilty to Stealing Trade Secrets to Benefit Chinese Pharmaceutical Company", "publisher": "U.S. Attorney's Office for the Eastern District of Pennsylvania", "published": "2018-08-31", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-edpa/pr/former-glaxosmithkline-scientist-pleads-guilty-stealing-trade-secrets-benefit-chinese", "type": "government_release", "note": "Xue's plea, transfer methods, document categories, Renopharma relationship, and government subsidies." }, { "id": "S2", "title": "United States v. Yu Xue and Tao Li, Precedential Opinion", "publisher": "U.S. Court of Appeals for the Third Circuit", "published": "2022-08-02", "retrieved": "2026-08-23", "url": "https://www2.ca3.uscourts.gov/opinarch/212227p.pdf", "type": "court_record", "note": "Controlling appellate account of the pleas, approximately 200 documents, sentences, product-use record, and $0 actual and intended pecuniary loss findings." } ] }, { "slug": "mo-hailong-corn-seeds", "caseId": "CS-012", "title": "A seed-company executive dug proprietary corn from U.S. fields for shipment to China", "shortTitle": "Mo Hailong — Pioneer & Monsanto", "deck": "A Pioneer field manager found a stranger on his knees in an Iowa research plot, digging up corn. The license plate he recorded helped expose Mo Hailong's five-year effort to carry proprietary parent seed from Midwestern fields to a Chinese seed conglomerate.", "finding": "Mo pleaded guilty to a long-term conspiracy to steal DuPont Pioneer and Monsanto seed trade secrets for transport to DBN in China. He received three years in prison and forfeited two farms used in the scheme.", "executiveSummary": [ { "text": "On May 3, 2011, a DuPont Pioneer field manager encountered Mo Hailong kneeling in a grower's field near Tama, Iowa, digging up newly planted corn. Mo said he worked for a local university, then left; the manager wrote down his license plate and alerted company security. That ordinary act of skepticism opened the investigation into a conspiracy that had already been operating for years.", "sourceIds": [ "S1", "S2" ] }, { "text": "The target was not commodity corn. It was proprietary inbred parent seed: compact genetic material created through years of breeding and used to produce high-performing commercial hybrids. Pioneer executives told investigators that access to such lines could erase five to eight years of research and at least $30 million in development costs, an estimate reported in the criminal-complaint account rather than adopted as a sentencing finding.", "sourceIds": [ "S2" ] }, { "text": "Mo, then DBN's director of international business, admitted conspiring to steal Pioneer and Monsanto seed for transport to his employer in China. The operation combined field collection, rented storage, two purchased farms, deceptive explanations, and an attempted 250-pound shipment to Hong Kong. He pleaded guilty, received 36 months in prison, and forfeited the farms used to support the scheme.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "A man digging in a research field", "paragraphs": [ { "text": "The first visible break in the case did not come from a cyber alert or a customs seizure. It came from a Pioneer manager checking fields in rural Iowa. He saw Mo on his knees, digging where a grower was raising the company's research corn. When challenged, Mo claimed to be associated with a local university. The manager noted the vehicle and license plate instead of accepting the explanation at face value, then escalated what he had seen through Pioneer security to the FBI.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The secret was inside the seed", "paragraphs": [ { "text": "Seed companies develop inbred parent lines through repeated selection and testing, then cross chosen parents to make commercial hybrids. The harvested grain available to any farmer is not a substitute for those guarded parent lines. In a small bag of inbred seed, a competitor can obtain the biological product of years of experiments, field trials, failures, and capital investment.", "sourceIds": [ "S2" ] }, { "text": "That made outdoor research plots unusually exposed laboratories. The material looked like corn and sat in fields that could be reached from rural roads, yet its strategic value came from information encoded in the genetics—not its weight or commodity price. Pioneer executives estimated that obtaining a successful parent line could save a rival five to eight years and at least $30 million; this remains an attributed company estimate, not a court-calculated loss figure.", "sourceIds": [ "S2" ] } ] }, { "heading": "A supply chain built for removal", "paragraphs": [ { "text": "According to the FBI account, Mo and other participants traveled through Iowa and neighboring states collecting seed from Pioneer and Monsanto fields. The group used storage and rural property to hold and manage what it gathered. In May 2012, Mo and two others attempted to ship 250 pounds of corn seed from Illinois to Hong Kong, an amount that transformed field sampling into an organized logistics operation.", "sourceIds": [ "S1", "S2" ] }, { "text": "Mo's position connected those physical acts to a commercial beneficiary. He was the director of international business for Beijing Dabeinong Technology Group, known as DBN, whose business included the Kings Nower seed subsidiary. In his plea, Mo admitted that the stolen inbred seed was intended for transport to DBN in China. The cited adjudicated record establishes the corporate destination, but not direction or sponsorship by the PRC government.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "One observation became a federal case", "paragraphs": [ { "text": "Investigators used the field manager's report as a starting point and followed the network's travel, farms, storage, packaging, and shipment activity. Authorities arrested Mo in December 2013. He pleaded guilty in January 2016 to conspiracy to steal trade secrets, and the court later imposed a three-year prison term, three years of supervised release, and forfeiture of two farms used in the scheme.", "sourceIds": [ "S1", "S2" ] }, { "text": "For leaders, the enduring lesson is physical as much as legal: intellectual property does not stop being a crown jewel when it leaves a laboratory. Here, a research asset grew in plain sight, and the decisive control was a trained employee who recognized that access to a field was not permission to remove what it contained.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/mo-hailong.png", "alt": "Portrait of Mo Hailong smiling and raising one hand", "caption": "Mo Hailong, also known as Robert Mo, the DBN executive who pleaded guilty in the proprietary corn-seed conspiracy. DCSA/CDSE reproduces this portrait in its official case study and credits America Tonight.", "credit": "America Tonight, via DCSA/CDSE", "sourceUrl": "https://www.cdse.edu/Portals/124/Documents/casestudies/Robert-Mo-Insider-Threat-Case-Study.pdf", "license": "Editorial use; source attribution retained", "kind": "portrait" }, { "src": "/media/cases/research-cornfield.jpg", "alt": "Two agricultural researchers examine ears of corn while standing between rows in a research field", "caption": "A research cornfield is both laboratory and inventory: valuable breeding information is embodied in the plants and parent seed growing outdoors. This is a contextual image, not a photograph of the Iowa crime scene.", "credit": "USDA Agricultural Research Service", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Agriculture_Research_Service_(ARS)_(8411861655).jpg", "license": "Public domain", "kind": "photograph" } ], "status": "adjudicated", "legalOutcome": "Pleaded guilty in January 2016; sentenced in October 2016 to 36 months in prison and three years of supervised release. The court also ordered forfeiture of two farms used in the conspiracy.", "statusDate": "2016-10-05", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "none_established", "stateNexusSummary": "The plea establishes a scheme to benefit Mo's employer, Beijing Dabeinong Technology Group, and its seed business. The cited adjudicated record does not establish PRC government direction or support.", "featured": true, "sector": { "slug": "agriculture-and-food-systems", "label": "Agriculture & food systems" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2009–2016", "accessVectors": [ "Publicly reachable grower fields", "Agricultural business travel", "Rural property ownership" ], "methods": [ "Field collection", "Deceptive cover story", "Bulk packaging", "Cross-border shipment", "Farm acquisition" ], "assets": [ "Inbred corn seed", "Breeding genetics", "Parent-line characteristics", "Years of selection work" ], "actors": [ { "name": "Mo Hailong", "role": "DBN director of international business and conspiracy participant", "outcome": "Pleaded guilty; sentenced to 36 months and forfeiture of two farms" }, { "name": "Beijing Dabeinong Technology Group (DBN)", "role": "Mo's China-based employer and intended recipient of the seed material" }, { "name": "Kings Nower Seed", "role": "DBN corn-seed subsidiary" } ], "originators": [ { "name": "DuPont Pioneer", "role": "Developer and owner of proprietary inbred corn lines" }, { "name": "Monsanto", "role": "Developer and owner of proprietary inbred corn lines" } ], "transferChain": [ { "stage": "relationship", "label": "Seed-business role", "detail": "Mo served as DBN's director of international business and operated across U.S. agricultural regions.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Fields functioned as laboratories", "detail": "Remote grower fields held proprietary parent seed but were physically more exposed than conventional research facilities.", "sourceIds": [ "S2" ] }, { "stage": "acquisition", "label": "Seed dug and gathered", "detail": "Mo admitted participating in the theft of inbred corn from Pioneer and Monsanto fields; one field manager encountered him digging and recorded his vehicle information.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Bulk shipment attempted", "detail": "The group gathered and packaged seed across the Midwest; the FBI account says Mo and two others attempted to ship 250 pounds to Hong Kong in 2012.", "sourceIds": [ "S2" ] }, { "stage": "use", "label": "Employer was intended recipient", "detail": "Mo's plea established that the proprietary seeds were intended for transport to DBN in China.", "sourceIds": [ "S1" ] }, { "stage": "consequence", "label": "Plea, imprisonment, forfeiture", "detail": "Corporate security reporting led to an FBI investigation, a guilty plea, three years in prison, and forfeiture of farms used in the conspiracy.", "sourceIds": [ "S1", "S2" ] } ], "timeline": [ { "date": "2011-05-03", "label": "Field manager intervenes", "detail": "A Pioneer field manager confronted Mo while he was digging in a grower field and recorded his license plate.", "sourceIds": [ "S2" ] }, { "date": "2012-05", "label": "Bulk shipment alleged", "detail": "According to the indictment summarized by the FBI, Mo and two others tried to send 250 pounds of corn seed from Illinois to Hong Kong.", "sourceIds": [ "S2" ] }, { "date": "2013-12-12", "label": "Arrest and charges", "detail": "Authorities arrested Mo and charged a broader group with the seed-theft conspiracy.", "sourceIds": [ "S2" ] }, { "date": "2016-01-27", "label": "Guilty plea", "detail": "Mo admitted the long-term conspiracy to steal Pioneer and Monsanto inbred seed for DBN.", "sourceIds": [ "S1" ] }, { "date": "2016-10-05", "label": "Sentence imposed", "detail": "The court sentenced Mo to 36 months and ordered the two supporting farms forfeited.", "sourceIds": [ "S1" ] } ], "established": [ { "text": "Mo admitted conspiring to take proprietary inbred corn seed from DuPont Pioneer and Monsanto for transport to DBN in China.", "sourceIds": [ "S1" ] }, { "text": "The scheme used physical collection from fields, rural properties, packaging, and attempted bulk shipment rather than a conventional cyber intrusion.", "sourceIds": [ "S1", "S2" ] }, { "text": "Pioneer personnel detected suspicious conduct and raised it with the FBI, initiating the investigation that interrupted the scheme.", "sourceIds": [ "S1", "S2" ] } ], "uncertainties": [ { "text": "The cited record establishes DBN as intended beneficiary but does not establish PRC state direction, funding, or operational control.", "sourceIds": [ "S1" ] }, { "text": "Pioneer's estimate of five to eight years and at least $30 million appears in a criminal-complaint account, not as the sentencing court's loss finding.", "sourceIds": [ "S2" ] } ], "response": [ { "text": "Mo resolved his case by pleading guilty and admitting the conspiracy. The sources reviewed do not contain a separate public response from DBN adjudicating its own responsibility.", "sourceIds": [ "S1" ] } ], "harm": [ { "text": "Pioneer executives estimated that theft of this type of parent seed could erase five to eight years of research advantage and at least $30 million in investment.", "sourceIds": [ "S2" ], "qualifier": "attributed_estimate" }, { "text": "The court ordered forfeiture of two farms purchased and used to support the conspiracy.", "sourceIds": [ "S1" ], "qualifier": "court_found" } ], "leadershipGaps": [ { "title": "The laboratory had no walls", "detail": "High-value breeding assets grew in remote fields where physical observation and removal were easier than in a badge-controlled research building.", "hindsight": true }, { "title": "Small samples held large value", "detail": "A bag of parent seed can encode years of selection work; inventory controls based on bulk commodity value would miss the real exposure.", "hindsight": true }, { "title": "A local observation broke the case", "detail": "A field manager's skepticism, license-plate capture, and later corporate liaison gave investigators the starting signal for a complex case.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Map outdoor crown jewels", "detail": "Classify research plots, test herds, samples, and prototype fields by intellectual-property value and apply proportionate patrol, signage, visitor, and anomaly-reporting controls." }, { "audience": "both", "title": "Train for low-tech indicators", "detail": "Teach personnel to record and report unexplained digging, sampling, photography, vehicles, or repeated visits without confrontation beyond established safety procedures." }, { "audience": "companies", "title": "Watch logistics, not demographics", "detail": "Use lawful signals such as unusual sample packaging, storage, farm acquisition, and cross-border shipment patterns rather than nationality-based suspicion." } ], "sources": [ { "id": "S1", "title": "Chinese National Sentenced to Prison for Conspiracy to Steal Trade Secrets", "publisher": "U.S. Attorney's Office for the Southern District of Iowa", "published": "2016-10-06", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-sdia/pr/chinese-national-sentenced-prison-conspiracy-steal-trade-secrets", "type": "government_release", "note": "Plea, intended recipient, sentence, forfeiture, and origin of the investigation." }, { "id": "S2", "title": "Protecting Vital Assets: Pilfering of Corn Seeds Illustrates Intellectual Property Theft", "publisher": "Federal Bureau of Investigation", "published": "2016-12-19", "retrieved": "2026-08-23", "url": "https://www.fbi.gov/news/stories/sentencing-in-corn-seed-intellectual-property-theft-case", "type": "government_release", "note": "Operational chronology, field detection, shipment detail, and Pioneer's attributed research-time and cost estimate." } ] }, { "slug": "haitao-xiang-nutrient-optimizer", "caseId": "CS-013", "title": "A departing Monsanto scientist carried a proprietary farm algorithm toward a PRC research role", "shortTitle": "Haitao Xiang — Nutrient Optimizer", "deck": "The day after leaving Monsanto and The Climate Corporation, Haitao Xiang arrived at an airport with copies of a proprietary predictive farming algorithm and a one-way ticket to China.", "finding": "Xiang pleaded guilty to conspiring to commit economic espionage for the benefit of the PRC. Investigators found the Nutrient Optimizer trade secret on one of his devices; he later worked at a Chinese Academy of Sciences institute.", "executiveSummary": [ { "text": "Haitao Xiang spent nine years inside Monsanto and The Climate Corporation's digital-agriculture program, working with a proprietary algorithm called the Nutrient Optimizer. The platform transformed field data into guidance that helped farmers visualize conditions and make better nutrient decisions—software whose value came from both agronomic research and predictive engineering.", "sourceIds": [ "S1", "S2" ] }, { "text": "One day after leaving the companies in June 2017, Xiang arrived at an airport with a one-way ticket to China. A later examination found copies of the Nutrient Optimizer on one of his electronic devices. Xiang subsequently worked at a Chinese Academy of Sciences institute and ultimately pleaded guilty to conspiring to commit economic espionage for the benefit of the PRC.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "The crown jewel was an agricultural prediction", "paragraphs": [ { "text": "Digital agriculture compresses soil, weather, imaging, and management data into decisions a farmer can act on. Xiang's imaging-scientist role exposed him to the Nutrient Optimizer, a proprietary predictive tool within that system. Unlike a physical prototype, the asset could travel as copied code and documentation on an ordinary electronic device.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Departure and transfer were nearly simultaneous", "paragraphs": [ { "text": "The day after Xiang's employment ended, he attempted to board a one-way flight to China. Officials searched him and his baggage before departure, and forensic review later located copies of the algorithm. He went on to work at the Chinese Academy of Sciences Institute of Soil Science before being arrested after returning to the United States in 2019.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The plea established government benefit", "paragraphs": [ { "text": "Xiang pleaded guilty in January 2022 to conspiracy to commit economic espionage and admitted that the purpose was to benefit the PRC. The court imposed 29 months in prison, supervised release, and a $150,000 fine. The public sentencing record does not quantify realized commercial use or monetary loss, so the dossier treats those downstream effects as unknown.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/haitao-xiang.jpg", "alt": "Staff portrait of Haitao Xiang wearing a dark blue collared shirt", "caption": "Haitao Xiang in a staff portrait published by the Institute of Soil Science at the Chinese Academy of Sciences. The institute lists him in its research personnel directory following his U.S. conviction.", "credit": "Institute of Soil Science, Chinese Academy of Sciences", "sourceUrl": "https://english.issas.cas.cn/res/rd/pob/", "license": "Editorial use; all rights remain with the institution", "kind": "portrait" }, { "src": "/media/cases/agricultural-fields.png", "alt": "Satellite image showing a mosaic of agricultural fields in many shapes, colors, and growth stages", "caption": "Digital-agriculture platforms turn field observations and geospatial data into management recommendations. The stolen Nutrient Optimizer was a predictive algorithm in that decision chain. Contextual satellite image.", "credit": "European Union, Copernicus Sentinel-2 imagery", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Agriculture_in_Austria_and_Slovakia_(Copernicus_2024-06-18).webp", "license": "Copernicus attribution license", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Pleaded guilty in January 2022 to conspiracy to commit economic espionage; sentenced in April 2022 to 29 months in prison, three years of supervised release, and a $150,000 fine.", "statusDate": "2022-04-07", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "Xiang admitted conspiring to steal the trade secret for the benefit of a foreign government, the PRC. The plea-based economic-espionage conviction establishes the state-benefit element for this case.", "featured": true, "sector": { "slug": "agriculture-and-food-systems", "label": "Agriculture & food systems" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2008–2022", "accessVectors": [ "Imaging-scientist employment", "Digital agriculture platform access", "Talent-plan recruitment" ], "methods": [ "Device copying", "Departure-day retention", "One-way travel", "Cross-border employment transition" ], "assets": [ "Nutrient Optimizer predictive algorithm", "Digital farming analytics", "Agricultural field-data methods" ], "actors": [ { "name": "Haitao Xiang", "role": "Former Monsanto and Climate Corporation imaging scientist", "outcome": "Pleaded guilty to economic-espionage conspiracy; sentenced to 29 months and a $150,000 fine" }, { "name": "Chinese Academy of Sciences Institute of Soil Science", "role": "Institution where Xiang later worked after returning to China" } ], "originators": [ { "name": "The Climate Corporation", "role": "Monsanto subsidiary that developed and owned the Nutrient Optimizer technology" }, { "name": "Monsanto Company", "role": "Parent employer and developer of the broader digital agriculture platform" } ], "transferChain": [ { "stage": "relationship", "label": "Nine years inside digital agriculture", "detail": "Xiang worked as an imaging scientist for Monsanto and The Climate Corporation from 2008 to 2017.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Predictive platform knowledge", "detail": "His role exposed him to a proprietary algorithm used to help farmers visualize field data and improve nutrient decisions.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Algorithm copied to device", "detail": "Investigators determined that one of Xiang's electronic devices contained copies of the Nutrient Optimizer.", "sourceIds": [ "S1" ] }, { "stage": "movement", "label": "One-way departure", "detail": "The day after leaving the companies, Xiang attempted to board a one-way flight to China with the copied material.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "PRC benefit admitted", "detail": "Xiang admitted that the conspiracy's purpose was to benefit the PRC and later worked for a Chinese Academy of Sciences institute.", "sourceIds": [ "S1" ] }, { "stage": "consequence", "label": "Airport intervention and conviction", "detail": "Officials searched his baggage before departure; he was later arrested on return to the United States, pleaded guilty, and received a prison sentence.", "sourceIds": [ "S1", "S2" ] } ], "timeline": [ { "date": "2008–2017", "label": "Platform employment", "detail": "Xiang worked inside Monsanto and The Climate Corporation's digital agriculture program.", "sourceIds": [ "S1", "S2" ] }, { "date": "2017-06", "label": "Airport search", "detail": "One day after leaving his job, officials searched Xiang and his baggage before his one-way flight and later found the algorithm on a device.", "sourceIds": [ "S1", "S2" ] }, { "date": "2019-11", "label": "Arrest and indictment", "detail": "Xiang was arrested after returning to the United States and was indicted on economic-espionage and trade-secret charges.", "sourceIds": [ "S1", "S2" ] }, { "date": "2022-01", "label": "Guilty plea", "detail": "He admitted conspiracy to commit economic espionage for PRC benefit.", "sourceIds": [ "S1" ] }, { "date": "2022-04-07", "label": "Sentence imposed", "detail": "The court imposed 29 months in prison, supervised release, and a $150,000 fine.", "sourceIds": [ "S1" ] } ], "established": [ { "text": "Xiang admitted a conspiracy to steal the Nutrient Optimizer trade secret for the benefit of the PRC.", "sourceIds": [ "S1" ] }, { "text": "A device in his possession contained copies of the algorithm when he attempted to leave for China immediately after ending employment.", "sourceIds": [ "S1", "S2" ] }, { "text": "He later worked at the Chinese Academy of Sciences Institute of Soil Science before his 2019 U.S. arrest.", "sourceIds": [ "S1" ] } ], "uncertainties": [ { "text": "The public sentencing summary does not quantify realized commercial use or a monetary loss attributable to the copied algorithm.", "sourceIds": [ "S1" ] }, { "text": "The initial indictment included broader counts and talent-plan allegations; this file relies on the narrower offense Xiang actually admitted for its findings.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Xiang ultimately admitted the economic-espionage conspiracy. The 2019 charging account was an allegation at the time; the 2022 plea and sentence provide the adjudicated basis used here.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "The copied asset was a proprietary predictive component of a digital platform developed to improve agricultural productivity and field decisions.", "sourceIds": [ "S1" ], "qualifier": "documented" }, { "text": "No court-found monetary loss or demonstrated product deployment is stated in the cited sources.", "sourceIds": [ "S1" ], "qualifier": "unknown" } ], "leadershipGaps": [ { "title": "Departure controls came after copying", "detail": "The airport search interrupted movement, but the algorithm was already on a personal device when the employee left the company.", "hindsight": true }, { "title": "Algorithms travel invisibly", "detail": "Unlike physical seed, a predictive model can fit on a small device and preserve both code and accumulated domain assumptions.", "hindsight": true }, { "title": "External incentives intersected with access", "detail": "Talent recruitment and a planned research transition mattered because they overlapped with specific access and copying behavior—not because of identity alone.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Start departure review before exit", "detail": "For announced transitions involving crown-jewel access, preserve logs, review recent transfers, rotate credentials, and narrow access promptly under a consistent, counsel-approved process." }, { "audience": "both", "title": "Inventory executable know-how", "detail": "Treat models, notebooks, feature definitions, training data, configuration, and validation methods as a connected asset requiring provenance and access controls." }, { "audience": "both", "title": "Assess incentive conflicts behaviorally", "detail": "Review external appointments and funding when paired with technical overlap, nondisclosure, unusual transfers, or imminent departure; never use nationality as a proxy." } ], "sources": [ { "id": "S1", "title": "Chinese National Sentenced for Economic Espionage Conspiracy", "publisher": "U.S. Department of Justice", "published": "2022-04-07", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-national-sentenced-economic-espionage-conspiracy", "type": "government_release", "note": "Current adjudicated outcome, admitted PRC benefit, employment, airport search, institute role, and sentence." }, { "id": "S2", "title": "Chinese National Who Worked at Monsanto Indicted on Economic Espionage Charges", "publisher": "U.S. Department of Justice", "published": "2019-11-21", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-national-who-worked-monsanto-indicted-economic-espionage-charges", "type": "government_release", "note": "Charging-stage chronology and talent-plan allegation; superseded by the narrower 2022 guilty plea for findings of guilt." } ] }, { "slug": "su-bin-defense-hacking", "caseId": "CS-014", "title": "An aviation businessman guided PLA hackers toward U.S. military aircraft data", "shortTitle": "Su Bin — U.S. defense contractors", "deck": "Su Bin used his aerospace knowledge to identify targets, select files, translate stolen material, and help turn intrusions into reports for a People's Liberation Army department.", "finding": "Su admitted conspiring with two China-based military officers to hack U.S. defense contractors, steal export-controlled military information, send it to China, and report the acquired technology to the PLA's Second Department.", "executiveSummary": [ { "text": "The hackers in Su Bin's conspiracy could penetrate networks, but they needed an aerospace insider to tell them what mattered. Su, an aviation businessman with industry knowledge, helped two China-based People's Liberation Army officers identify U.S. defense targets, interpret directory listings, select valuable files, and translate stolen material.", "sourceIds": [ "S1", "S2" ] }, { "text": "From 2008 through 2014, the group targeted defense-contractor systems, including Boeing computers, and stole sensitive and export-controlled information concerning the C-17 and fighter aircraft. Su admitted helping draft reports for the PLA General Staff Headquarters Second Department describing the acquired technology and its value. He pleaded guilty and received 46 months in federal prison.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "Technical context made hacking selective", "paragraphs": [ { "text": "Su's role was not primarily to break into computers. His aerospace experience helped the military officers decide which companies, programs, people, and files were worth the effort. When hackers sent him stolen directory listings, he prioritized targets and explained why particular documents would be useful—a human intelligence layer applied to cyber access.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Contractor files became military reports", "paragraphs": [ { "text": "The co-conspirators penetrated protected contractor systems, stole military aircraft data, and moved it to China. Su translated selected contents and helped turn raw collections into reports for the PLA Second Department. His plea describes a complete exploitation chain: intrusion, technical triage, cross-border movement, interpretation, and delivery to a state military beneficiary.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "A signed plea fixed the state nexus", "paragraphs": [ { "text": "Canadian authorities arrested Su in 2014, and he later waived extradition to the United States. In March 2016 he admitted conspiring with the PLA officers to gain unauthorized access and violate export controls; the court sentenced him to 46 months. The public record identifies C-17 and fighter data but does not publish a complete inventory or prove every downstream military use.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/su-bin.jpg", "alt": "FBI image of Su Bin looking toward a border-crossing camera in 2011", "caption": "Su Bin at a U.S. border crossing in 2011. The FBI image was later published by U.S. Air Force OSI in its account of the defense-contractor hacking conspiracy.", "credit": "Federal Bureau of Investigation, via U.S. Air Force OSI", "sourceUrl": "https://www.osi.af.mil/News/Photos/igphoto/2002499424/", "license": "Public domain (U.S. federal government photograph)", "licenseUrl": "https://creativecommons.org/publicdomain/mark/1.0/", "kind": "photograph" }, { "src": "/media/cases/c17-aircraft.jpg", "alt": "United States Air Force C-17 transport aircraft flying above the Blue Ridge Mountains", "caption": "The conspiracy targeted sensitive technical information about U.S. military aircraft, including the C-17 transport. Contextual U.S. Air Force image; not evidence recovered in the case.", "credit": "Staff Sgt. Jacob N. Bailey, U.S. Air Force", "sourceUrl": "https://commons.wikimedia.org/wiki/File:C-17_aircraft_over_over_the_Blue_Ridge_Mountains_2005.jpg", "license": "Public domain", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Pleaded guilty in March 2016 to conspiracy to gain unauthorized access to protected computers and violate the Arms Export Control Act; sentenced in July 2016 to 46 months in federal prison.", "statusDate": "2016-07-13", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "Su's plea admitted collaboration with People's Liberation Army Air Force hackers and reporting to the Second Department of the PLA General Staff Headquarters. The state nexus is direct and adjudicated.", "featured": true, "sector": { "slug": "aerospace-and-defense", "label": "Aerospace & defense" }, "jurisdictions": [ "United States", "Canada" ], "countries": [ "United States", "China", "Canada" ], "period": "2008–2016", "accessVectors": [ "Aerospace industry expertise", "Remote network intrusion", "Cross-border business contacts" ], "methods": [ "Target selection", "Computer hacking", "Directory triage", "Translation", "Intelligence reporting", "Illegal export" ], "assets": [ "C-17 military transport data", "Fighter-aircraft technical data", "Export-controlled defense information" ], "actors": [ { "name": "Su Bin", "role": "China-based aviation businessman and admitted conspiracy participant", "outcome": "Pleaded guilty and sentenced to 46 months in federal prison" }, { "name": "Two People's Liberation Army Air Force officers", "role": "China-based hackers with whom Su admitted conspiring" }, { "name": "PLA General Staff Headquarters Second Department", "role": "Addressee of reports assessing the stolen information and technology" } ], "originators": [ { "name": "The Boeing Company", "role": "Defense contractor whose network and C-17 information were targeted" }, { "name": "Additional U.S. defense contractors", "role": "Companies whose systems held targeted military aircraft information" } ], "transferChain": [ { "stage": "relationship", "label": "Industry expert joined hackers", "detail": "Su's aviation and aerospace background gave military hackers context about valuable companies, people, platforms, and files.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Contractor networks penetrated", "detail": "His co-conspirators gained unauthorized access to protected U.S. defense-contractor systems, including Boeing computers.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Directories triaged", "detail": "Hackers sent Su directory listings, and he told them which files to steal and why the information mattered.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Military data sent to China", "detail": "The conspirators stole sensitive and export-controlled files, moved them to China, and had Su translate selected contents.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Reports prepared for PLA", "detail": "Su and his co-conspirators drafted reports to the PLA Second Department describing the acquired technology and its value to the beneficiaries.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Extradition, plea, sentence", "detail": "Su was arrested in Canada, transferred to the United States, admitted the conspiracy, and received 46 months in prison.", "sourceIds": [ "S1", "S2" ] } ], "timeline": [ { "date": "2008-10–2014-03", "label": "Intrusion conspiracy", "detail": "Su admitted working with two China-based military officers to target and steal U.S. military aircraft information.", "sourceIds": [ "S1", "S2" ] }, { "date": "2014-07", "label": "Arrest in Canada", "detail": "Canadian authorities arrested Su on a U.S. warrant arising from the hacking conspiracy.", "sourceIds": [ "S1" ] }, { "date": "2016-02", "label": "Transfer to United States", "detail": "Su waived extradition and consented to transfer to face the federal case.", "sourceIds": [ "S1" ] }, { "date": "2016-03-23", "label": "Guilty plea", "detail": "Su admitted the conspiracy and its detailed factual basis in a signed plea agreement.", "sourceIds": [ "S1", "S2" ] }, { "date": "2016-07-13", "label": "Sentence imposed", "detail": "A federal judge sentenced Su to 46 months in prison.", "sourceIds": [ "S1" ] } ], "established": [ { "text": "Su admitted conspiring with PLA Air Force hackers to penetrate U.S. defense-contractor systems and steal military technical data.", "sourceIds": [ "S1", "S2" ] }, { "text": "He supplied the industrial context: recommending targets, prioritizing files, explaining value, and translating selected stolen material.", "sourceIds": [ "S1", "S2" ] }, { "text": "The conspirators reported their acquisitions and assessments to the PLA General Staff Headquarters Second Department.", "sourceIds": [ "S1", "S2" ] } ], "uncertainties": [ { "text": "The cited plea and sentencing record identify C-17 and fighter-aircraft data but do not publish a complete inventory of every contractor, file, or downstream military use.", "sourceIds": [ "S1", "S2" ] }, { "text": "Su also admitted seeking financial gain; state benefit and personal profit can coexist and should not be treated as mutually exclusive explanations.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Su signed a plea agreement, agreed not to contest its factual basis, and admitted the targeting, translation, reporting, and export conduct summarized here.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "The conspiracy removed sensitive and export-controlled information about U.S. military aircraft from defense-contractor systems and delivered it to China.", "sourceIds": [ "S1", "S2" ], "qualifier": "documented" }, { "text": "Public sources reviewed do not provide a court-found dollar loss or a complete assessment of how the PLA used the stolen technical data.", "sourceIds": [ "S1" ], "qualifier": "unknown" } ], "leadershipGaps": [ { "title": "The scout was outside the network", "detail": "A knowledgeable industry intermediary made stolen directory listings operationally useful without needing direct contractor employment or credentials.", "hindsight": true }, { "title": "File names exposed mission value", "detail": "Even directory structures, program names, and personnel context helped the conspirators choose what to steal before opening every file.", "hindsight": true }, { "title": "The transfer chain was modular", "detail": "Intrusion, selection, translation, assessment, and reporting were divided among participants, complicating detection focused on one actor or technique.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Protect metadata and directories", "detail": "Limit unnecessary directory visibility, monitor reconnaissance patterns, and treat program names, staffing maps, and export classifications as sensitive context." }, { "audience": "companies", "title": "Threat-model knowledgeable intermediaries", "detail": "Include brokers, consultants, suppliers, recruiters, and former personnel who can translate raw access into target priorities when modeling crown-jewel threats." }, { "audience": "both", "title": "Join cyber and export controls", "detail": "Connect intrusion telemetry, data classification, export jurisdiction, incident response, and disclosure obligations before an event occurs." } ], "sources": [ { "id": "S1", "title": "Chinese National Who Conspired to Hack into U.S. Defense Contractors' Systems Sentenced to 46 Months", "publisher": "U.S. Department of Justice", "published": "2016-07-13", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-national-who-conspired-hack-us-defense-contractors-systems-sentenced-46-months", "type": "government_release", "note": "Current sentencing account of the admitted conspiracy, military participants, targets, transfer, reporting, and sentence." }, { "id": "S2", "title": "Plea Agreement for Defendant Su Bin", "publisher": "U.S. District Court for the Central District of California via U.S. Department of Justice", "published": "2016-03-23", "retrieved": "2026-08-23", "url": "https://www.justice.gov/opa/file/834936/dl", "type": "court_record", "note": "Signed plea and agreed factual basis detailing targeting, file selection, translation, financial motive, and PLA reporting." } ] }, { "slug": "china-high-speed-rail-transfer", "caseId": "CS-015", "title": "China traded rail-market access for foreign technology—then built a state-owned competitor", "shortTitle": "High-speed rail technology transfer", "deck": "Foreign train makers accepted joint ventures and broad technology transfer to enter China's vast rail buildout. The contracts accelerated local production and helped cultivate CRRC as a state-owned competitor.", "finding": "This is not a criminal-theft case. Kawasaki publicly agreed to transfer production technology so a Chinese partner could build 51 of 60 ordered trainsets locally. A U.S. government commission later assessed that compelled joint ventures and technology transfer fast-tracked China's rail self-sufficiency and cultivated a global competitor.", "executiveSummary": [ { "text": "China's high-speed-rail buildout offered foreign train makers a commercial opportunity too large to ignore, but access came through Chinese partners, local production, and extensive technology transfer. In a 2004 order, Kawasaki's consortium would deliver only three finished and six knock-down trainsets; its Chinese partner would build the remaining 51 using transferred production technology.", "sourceIds": [ "S1", "S2" ] }, { "text": "The arrangement was disclosed and contractual, not covert theft. Its inclusion here shows a different strategic pathway: foreign engineering, manufacturing processes, design capability, and supplier knowledge were localized under market-access terms, while China's state-backed industry scaled. A U.S. congressional commission later assessed that such transfers accelerated self-sufficiency and helped cultivate CRRC into a competitor to the firms that supplied the technology.", "sourceIds": [ "S1", "S2", "S3" ] } ], "narrative": [ { "heading": "The price of a vast market was localization", "paragraphs": [ { "text": "China's Ministry of Railways offered foreign suppliers access to a once-in-a-generation procurement program through consortia with Chinese manufacturers. Kawasaki's 480-car order embodied the bargain: a small number of finished and knock-down sets would establish the model, then CSR Sifang would manufacture most of the fleet locally using transferred production technology.", "sourceIds": [ "S1", "S3" ] } ] }, { "heading": "A joint venture deepened the capability transfer", "paragraphs": [ { "text": "Kawasaki, CSR Sifang, its parent group, and Itochu then formed a China-based rolling-stock engineering company. Its purpose included supplying expertise, increasing local design capability, and expanding parts procurement. The transfer therefore extended beyond assembling imported kits into the engineering and supplier system needed to reproduce and improve trains domestically.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The partner matured into a competitor", "paragraphs": [ { "text": "China combined transferred technology with massive infrastructure spending, domestic engineering, and policy support. The U.S.-China Economic and Security Review Commission assessed that foreign transfer fast-tracked rail self-sufficiency and helped cultivate CRRC as a global competitor; Chinese railway-equipment and component imports fell 62 percent from 2015 to 2023. No crime is alleged—the leadership lesson is to price the long-term competitive effect of lawful transfer before signing for near-term market access.", "sourceIds": [ "S1", "S2", "S3" ] } ] } ], "media": [ { "src": "/media/cases/high-speed-rail.jpg", "alt": "CRH2 high-speed train traveling past a railway station in Fujian, China", "caption": "The CRH2 family emerged from licensed Japanese technology and extensive localization. This case examines the strategic result of a disclosed commercial transfer, not a criminal theft.", "credit": "Kingswang192", "sourceUrl": "https://commons.wikimedia.org/wiki/File:CRH2_Model_Chinese_high_speed_rail_train_passing_Lianjiang_Railway_Station,_Fujian.jpg", "license": "CC BY 4.0", "licenseUrl": "https://creativecommons.org/licenses/by/4.0/", "kind": "technology" } ], "status": "lawful_but_strategically_harmful", "legalOutcome": "No criminal or civil wrongdoing is alleged here. The documented conduct consists of commercial contracts, joint ventures, technology transfer, localization policy, and their strategic consequences.", "statusDate": "2025-11-14", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "documented_affiliation_or_support", "stateNexusSummary": "China's Ministry of Railways awarded the underlying order, domestic partners were state-linked rail manufacturers, and the resulting CRRC is state-owned. The nexus is structural and documented, not inferred from nationality.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "China", "Japan" ], "countries": [ "China", "Japan" ], "period": "2004–2025", "accessVectors": [ "Market-entry requirement", "Public procurement", "Joint venture", "Localized production" ], "methods": [ "Contractual technology transfer", "Knock-down assembly", "Local engineering", "Supplier localization", "State procurement" ], "assets": [ "High-speed train design", "Rolling-stock production technology", "Rail engineering expertise", "Component supply-chain knowledge" ], "actors": [ { "name": "China's Ministry of Railways", "role": "State purchaser that awarded the 2004 high-speed train order" }, { "name": "CSR Sifang Locomotive and Rolling Stock", "role": "Chinese production and joint-venture partner; a predecessor within today's CRRC ecosystem" }, { "name": "CRRC Corporation", "role": "State-owned rail manufacturer that later became a major domestic and international competitor" }, { "name": "Kawasaki Heavy Industries", "role": "Japanese consortium leader, technology provider, and joint-venture participant" } ], "originators": [ { "name": "Kawasaki-led Japanese consortium", "role": "Provider of E2-1000-derived designs, finished and knock-down trainsets, components, and production technology" }, { "name": "Other global rail leaders", "role": "Foreign suppliers that transferred rail technology through China's joint-venture market-entry model" } ], "transferChain": [ { "stage": "relationship", "label": "Market access through procurement", "detail": "China's Ministry of Railways offered access to a once-in-a-generation rail buildout through contracts with foreign supplier consortia and Chinese partners.", "sourceIds": [ "S1", "S3" ] }, { "stage": "access", "label": "Joint engineering structure", "detail": "Kawasaki partnered with CSR Sifang and then formed an engineering joint venture intended to provide expertise, build local design capability, and expand parts procurement.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Production technology transferred", "detail": "The 2004 contract called for three finished and six knock-down trainsets, after which the Chinese partner would build 51 trainsets using Kawasaki-transferred production technology.", "sourceIds": [ "S1" ] }, { "stage": "movement", "label": "Capability localized", "detail": "Design work, engineering expertise, manufacturing processes, and procurement knowledge moved into China-based production and joint-venture structures.", "sourceIds": [ "S1", "S2", "S3" ] }, { "stage": "use", "label": "Self-sufficient industry scaled", "detail": "The U.S.-China Commission assessed that foreign technology transfer fast-tracked China's high-speed rail industry and helped it surpass rolling-stock self-sufficiency targets.", "sourceIds": [ "S3" ] }, { "stage": "consequence", "label": "Partner became competitor", "detail": "CRRC now competes with the foreign firms that transferred technology, while Chinese railway-equipment and component imports fell 62 percent from 2015 to 2023.", "sourceIds": [ "S3" ] } ], "timeline": [ { "date": "2004-10-20", "label": "Train order announced", "detail": "Kawasaki disclosed a 480-car order and a production plan centered on extensive localization and transferred technology.", "sourceIds": [ "S1" ] }, { "date": "2005-02-22", "label": "Engineering venture formed", "detail": "Kawasaki, CSR Sifang, its parent group, and Itochu agreed to create a China-based rolling-stock engineering joint venture.", "sourceIds": [ "S2" ] }, { "date": "2008–2015", "label": "Network and local industry expand", "detail": "China's high-speed network expanded rapidly as transferred technology and domestic scale accelerated rolling-stock capability.", "sourceIds": [ "S3" ] }, { "date": "2015–2023", "label": "Imports fall", "detail": "Railway-equipment and component imports declined 62 percent as the commercial rail industry localized.", "sourceIds": [ "S3" ] }, { "date": "2025-11-14", "label": "Strategic assessment published", "detail": "The U.S.-China Commission characterized the exchange as market access for comprehensive technology transfer that helped cultivate a global competitor.", "sourceIds": [ "S3" ] } ], "established": [ { "text": "Kawasaki openly contracted to transfer production technology and localize 51 of 60 ordered trainsets after supplying finished and knock-down examples.", "sourceIds": [ "S1" ] }, { "text": "Kawasaki and Chinese state-linked manufacturers created an engineering joint venture to provide expertise, build local design capability, and deepen parts procurement.", "sourceIds": [ "S2" ] }, { "text": "A U.S. congressional commission assessed that required joint ventures and technology transfer accelerated Chinese self-sufficiency and helped cultivate CRRC as a competitor.", "sourceIds": [ "S3" ] } ], "uncertainties": [ { "text": "The sources support a lawful, contract-based technology-transfer case; they do not support labeling Kawasaki's disclosed transfer or the Chinese partner's receipt as criminal theft.", "sourceIds": [ "S1", "S2", "S3" ] }, { "text": "China's rail capability reflects scale, infrastructure investment, domestic engineering, policy, and multiple foreign suppliers; no single contract explains the full outcome.", "sourceIds": [ "S1", "S2", "S3" ] } ], "response": [ { "text": "Kawasaki described the transfer and joint venture as commercial opportunities expected to increase Chinese orders, sharpen competitiveness, add engineering capacity, and expand procurement—not as deception or theft.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "The Commission assessed that market-access conditions helped cultivate a state-owned competitor that now competes with the foreign suppliers that transferred technology.", "sourceIds": [ "S3" ], "qualifier": "documented" }, { "text": "Chinese imports of railway equipment and components fell 62 percent between 2015 and 2023 amid rapid localization.", "sourceIds": [ "S3" ], "qualifier": "documented" }, { "text": "The specific share of later CRRC capability or foreign competitive loss caused by Kawasaki's contract alone cannot be isolated from the cited evidence.", "sourceIds": [ "S1", "S2", "S3" ], "qualifier": "unknown" } ], "leadershipGaps": [ { "title": "Revenue and capability had different time horizons", "detail": "Near-term orders rewarded localization while the transferred production system could compound into long-term domestic independence and competition.", "hindsight": true }, { "title": "The package exceeded blueprints", "detail": "Finished examples, knock-down assembly, engineering, production methods, supplier development, and local hiring together created an absorptive system.", "hindsight": true }, { "title": "Procurement policy shaped bargaining power", "detail": "A massive state-controlled customer could make market participation conditional on joint ventures and comprehensive technology transfer.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Price the future competitor", "detail": "Model not only contract revenue but also the partner's post-transfer cost curve, independent supplier base, adjacent-product reach, and ability to compete in third markets." }, { "audience": "both", "title": "Decompose the capability package", "detail": "Review designs, tooling, process control, training, supplier qualification, data, and tacit troubleshooting separately; restrict or stage elements that create independent replication." }, { "audience": "companies", "title": "Set localization stop conditions", "detail": "Define board-level red lines, milestones, audit rights, IP boundaries, termination rights, and third-market protections before entering a state-shaped joint venture." }, { "audience": "both", "title": "Call lawful transfer what it is", "detail": "Record commercial consent, regulatory pressure, coercive leverage, contract compliance, and criminal conduct as distinct categories so strategic warning does not become a false legal allegation." } ], "sources": [ { "id": "S1", "title": "Kawasaki Wins High-Speed Train Order for China", "publisher": "Kawasaki Heavy Industries, Ltd.", "published": "2004-10-20", "retrieved": "2026-08-23", "url": "https://global.kawasaki.com/en/corp/newsroom/news/detail/ba041020.html", "type": "company_statement", "note": "Contemporaneous disclosure of the order, finished and knock-down trains, local production, and Kawasaki's production-technology transfer." }, { "id": "S2", "title": "Joint Venture for Rolling Stock Engineering Company in China", "publisher": "Kawasaki Heavy Industries, Ltd.", "published": "2005-02-22", "retrieved": "2026-08-23", "url": "https://global.kawasaki.com/en/corp/newsroom/news/detail/ba0502-03.html", "type": "company_statement", "note": "Contemporaneous joint-venture ownership, engineering, hiring, market, and procurement objectives from Kawasaki's perspective." }, { "id": "S3", "title": "Made in China 2025: Evaluating China's Performance", "publisher": "U.S.-China Economic and Security Review Commission", "published": "2025-11-14", "retrieved": "2026-08-23", "url": "https://www.uscc.gov/research/made-china-2025-evaluating-chinas-performance", "type": "government_release", "note": "Later assessment of rail technology-transfer conditions, self-sufficiency, CRRC competition, import localization, and the limits of China's export performance." } ] }, { "slug": "kexue-huang-dow-cargill", "caseId": "CS-016", "title": "A research leader moved Dow pesticide secrets and Cargill food technology into PRC-linked research", "shortTitle": "Kexue Huang — Dow & Cargill", "deck": "Kexue Huang held trusted biotechnology roles at two major agricultural companies. He admitted taking protected research from both employers, sending Dow material to collaborators in China and Germany and giving a Cargill secret to a Chinese university student.", "finding": "Huang pleaded guilty to economic espionage and trade-secret theft. The plea established a plan to benefit PRC-linked universities and an aggregate loss between $7 million and $20 million.", "executiveSummary": [ { "text": "From 2003 through early 2008, Kexue Huang worked at Dow AgroSciences and rose to research leader for strain development involving proprietary organic insecticides. He later admitted that he removed several Dow trade secrets and transferred them to people in Germany and China for unauthorized research benefiting universities tied to the PRC.", "sourceIds": [ "S1", "S2" ] }, { "text": "After leaving Dow, Huang joined Cargill as a biotechnologist and stole a separate secret: a key component used to make a new food product. He disseminated it to a student at Hunan Normal University, pleaded guilty in the paired federal cases, and received 87 months in prison. His plea placed aggregate loss above $7 million and below $20 million.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "Trust accumulated with technical responsibility", "paragraphs": [ { "text": "Huang was not a visitor skimming public research. At Dow he worked inside the biotechnology program, signed confidentiality agreements, and became a leader in research on commercially valuable organic insecticides. That role gave him both the protected material and the scientific knowledge needed to make it useful elsewhere.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The transfer outlived the first job", "paragraphs": [ { "text": "Huang admitted that from 2007 through 2010 he delivered Dow secrets to collaborators in Germany and China, used the material in unauthorized research for PRC-linked universities, and pursued production of the protected technology in China. The conduct therefore continued after his Dow employment ended and connected retained know-how to a new research network.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "A second employer created a second loss", "paragraphs": [ { "text": "Cargill hired Huang in March 2008. During that later role, he stole a key component for a new food product and sent it to a Hunan Normal University student. The combined prosecution matters because it shows a repeatable access pattern across employers, not a single disputed document: specialized employment, removal, cross-border dissemination, and outside use.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/agricultural-fields.png", "alt": "Aerial view of agricultural fields divided into cultivated plots", "caption": "Agricultural biotechnology can condense years of strain development and product research into portable data and samples. This is a contextual image, not a location from Huang's case.", "credit": "USDA Natural Resources Conservation Service", "sourceUrl": "https://commons.wikimedia.org/wiki/File:NRCSIA99129_-_Iowa_(3298)(NRCS_Photo_Gallery).tif", "license": "Public domain", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Pleaded guilty to economic espionage and theft of trade secrets; sentenced on December 21, 2011, to 87 months in prison and three years of supervised release.", "statusDate": "2011-12-21", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "Huang admitted that the unauthorized Dow research benefited universities tied to the PRC and that he took steps toward producing the technology in China.", "featured": true, "sector": { "slug": "agriculture-and-food-systems", "label": "Agriculture & food systems" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China", "Germany" ], "period": "2003–2011", "accessVectors": [ "Trusted biotechnology employment", "Research-lead access", "Post-employment retention" ], "methods": [ "Trade-secret removal", "Cross-border transmission", "Unauthorized collaborative research" ], "assets": [ "Organic insecticide strains", "Pesticide research", "Food-product manufacturing component" ], "actors": [ { "name": "Kexue Huang", "role": "Former Dow research leader and Cargill biotechnologist", "outcome": "Pleaded guilty; sentenced to 87 months" }, { "name": "PRC-linked university collaborators", "role": "Recipients and participants in unauthorized research" } ], "originators": [ { "name": "Dow AgroSciences", "role": "Developer of proprietary organic insecticide technology" }, { "name": "Cargill", "role": "Developer of the protected food-product component" } ], "transferChain": [ { "stage": "relationship", "label": "Research leadership", "detail": "Dow entrusted Huang with strain-development research, and Cargill later employed him as a biotechnologist.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Two proprietary programs", "detail": "His roles exposed him to protected pesticide and food-manufacturing information at separate companies.", "sourceIds": [ "S1" ] }, { "stage": "acquisition", "label": "Secrets removed", "detail": "Huang admitted misappropriating several Dow secrets and one key Cargill manufacturing component.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Material sent abroad", "detail": "Dow information moved to collaborators in Germany and China; the Cargill secret went to a student in China.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Outside research and production plans", "detail": "The Dow material supported unauthorized university research and steps toward production in China.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Plea and prison", "detail": "The paired cases produced guilty pleas, an 87-month sentence, and an admitted multimillion-dollar loss range.", "sourceIds": [ "S1", "S2" ] } ], "timeline": [ { "date": "2003", "label": "Dow employment begins", "detail": "Huang joined Dow AgroSciences and later became a research leader in strain development.", "sourceIds": [ "S1", "S2" ] }, { "date": "2008-03", "label": "Cargill hires Huang", "detail": "After leaving Dow, Huang began a second biotechnology role with access to a new product secret.", "sourceIds": [ "S1" ] }, { "date": "2011-10-18", "label": "Guilty pleas entered", "detail": "Huang admitted economic espionage in Indiana and trade-secret theft charged in Minnesota.", "sourceIds": [ "S1" ] }, { "date": "2011-12-21", "label": "Sentence imposed", "detail": "The court imposed 87 months in prison and three years of supervised release.", "sourceIds": [ "S2" ] } ], "established": [ { "text": "Huang admitted transferring Dow secrets for unauthorized research benefiting PRC-linked universities.", "sourceIds": [ "S1", "S2" ] }, { "text": "He separately admitted stealing a Cargill trade secret and disseminating it to a university student in China.", "sourceIds": [ "S1" ] } ], "uncertainties": [ { "text": "The public releases identify PRC-linked universities but do not describe every recipient, research output, or commercial product created from the material.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Huang resolved both prosecutions through guilty pleas. The reviewed sources do not provide separate public responses from the university recipients.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "The plea agreement placed aggregate loss from the Dow and Cargill conduct above $7 million and below $20 million.", "sourceIds": [ "S1", "S2" ], "qualifier": "court_found" } ], "leadershipGaps": [ { "title": "Access followed role seniority", "detail": "A trusted research leader could reach both the science and the supporting details needed to reproduce it outside the company.", "hindsight": true }, { "title": "Risk carried into the next employer", "detail": "Offboarding at the first company did not prevent retained information from feeding later collaborations and production planning.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Map portable research packages", "detail": "Identify the combinations of strains, recipes, data, and process knowledge that could reproduce a product outside the company." }, { "audience": "companies", "title": "Review cross-institution work", "detail": "Require disclosure and approval for external research relationships that overlap an employee's proprietary assignments." }, { "audience": "both", "title": "Extend controls through departure", "detail": "Use risk-based offboarding, device review, and post-departure monitoring where crown-jewel research was accessible." } ], "sources": [ { "id": "S1", "title": "Chinese National Pleads Guilty to Economic Espionage and Theft of Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2011-10-18", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-national-pleads-guilty-economic-espionage-and-theft-trade-secrets", "type": "government_release" }, { "id": "S2", "title": "Chinese National Sentenced to 87 Months for Economic Espionage and Theft of Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2011-12-21", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-national-sentenced-87-months-prison-economic-espionage-and-theft-trade-secrets", "type": "government_release" } ] }, { "slug": "dongfan-chung-boeing", "caseId": "CS-017", "title": "A Boeing engineer answered decades of PRC tasking with Space Shuttle and rocket secrets", "shortTitle": "Dongfan Chung — Boeing", "deck": "Dongfan “Greg” Chung built a long aerospace career at Rockwell and Boeing while collecting technical material for contacts in China. Investigators ultimately recovered more than 250,000 pages from his home.", "finding": "After a bench trial, Chung was convicted of economic espionage, acting as an unregistered PRC agent, and related offenses. He received a 188-month federal prison sentence.", "executiveSummary": [ { "text": "Dongfan “Greg” Chung worked in the U.S. aerospace industry from 1973 through 2006, first at Rockwell and later Boeing, held a Secret clearance, and supported programs that included the Space Shuttle and Delta IV launch vehicle. The court found that he used that trusted access to acquire trade secrets for the benefit of the PRC.", "sourceIds": [ "S1", "S2" ] }, { "text": "Letters introduced at trial recorded specific requests and Chung's long-running willingness to contribute technical information. When investigators searched his residence, they found more than 250,000 pages of Boeing, Rockwell, and contractor material. He was convicted in 2009 and sentenced in 2010 to 188 months in prison.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "A career became a collection channel", "paragraphs": [ { "text": "Chung's value came from duration and placement. Over three decades he accumulated access to engineering programs, export-controlled work, and proprietary aerospace records. Retirement in 2002 did not end the exposure: he continued as a Boeing contractor until 2006.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Requests arrived as a technical shopping list", "paragraphs": [ { "text": "The prosecution presented correspondence from PRC aviation interests that asked Chung to collect information on specific aircraft and technologies. He made unreported trips to China, delivered lectures, and transmitted manuals and technical information through mail and contacts, turning ordinary professional access into a sustained response to outside tasking.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The archive under the house", "paragraphs": [ { "text": "The scale became visible during the search of Chung's home. Investigators recovered more than a quarter-million pages, including material on the Space Shuttle, Delta IV rocket, and other aerospace systems. The first trial conviction under the Economic Espionage Act showed how years of small removals can become an external technical archive before a single alarm consolidates the pattern.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/c17-aircraft.jpg", "alt": "A large United States military transport aircraft in flight", "caption": "Chung's case involved U.S. aerospace engineering records, including Space Shuttle and launch-vehicle technology. This public-domain aircraft image is contextual, not one of the programs at issue.", "credit": "U.S. Air Force", "sourceUrl": "https://commons.wikimedia.org/wiki/File:C-17_test_sortie.jpg", "license": "Public domain", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Convicted after a 2009 bench trial of conspiracy to commit economic espionage, six counts of economic espionage, acting as an agent of the PRC, and making false statements; sentenced on February 8, 2010, to 188 months in prison.", "statusDate": "2010-02-08", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "The convictions established that Chung acted as a PRC agent and took aerospace trade secrets for the benefit of the PRC.", "featured": true, "sector": { "slug": "aerospace-and-defense", "label": "Aerospace & defense" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "1973–2010", "accessVectors": [ "Long-term aerospace employment", "Security clearance", "Post-retirement contracting" ], "methods": [ "Document retention", "Mail and personal delivery", "Unreported travel", "Technical lectures" ], "assets": [ "Space Shuttle engineering", "Delta IV launch-vehicle technology", "Aircraft and antenna records" ], "actors": [ { "name": "Dongfan “Greg” Chung", "role": "Rockwell and Boeing engineer", "outcome": "Convicted; sentenced to 188 months" }, { "name": "PRC aviation and government contacts", "role": "Sources of technical requests and intended beneficiaries" } ], "originators": [ { "name": "Rockwell International", "role": "Aerospace employer and owner of protected records" }, { "name": "The Boeing Company", "role": "Aerospace employer and owner of protected records" } ], "transferChain": [ { "stage": "relationship", "label": "Decades inside aerospace", "detail": "Rockwell and Boeing employed Chung in engineering roles from 1973 through 2006.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Programs and clearance", "detail": "His assignments and Secret clearance exposed him to proprietary and controlled aerospace technology.", "sourceIds": [ "S1" ] }, { "stage": "acquisition", "label": "Large technical archive", "detail": "Chung retained a vast collection of employer and contractor documents at his residence.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Trips, mail, and contacts", "detail": "The record described information moving through unreported China travel, mail, and contacts tied to PRC aviation interests.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Tasking answered", "detail": "Correspondence and conduct showed that Chung collected requested aerospace information for PRC benefit.", "sourceIds": [ "S1" ] }, { "stage": "consequence", "label": "Historic conviction", "detail": "The bench trial produced the first trial conviction under the Economic Espionage Act and a 188-month sentence.", "sourceIds": [ "S1", "S2" ] } ], "timeline": [ { "date": "1973", "label": "Aerospace career begins", "detail": "Chung joined Rockwell and began the access relationship that later continued at Boeing.", "sourceIds": [ "S1", "S2" ] }, { "date": "2006", "label": "Contract access ends", "detail": "Chung's Boeing contracting relationship ended after his 2002 retirement from employment.", "sourceIds": [ "S1", "S2" ] }, { "date": "2009-07-16", "label": "Convicted at trial", "detail": "The court found Chung guilty of economic espionage and related offenses.", "sourceIds": [ "S1" ] }, { "date": "2010-02-08", "label": "Sentence imposed", "detail": "The court sentenced Chung to 188 months in federal prison.", "sourceIds": [ "S2" ] } ], "established": [ { "text": "The court convicted Chung of obtaining aerospace trade secrets for the PRC's benefit and acting as a PRC agent.", "sourceIds": [ "S1" ] }, { "text": "Investigators recovered more than 250,000 pages of technical material from his home.", "sourceIds": [ "S2" ] } ], "uncertainties": [ { "text": "The public releases do not quantify how much of the collected archive was successfully delivered or incorporated into a specific PRC platform.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Chung denied spying and asserted that he was collecting information for a book, but the court rejected that account and convicted him after trial.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "The recovered archive contained extensive proprietary aerospace material, but the reviewed releases do not assign a reliable dollar value to the national-security and competitive harm.", "sourceIds": [ "S1", "S2" ], "qualifier": "unknown" } ], "leadershipGaps": [ { "title": "Tenure hid cumulative removal", "detail": "Long service and technical credibility allowed document retention to accumulate across programs and corporate transitions.", "hindsight": true }, { "title": "Retirement did not end access", "detail": "Post-retirement contracting extended the period in which a former employee could reach sensitive engineering material.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Audit cumulative downloads", "detail": "Detect long-horizon collection patterns across projects instead of treating each document access as an isolated event." }, { "audience": "companies", "title": "Reauthorize contractor access", "detail": "Review post-retirement and consultant permissions against current tasks, export controls, and genuine need." }, { "audience": "both", "title": "Connect travel and tasking signals", "detail": "Escalate undisclosed foreign contacts or travel when they coincide with unusual acquisition of controlled technical material." } ], "sources": [ { "id": "S1", "title": "Former Boeing Engineer Convicted of Economic Espionage in Theft of Space Shuttle Secrets for China", "publisher": "U.S. Department of Justice", "published": "2009-07-16", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/former-boeing-engineer-convicted-economic-espionage-theft-space-shuttle-secrets-china", "type": "government_release" }, { "id": "S2", "title": "Former Boeing Engineer Sentenced to Nearly 16 Years for Economic Espionage", "publisher": "U.S. Attorney's Office, Central District of California", "published": "2010-02-08", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archive/usao/cac/Pressroom/pr2010/027.html", "type": "government_release" } ] }, { "slug": "xiaoqing-zheng-ge-turbines", "caseId": "CS-018", "title": "A GE engineer hid turbine files inside a digital sunset and sent them to his private account", "shortTitle": "Xiaoqing Zheng — GE Power", "deck": "Xiaoqing Zheng used steganography to conceal GE turbine files inside the binary code of an ordinary-looking sunset image, then emailed the image to himself. A jury convicted him of conspiring to commit economic espionage.", "finding": "Zheng's conspiracy conviction established an intent to benefit PRC-connected companies and institutions, but the mixed verdict matters: jurors acquitted him on four counts and did not reach verdicts on seven others.", "executiveSummary": [ { "text": "Xiaoqing Zheng worked at GE Power from 2008 to 2018 on turbine sealing technology. In 2018, investigators alleged that he encrypted proprietary files, embedded them within the binary code of a digital sunset photograph, and emailed the disguised package from his GE account to a personal address—a concealment method he admitted having used on fewer than ten earlier occasions.", "sourceIds": [ "S1", "S2", "S3" ] }, { "text": "A federal jury convicted Zheng of conspiracy to commit economic espionage, finding a plan to benefit the PRC, foreign instrumentalities, and China-based companies. The jury acquitted him on four additional counts and deadlocked on seven, and the court later imposed 24 months in prison, a $7,500 fine, and one year of supervised release.", "sourceIds": [ "S2", "S3" ] } ], "narrative": [ { "heading": "Engineering access met outside business interests", "paragraphs": [ { "text": "Zheng's GE role placed him inside a specialized turbine program, while his outside relationships connected that expertise to businesses and institutions in China. The indictment described companies he and relatives established to develop turbine parts and links to PRC talent programs and universities.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The attachment looked like a sunset", "paragraphs": [ { "text": "The removal method was designed to defeat ordinary review. Zheng compressed and encrypted GE files, then used steganography to hide them inside an image file before sending it to a private email account. A visible picture could therefore pass as harmless while carrying proprietary engineering data beneath the surface.", "sourceIds": [ "S1", "S2", "S3" ] } ] }, { "heading": "A conviction with important limits", "paragraphs": [ { "text": "The 2022 verdict established the economic-espionage conspiracy, not every charged allegation. Jurors returned acquittals on four counts and no verdict on seven. The sentence reflected the surviving conviction, and the dossier preserves those limits so the proven conspiracy is not expanded into claims the jury did not decide.", "sourceIds": [ "S2", "S3" ] } ] } ], "media": [ { "src": "/media/cases/xiaoqing-zheng.jpg", "alt": "Xiaoqing Zheng walks beside a law-enforcement officer outside a federal courthouse", "caption": "Xiaoqing Zheng outside federal court in Albany in 2018. The image documents the actual defendant; it is not evidence of the charged conduct.", "credit": "Lori Van Buren / Times Union", "sourceUrl": "https://www.timesunion.com/7dayarchive/article/GE-engineer-to-be-released-on-100K-bond-13127249.php", "license": "Editorial use; all rights remain with the photographer and publisher", "kind": "photograph" } ], "status": "adjudicated", "legalOutcome": "Convicted in March 2022 of conspiracy to commit economic espionage; acquitted on four other counts while the jury did not reach verdicts on seven. Sentenced on January 3, 2023, to 24 months in prison, a $7,500 fine, and one year of supervised release.", "statusDate": "2023-01-03", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "The conspiracy conviction established an intent to benefit the PRC and foreign instrumentalities; it does not convert acquitted or unresolved counts into proven conduct.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2008–2023", "accessVectors": [ "Senior engineering employment", "Outside business interests", "Personal email" ], "methods": [ "Encryption", "Steganography", "Email exfiltration", "Private-company formation" ], "assets": [ "Turbine sealing technology", "Engineering files", "GE Power trade secrets" ], "actors": [ { "name": "Xiaoqing Zheng", "role": "Former GE Power engineer", "outcome": "Convicted of conspiracy; sentenced to 24 months" }, { "name": "China-based companies and institutions", "role": "Intended beneficiaries identified in the conspiracy case" } ], "originators": [ { "name": "GE Power", "role": "Developer and owner of the turbine technology" } ], "transferChain": [ { "stage": "relationship", "label": "Turbine engineer", "detail": "GE employed Zheng for a decade in work involving turbine sealing technology.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Proprietary engineering systems", "detail": "His job permitted access to technical files useful to turbine-parts development.", "sourceIds": [ "S1" ] }, { "stage": "acquisition", "label": "Files compressed and encrypted", "detail": "Zheng selected proprietary files and prepared them for concealed removal.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Sunset image carried data", "detail": "He embedded the encrypted package in an image and emailed it to a private account.", "sourceIds": [ "S1", "S3" ] }, { "stage": "use", "label": "Outside ventures stood to benefit", "detail": "The conspiracy connected GE information to China-based turbine businesses and institutional relationships.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Mixed verdict and sentence", "detail": "One conspiracy conviction survived alongside four acquittals and seven unresolved counts, followed by a two-year sentence.", "sourceIds": [ "S2", "S3" ] } ], "timeline": [ { "date": "2008", "label": "GE employment begins", "detail": "Zheng joined GE Power and gained access to turbine-sealing work.", "sourceIds": [ "S1", "S2" ] }, { "date": "2018-07", "label": "Concealed email detected", "detail": "Investigators documented a sunset image carrying encrypted GE files sent to Zheng's personal account.", "sourceIds": [ "S1", "S3" ] }, { "date": "2022-03-31", "label": "Jury returns mixed verdict", "detail": "The jury convicted on the conspiracy count, acquitted on four counts, and did not agree on seven.", "sourceIds": [ "S2" ] }, { "date": "2023-01-03", "label": "Sentence imposed", "detail": "The court sentenced Zheng to 24 months and imposed a fine and supervised release.", "sourceIds": [ "S3" ] } ], "established": [ { "text": "A jury convicted Zheng of conspiring to commit economic espionage for PRC-linked benefit.", "sourceIds": [ "S2" ] }, { "text": "The concealment method placed encrypted GE files inside a digital image sent to a personal account.", "sourceIds": [ "S1", "S3" ] } ], "uncertainties": [ { "text": "The jury acquitted Zheng on four counts and reached no verdict on seven; those allegations are not treated here as convictions.", "sourceIds": [ "S2", "S3" ] } ], "response": [ { "text": "Zheng contested the prosecution at trial. The mixed verdict preserved one conspiracy conviction while rejecting or leaving unresolved the remaining charged counts.", "sourceIds": [ "S2", "S3" ] } ], "harm": [ { "text": "The prosecution established concealment and intended foreign benefit, but the reviewed sources do not provide a court-adopted dollar loss or identify a displaced GE product.", "sourceIds": [ "S2", "S3" ], "qualifier": "unknown" } ], "leadershipGaps": [ { "title": "A benign file type carried secrets", "detail": "Controls focused on filenames or attachment appearance could miss proprietary content embedded inside ordinary image data.", "hindsight": true }, { "title": "Outside interests overlapped duties", "detail": "Foreign business and institutional relationships created a conflict with access to closely related employer technology.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Inspect content, not extensions", "detail": "Use data-loss controls capable of recognizing encrypted archives, steganography indicators, and anomalous outbound payloads." }, { "audience": "both", "title": "Disclose overlapping ventures", "detail": "Require review of outside companies, grants, and appointments that touch an employee's protected research domain." }, { "audience": "companies", "title": "Correlate email anomalies", "detail": "Investigate unusual personal-email traffic together with file access, encryption activity, and removable-media events." } ], "sources": [ { "id": "S1", "title": "Indictment: United States v. Xiaoqing Zheng and Zhaoxi Zhang", "publisher": "U.S. District Court, Northern District of New York", "published": "2019-04-23", "retrieved": "2026-08-23", "url": "https://www.justice.gov/d9/press-releases/attachments/2019/04/23/zheng_et_al_indictment_0.pdf", "type": "court_record", "note": "Charging document; allegations are distinguished from the later verdict." }, { "id": "S2", "title": "Former GE Power Engineer Convicted of Conspiracy to Commit Economic Espionage", "publisher": "U.S. Department of Justice", "published": "2022-03-31", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/former-ge-power-engineer-convicted-conspiracy-commit-economic-espionage", "type": "government_release" }, { "id": "S3", "title": "Former GE Power Engineer Sentenced for Conspiracy to Commit Economic Espionage", "publisher": "U.S. Attorney's Office, Northern District of New York", "published": "2023-01-03", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-ndny/pr/former-ge-power-engineer-sentenced-conspiracy-commit-economic-espionage", "type": "government_release" } ] }, { "slug": "hongjin-tan-phillips-66-batteries", "caseId": "CS-019", "title": "A departing Phillips 66 scientist copied a flow-battery research library before joining a China-based company", "shortTitle": "Hongjin Tan — Phillips 66", "deck": "The day before resigning from Phillips 66, Hongjin Tan copied hundreds of research files to a thumb drive. Investigators found deleted copies and a second drive containing battery-development material.", "finding": "Tan pleaded guilty to theft and unauthorized possession of trade secrets. The court ordered 24 months in prison and $150,000 restitution; the victim company's $1 billion valuation remains an attributed estimate.", "executiveSummary": [ { "text": "Hongjin Tan worked as an associate scientist on next-generation battery technology at a Phillips 66 research facility. On December 11, 2018, the day before he resigned, he copied hundreds of files to a thumb drive; after returning that drive with five documents deleted, investigators found the same material on another external device.", "sourceIds": [ "S1", "S2", "S3" ] }, { "text": "Tan admitted stealing and possessing protected battery research and was sentenced to 24 months in prison, three years of supervised release, and $150,000 restitution. Phillips 66 told investigators the development effort was worth more than $1 billion, but that figure is a company valuation reported by prosecutors—not a court-calculated loss award.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "A laboratory role exposed a whole development program", "paragraphs": [ { "text": "Tan's work involved energy-storage systems used in stationary applications, including flow-battery technology. His scientist role provided access not merely to one result but to the accumulated experimental record that made the program reproducible and commercially meaningful.", "sourceIds": [ "S1", "S2", "S3" ] } ] }, { "heading": "The departure date compressed the risk", "paragraphs": [ { "text": "Tan copied hundreds of files on December 11, 2018, then submitted his resignation the following day. When the company asked for the thumb drive, he returned it after deleting five documents; investigators later recovered matching copies from another drive. The sequence shows why resignation is a risk event rather than the moment controls should begin.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "A new job created an immediate destination", "paragraphs": [ { "text": "An official security case study documents Tan's planned employment with Xiamen Tungsten in China. That affiliation supplies commercial context, but Tan pleaded to trade-secret offenses rather than economic espionage, so this dossier does not treat a PRC-state beneficiary as judicially established.", "sourceIds": [ "S1", "S3" ] } ] } ], "media": [ { "src": "/media/cases/hongjin-tan.jpg", "alt": "Portrait of scientist Hongjin Tan in a laboratory setting", "caption": "Hongjin Tan, the former Phillips 66 scientist who pleaded guilty to stealing battery research. The portrait was published from his LinkedIn profile by the South China Morning Post.", "credit": "Hongjin Tan via LinkedIn / South China Morning Post", "sourceUrl": "https://www.scmp.com/news/world/united-states-canada/article/3037464/chinese-scientist-hongjin-tan-pleads-guilty-us", "license": "Editorial use; all rights remain with the original creator and publisher", "kind": "portrait" }, { "src": "/media/cases/battery-cells.jpg", "alt": "Rows of cylindrical battery cells arranged for manufacturing", "caption": "Battery research combines chemistry, process parameters, test results, and failures into a portable development record. This is contextual technology imagery, not Phillips 66 equipment from the case.", "credit": "U.S. Department of Energy", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Battery_cells_at_the_Battery_Innovation_Center.jpg", "license": "Public domain", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Pleaded guilty to theft of a trade secret and unauthorized possession of a trade secret; sentenced on February 27, 2020, to 24 months in prison, three years of supervised release, and $150,000 restitution.", "statusDate": "2020-02-27", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "documented_affiliation_or_support", "stateNexusSummary": "Tan had accepted a position with a China-based company, but his convictions did not establish economic espionage or PRC government direction.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2017–2020", "accessVectors": [ "Battery R&D employment", "Removable media", "Pre-departure access" ], "methods": [ "Bulk copying", "Deletion before return", "Duplicate external storage" ], "assets": [ "Flow-battery research", "Energy-storage test data", "R&D files and process knowledge" ], "actors": [ { "name": "Hongjin Tan", "role": "Former Phillips 66 associate scientist", "outcome": "Pleaded guilty; sentenced to 24 months" }, { "name": "Xiamen Tungsten", "role": "Prospective China-based employer identified in the official case study" } ], "originators": [ { "name": "Phillips 66", "role": "Developer and owner of the battery research" } ], "transferChain": [ { "stage": "relationship", "label": "Battery scientist", "detail": "Phillips 66 employed Tan in research on high-value stationary energy-storage technology.", "sourceIds": [ "S1", "S2", "S3" ] }, { "stage": "access", "label": "Development library", "detail": "His role exposed him to extensive trade-secret files supporting battery development.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Hundreds of files copied", "detail": "Tan copied a large research collection to removable media immediately before resigning.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Two external drives", "detail": "Deleted documents from the returned thumb drive remained on a second external device.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Prospective foreign employment", "detail": "Tan had accepted a role with Xiamen Tungsten, creating an apparent destination for his expertise, though no economic-espionage conviction resulted.", "sourceIds": [ "S3" ] }, { "stage": "consequence", "label": "Prison and restitution", "detail": "A guilty plea led to two years in prison and $150,000 in restitution.", "sourceIds": [ "S1", "S2" ] } ], "timeline": [ { "date": "2017", "label": "R&D role begins", "detail": "Tan began work as an associate scientist with access to battery research.", "sourceIds": [ "S3" ] }, { "date": "2018-12-11", "label": "Files copied", "detail": "Tan moved hundreds of research files to a thumb drive one day before resigning.", "sourceIds": [ "S1", "S2" ] }, { "date": "2019-11-12", "label": "Guilty plea", "detail": "Tan admitted theft and unauthorized possession of trade secrets.", "sourceIds": [ "S1" ] }, { "date": "2020-02-27", "label": "Sentence imposed", "detail": "The court imposed 24 months, supervised release, and restitution.", "sourceIds": [ "S2" ] } ], "established": [ { "text": "Tan admitted copying and retaining Phillips 66 battery trade secrets on external media.", "sourceIds": [ "S1", "S2" ] }, { "text": "The court ordered a 24-month prison term and $150,000 restitution.", "sourceIds": [ "S2" ] } ], "uncertainties": [ { "text": "The reviewed record does not establish that the files reached Xiamen Tungsten or a PRC government entity.", "sourceIds": [ "S1", "S3" ] } ], "response": [ { "text": "Tan admitted the trade-secret offenses through a guilty plea; the reviewed sources do not include a public response from Xiamen Tungsten.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "Phillips 66 valued the underlying development effort at more than $1 billion; that is the company's attributed estimate, not the restitution amount or a court loss finding.", "sourceIds": [ "S2" ], "qualifier": "attributed_estimate" } ], "leadershipGaps": [ { "title": "Resignation followed the copy", "detail": "The highest-volume acquisition occurred before the employer had the explicit warning supplied by Tan's resignation.", "hindsight": true }, { "title": "Returning one device was insufficient", "detail": "Deleted files on a surrendered thumb drive did not account for duplicate copies retained on other external media.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Detect pre-exit staging", "detail": "Alert on unusual bulk copying, archive creation, or removable-media use before and immediately after a resignation signal." }, { "audience": "companies", "title": "Inventory every copy", "detail": "Treat return of one device as the start of forensic accounting, not proof that proprietary material has been recovered." }, { "audience": "both", "title": "Separate value from file count", "detail": "Prioritize crown-jewel research by replacement time and competitive leverage, even when it occupies only a handful of documents." } ], "sources": [ { "id": "S1", "title": "Chinese National Pleads Guilty to Committing Theft of Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2019-11-12", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-national-pleads-guilty-committing-theft-trade-secrets", "type": "government_release" }, { "id": "S2", "title": "Chinese National Sentenced for Stealing Trade Secrets Worth $1 Billion", "publisher": "U.S. Department of Justice", "published": "2020-02-27", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-national-sentenced-stealing-trade-secrets-worth-1-billion", "type": "government_release", "note": "The headline repeats the victim company's valuation; the sentence included $150,000 restitution." }, { "id": "S3", "title": "Insider Threat Case Study: Hongjin Tan", "publisher": "Defense Counterintelligence and Security Agency", "published": "2020-02-27", "retrieved": "2026-08-23", "url": "https://www.cdse.edu/Portals/124/Documents/casestudies/case-study-hongjin-tan.pdf", "type": "government_release" } ] }, { "slug": "jiaqiang-xu-ibm-source-code", "caseId": "CS-020", "title": "A software developer stripped identifiers from IBM code and offered the product to prospective buyers", "shortTitle": "Jiaqiang Xu — IBM", "deck": "Jiaqiang Xu left a China-based software role with a complete copy of proprietary clustered-file-system source code. He modified it to conceal its origin, then demonstrated and offered the derivative software to undercover buyers.", "finding": "Xu pleaded guilty to all six economic-espionage and trade-secret counts. He admitted intending to benefit the PRC National Health and Family Planning Commission and received five years in prison.", "executiveSummary": [ { "text": "Jiaqiang Xu worked from 2010 to 2014 as a systems-software developer in China for a U.S. technology company identified by Reuters as IBM. His job gave him full access to proprietary source code for a clustered file system; after resigning, he retained a complete copy and used scripts to remove or change references that revealed its origin.", "sourceIds": [ "S1", "S2", "S3" ] }, { "text": "Xu marketed and demonstrated software built from that source code, including during an FBI undercover operation. He pleaded guilty to all six charged counts and admitted acting for his own profit and intending to benefit the PRC National Health and Family Planning Commission. The court sentenced him to five years in prison.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "Full source access came with an ordinary development job", "paragraphs": [ { "text": "The asset was not a finished executable that could be bought on the market. Source code exposed the design of a clustered file system used to increase data-storage performance, along with the engineering choices needed to modify and support it. Xu's developer role allowed him to download that material before his voluntary resignation in May 2014.", "sourceIds": [ "S1", "S2", "S3" ] } ] }, { "heading": "Concealment turned employer code into a competing product", "paragraphs": [ { "text": "Xu did more than retain a backup. He created scripts that removed or altered identifiers connecting the files to their owner, then used the modified code to build software for customers. That transformation is the bridge between acquisition and use: conceal provenance, preserve functionality, and present the result as something available for sale.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Undercover infrastructure made the provenance visible", "paragraphs": [ { "text": "During meetings with undercover officers posing as startup representatives, Xu offered the source code as a platform for a data-storage business and uploaded files to a test network. A company employee confirmed that the files appeared to contain protected code. Xu ultimately admitted both commercial use and the intended benefit to a PRC government commission.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/data-center.jpg", "alt": "Rows of computer servers with illuminated status lights in a data center", "caption": "Clustered file systems coordinate data across storage infrastructure; source code reveals how that capability is implemented. This is contextual imagery, not equipment from Xu's case.", "credit": "National Archives and Records Administration", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Data_Center_(16647119780).jpg", "license": "Public domain", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Pleaded guilty to all six charged counts—three economic-espionage counts and three trade-secret theft, possession, or distribution counts—and was sentenced on January 18, 2018, to five years in prison.", "statusDate": "2018-01-18", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "Xu admitted that he intended the stolen code to benefit the PRC National Health and Family Planning Commission.", "featured": true, "sector": { "slug": "ai-semiconductors-and-telecommunications", "label": "AI, semiconductors & telecommunications" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2010–2018", "accessVectors": [ "Software-development employment", "Full source-code access", "Post-employment retention" ], "methods": [ "Source-code copying", "Identifier removal", "Undercover sale and demonstration" ], "assets": [ "Clustered file-system source code", "Storage-system architecture", "Software build knowledge" ], "actors": [ { "name": "Jiaqiang Xu", "role": "Former China-based software developer", "outcome": "Pleaded guilty to six counts; sentenced to five years" }, { "name": "PRC National Health and Family Planning Commission", "role": "Government commission Xu admitted intending to benefit" } ], "originators": [ { "name": "IBM", "role": "Employer identified by Reuters and developer of the proprietary source code" } ], "transferChain": [ { "stage": "relationship", "label": "China-based developer", "detail": "Xu worked for the victim company's China operation and developed systems software.", "sourceIds": [ "S1", "S2", "S3" ] }, { "stage": "access", "label": "Complete source tree", "detail": "His role permitted full access to download the proprietary clustered-file-system code.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "Code retained after resignation", "detail": "Xu left employment with a complete copy of the source code.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Files uploaded to a test network", "detail": "He provided modified code to undercover infrastructure while discussing a prospective sale.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Origins removed and product demonstrated", "detail": "Scripts obscured the source while Xu marketed software derived from the protected code.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Six pleas and five years", "detail": "Xu admitted every charged count, including intended PRC-government benefit, and received a five-year sentence.", "sourceIds": [ "S1", "S2" ] } ], "timeline": [ { "date": "2010", "label": "Development role begins", "detail": "Xu began work in China with full access to the proprietary source code.", "sourceIds": [ "S1", "S3" ] }, { "date": "2014-05", "label": "Resignation with code retained", "detail": "Xu voluntarily resigned after copying the complete source tree.", "sourceIds": [ "S1", "S2" ] }, { "date": "2017-05-19", "label": "Guilty plea", "detail": "Xu pleaded guilty to all six economic-espionage and trade-secret counts.", "sourceIds": [ "S1" ] }, { "date": "2018-01-18", "label": "Five-year sentence", "detail": "The court imposed five years in federal prison.", "sourceIds": [ "S2" ] } ], "established": [ { "text": "Xu admitted retaining, disguising, marketing, and distributing proprietary source code from his former employer.", "sourceIds": [ "S1", "S2" ] }, { "text": "He admitted intending to benefit a PRC government commission and pleaded guilty to all six counts.", "sourceIds": [ "S1", "S2" ] } ], "uncertainties": [ { "text": "The court materials identify the victim as an unnamed U.S. company; IBM is the employer identified by Reuters through Xu's public employment profile.", "sourceIds": [ "S2", "S3" ] } ], "response": [ { "text": "Xu resolved the case by pleading guilty to every count. Reuters reported that IBM did not immediately respond to its request for comment.", "sourceIds": [ "S1", "S3" ] } ], "harm": [ { "text": "Xu put a functional derivative of the proprietary code into a sales channel, but the reviewed sources do not report a court-adopted dollar loss.", "sourceIds": [ "S1", "S2" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "Source access enabled full replication", "detail": "A developer could copy an entire product foundation, not merely a report or a limited technical excerpt.", "hindsight": true }, { "title": "Provenance was technically erasable", "detail": "Identifiers embedded in code were not a durable ownership control once the source tree left company systems.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Limit complete-tree access", "detail": "Segment repositories and require task-based approval for bulk export or cloning of crown-jewel source code." }, { "audience": "companies", "title": "Detect provenance stripping", "detail": "Monitor scripts and mass edits that remove copyright, product, package, or repository identifiers." }, { "audience": "both", "title": "Test post-exit exposure", "detail": "Use code-fingerprint and market monitoring to identify protected software reappearing in demonstrations, bids, or outside products." } ], "sources": [ { "id": "S1", "title": "Chinese National Pleads Guilty to Economic Espionage and Theft of a Trade Secret", "publisher": "U.S. Attorney's Office, Southern District of New York", "published": "2017-05-19", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-sdny/pr/chinese-national-pleads-guilty-economic-espionage-and-theft-trade-secret-us-company", "type": "government_release" }, { "id": "S2", "title": "Chinese National Sentenced for Economic Espionage and Theft of a Trade Secret from U.S. Company", "publisher": "U.S. Department of Justice", "published": "2018-01-18", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/chinese-national-sentenced-economic-espionage-and-theft-trade-secret-us-company", "type": "government_release" }, { "id": "S3", "title": "Ex-IBM employee from China gets five years in prison for stealing code", "publisher": "Reuters via Business Standard", "published": "2018-01-20", "retrieved": "2026-08-23", "url": "https://www.business-standard.com/article/reuters/ex-ibm-employee-from-china-gets-five-years-prison-for-stealing-code-118012000105_1.html", "type": "reputable_reporting", "note": "Identifies the otherwise unnamed victim company as IBM from Xu's public employment record." } ] }, { "slug": "yu-long-united-technologies-engines", "caseId": "CS-021", "title": "A United Technologies engineer carried F-22 and F-35 engine documents to China for a state-run institute", "shortTitle": "Yu Long — United Technologies", "deck": "While seeking work at a state-run Chinese institute, Yu Long used sensitive United Technologies material to support his application, carried a drive of documents to China, and retained controlled military-engine records.", "finding": "Long pleaded guilty to conspiring to steal trade secrets knowing the conduct would benefit a foreign government or instrumentality, plus an arms-export offense. He was sentenced to time served after roughly 30 months in custody.", "executiveSummary": [ { "text": "Yu Long worked from 2008 through 2014 as a senior engineer and scientist at United Technologies Research Center, where his assignments included F119 and F135 engine programs used by the F-22 and F-35. While still employed, he sought positions with the Chinese Academy of Sciences, the Shenyang Institute of Automation, and other state-run institutions.", "sourceIds": [ "S1", "S2" ] }, { "text": "Recruiters asked Long to substantiate his experience with work documents. He agreed, traveled to China carrying extensive UTRC material, and later possessed proprietary and export-controlled records on digital devices and in his baggage. He pleaded guilty to a trade-secret conspiracy with admitted foreign-government benefit and an Arms Export Control Act offense; the court imposed time served after approximately 30 months in custody.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "A job application requested proof of protected work", "paragraphs": [ { "text": "The recruitment process collapsed the boundary between résumé evidence and employer property. After Long agreed in principle to join the Shenyang Institute of Automation, institute personnel asked him for documents and project examples supporting the claims in his application. The requested proof came from sensitive work he had performed for UTRC.", "sourceIds": [ "S1" ] } ] }, { "heading": "Military-engine files traveled with the engineer", "paragraphs": [ { "text": "Long took a drive containing UTRC documents to China and worked for the institute in 2014. On a later trip through Newark, investigators found a paper from a Rolls-Royce-led consortium in his baggage, while digital devices contained proprietary and export-controlled files connected to military engine development.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The plea established the foreign-government element", "paragraphs": [ { "text": "Long did not merely admit unauthorized possession. He pleaded guilty to conspiring to steal trade secrets while knowing or intending that the conduct would benefit a foreign government, instrumentality, or agent, as well as to exporting a defense article without a license. The resulting time-served sentence reflected about two and a half years already spent in custody.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/f135-engine.jpg", "alt": "A Pratt and Whitney F135 military turbofan engine during development testing", "caption": "The F135 powers the F-35 and was among the military-engine programs in Long's United Technologies work. This is a public-domain program image, not evidence recovered in his case.", "credit": "U.S. Air Force", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Sdd_f135_018.jpg", "license": "Public domain", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Pleaded guilty in December 2016 to conspiracy to steal trade secrets for foreign-government benefit and an Arms Export Control Act offense; sentenced in May 2017 to time served after approximately 30 months in custody.", "statusDate": "2017-05-26", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "court_established_or_admitted", "stateNexusSummary": "Long admitted the foreign-government or foreign-instrumentality benefit element; the receiving institutions were state-run Chinese research bodies.", "featured": true, "sector": { "slug": "aerospace-and-defense", "label": "Aerospace & defense" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2008–2017", "accessVectors": [ "Defense R&D employment", "Foreign recruitment", "International travel" ], "methods": [ "External-drive copying", "Application-document submission", "Physical and digital transport" ], "assets": [ "F119 and F135 engine documents", "Export-controlled technology", "Consortium engineering records" ], "actors": [ { "name": "Yu Long", "role": "Former United Technologies senior engineer and scientist", "outcome": "Pleaded guilty; sentenced to time served" }, { "name": "Shenyang Institute of Automation", "role": "State-run institute that recruited Long and requested supporting work material" }, { "name": "Chinese Academy of Sciences", "role": "State-run institution affiliated with the recruiting institute" } ], "originators": [ { "name": "United Technologies Research Center", "role": "Employer and source of the protected engineering records" }, { "name": "Pratt & Whitney and program partners", "role": "Developers of military-engine technology reflected in the records" } ], "transferChain": [ { "stage": "relationship", "label": "Senior defense researcher", "detail": "UTRC employed Long in assignments touching F119 and F135 military-engine programs.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Sensitive program files", "detail": "His work exposed him to proprietary and export-controlled engineering records.", "sourceIds": [ "S1" ] }, { "stage": "acquisition", "label": "Documents collected for recruitment", "detail": "Long retained work files and project examples to support applications to Chinese institutions.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Drive carried to China", "detail": "He traveled with extensive UTRC material and later possessed additional records in baggage and digital devices.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Employment credentials and research", "detail": "The material supported Long's recruitment and work with a state-run institute.", "sourceIds": [ "S1" ] }, { "stage": "consequence", "label": "Plea after extended custody", "detail": "Long admitted trade-secret conspiracy and illegal export and was sentenced to time served after about 30 months.", "sourceIds": [ "S1", "S2" ] } ], "timeline": [ { "date": "2008", "label": "UTRC employment begins", "detail": "Long began a senior engineering role with access to military-engine research.", "sourceIds": [ "S1" ] }, { "date": "2013-12", "label": "Institute requests work proof", "detail": "After an agreement in principle, recruiters asked Long for employer documents and project examples.", "sourceIds": [ "S1" ] }, { "date": "2016-12-19", "label": "Guilty plea", "detail": "Long admitted the trade-secret conspiracy and arms-export offense.", "sourceIds": [ "S1" ] }, { "date": "2017-05-26", "label": "Time-served sentence", "detail": "The court sentenced Long after approximately 30 months already spent in custody.", "sourceIds": [ "S2" ] } ], "established": [ { "text": "Long admitted stealing sensitive UTRC documents and transporting material to China while seeking work at state-run institutions.", "sourceIds": [ "S1", "S2" ] }, { "text": "His plea established knowledge or intent that the conspiracy would benefit a foreign government, instrumentality, or agent.", "sourceIds": [ "S1" ] } ], "uncertainties": [ { "text": "The reviewed public record does not identify a specific PRC engine or weapon system into which the files were incorporated.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Long admitted the offenses through a guilty plea. The reviewed sources do not include a separate public response from the Chinese Academy of Sciences or Shenyang Institute of Automation.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "The files exposed proprietary and export-controlled military-engine work; the reviewed sources do not provide a court-adopted monetary loss.", "sourceIds": [ "S1", "S2" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "Recruiting demanded employer proof", "detail": "A foreign hiring process rewarded submission of protected work samples instead of relying on sanitized descriptions and references.", "hindsight": true }, { "title": "Travel carried digital and paper records", "detail": "The risk crossed devices, external drives, and baggage, making a single-channel control insufficient.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Sanitize work samples", "detail": "Provide approved portfolios or employment verification so staff never need protected documents to prove technical experience." }, { "audience": "both", "title": "Review sensitive foreign recruitment", "detail": "Require prompt disclosure when a foreign institution requests project files, code, drawings, or sponsor-only results during hiring." }, { "audience": "companies", "title": "Unify export and insider signals", "detail": "Correlate travel, device activity, print events, and export-control classifications around high-risk career transitions." } ], "sources": [ { "id": "S1", "title": "Chinese National Admits Stealing Sensitive Military Program Documents from United Technologies", "publisher": "U.S. Attorney's Office, District of Connecticut", "published": "2016-12-19", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-ct/pr/chinese-national-admits-stealing-sensitive-military-program-documents-united-technologies", "type": "government_release" }, { "id": "S2", "title": "Export and Sanctions Enforcement Cases: Yu Long Case Summary", "publisher": "U.S. Department of Justice, National Security Division", "published": "2017-05-26", "retrieved": "2026-08-23", "url": "https://www.justice.gov/nsd/page/file/940591/dl", "type": "government_release" } ] }, { "slug": "umc-micron-jinhua-dram", "caseId": "CS-022", "title": "UMC admitted taking Micron DRAM secrets—but the PRC company accused of benefiting was acquitted", "shortTitle": "UMC, Micron & Fujian Jinhua", "deck": "A Taiwan semiconductor company pleaded guilty to stealing a Micron trade secret during work connected to Fujian Jinhua. Four years later, the federal judge found Jinhua not guilty on every criminal count.", "finding": "The record has two distinct outcomes that cannot be merged: UMC's guilty plea and $60 million fine are adjudicated, while Fujian Jinhua's 2024 bench-trial acquittal means the alleged PRC beneficiary was not convicted.", "executiveSummary": [ { "text": "The 2018 indictment alleged that former Micron Taiwan employees moved DRAM manufacturing secrets to United Microelectronics Corporation, which had entered a technology-cooperation agreement with the PRC state-owned Fujian Jinhua Integrated Circuit Company. In 2020, UMC pleaded guilty to one count of receiving and possessing a stolen Micron trade secret and agreed to a $60 million fine and cooperation.", "sourceIds": [ "S1", "S2" ] }, { "text": "That plea did not adjudicate Jinhua's guilt. After a 2024 bench trial, the district court granted Jinhua's motion for judgment of acquittal and found it not guilty on all counts. This dossier therefore treats UMC's admitted theft and Jinhua's acquittal as equally essential facts, rather than transferring one defendant's plea to another.", "sourceIds": [ "S2", "S3" ] } ], "narrative": [ { "heading": "A semiconductor hiring chain moved know-how", "paragraphs": [ { "text": "The prosecution began with employee mobility in Taiwan's semiconductor sector. Engineers who had worked at Micron's Taiwan operation joined UMC, and the indictment alleged that protected DRAM process files followed them into a program associated with UMC's cooperation with Jinhua.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "UMC accepted criminal responsibility", "paragraphs": [ { "text": "In October 2020, UMC admitted receiving and possessing one Micron trade secret that had been stolen without authorization. The company agreed to a $60 million fine—then the second-largest ever imposed under the Economic Espionage Act—and to assist the continuing prosecution.", "sourceIds": [ "S2" ] } ] }, { "heading": "The alleged beneficiary won at trial", "paragraphs": [ { "text": "Jinhua exercised its right to trial. In February 2024, the judge concluded that the government had not proved the criminal charges beyond a reasonable doubt and entered not-guilty findings on every count. The result is a control case for this archive: organizational relationships and an upstream plea can support investigation, but they do not substitute for proof against a separate defendant.", "sourceIds": [ "S3" ] } ] } ], "media": [ { "src": "/media/cases/dram-architecture.png", "alt": "Diagram showing rows, columns, decoders, and memory cells inside a DRAM chip", "caption": "Dynamic random-access memory depends on tightly integrated cell, process, and manufacturing know-how. This open diagram explains the technology class; it is not Micron evidence from the case.", "credit": "Inductiveload / Wikimedia Commons", "sourceUrl": "https://commons.wikimedia.org/wiki/File:DRAM.svg", "license": "Public domain", "kind": "illustration" } ], "status": "adjudicated", "legalOutcome": "UMC pleaded guilty in October 2020 to one count of possessing a stolen Micron trade secret and accepted a $60 million fine. On February 27, 2024, Fujian Jinhua was found not guilty on all counts after a bench trial.", "statusDate": "2024-02-27", "lastReviewed": "2026-08-23", "nextReview": "2027-02-27", "stateNexus": "documented_affiliation_or_support", "stateNexusSummary": "Fujian Jinhua is PRC state-owned and was UMC's technology partner, but Jinhua was acquitted of all criminal charges; UMC's plea cannot establish Jinhua's guilt.", "featured": true, "sector": { "slug": "ai-semiconductors-and-telecommunications", "label": "AI, semiconductors & telecommunications" }, "jurisdictions": [ "United States", "Taiwan" ], "countries": [ "United States", "Taiwan", "China" ], "period": "2015–2024", "accessVectors": [ "Competitor hiring", "Semiconductor partnership", "Engineer file access" ], "methods": [ "Employee-carried files", "Process replication", "Corporate technology cooperation" ], "assets": [ "DRAM manufacturing trade secrets", "Process recipes", "Semiconductor production know-how" ], "actors": [ { "name": "United Microelectronics Corporation (UMC)", "role": "Taiwan semiconductor company that admitted possessing a stolen Micron trade secret", "outcome": "Pleaded guilty; $60 million fine" }, { "name": "Fujian Jinhua Integrated Circuit Company", "role": "PRC state-owned technology partner and charged defendant", "outcome": "Acquitted on all counts" }, { "name": "Former Micron Taiwan employees", "role": "Engineers accused of moving protected files into the UMC program" } ], "originators": [ { "name": "Micron Technology", "role": "Developer and owner of the DRAM manufacturing trade secrets" } ], "transferChain": [ { "stage": "relationship", "label": "Hiring and technology agreement", "detail": "Former Micron personnel joined UMC as UMC worked with Jinhua on DRAM capability.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Micron Taiwan records", "detail": "The recruited engineers had held access to Micron's protected manufacturing information.", "sourceIds": [ "S1" ] }, { "stage": "acquisition", "label": "One trade secret admitted", "detail": "UMC admitted receiving and possessing a Micron trade secret stolen without authorization.", "sourceIds": [ "S2" ] }, { "stage": "movement", "label": "Files entered UMC program", "detail": "The indictment alleged employee-carried files moved into work associated with the UMC-Jinhua project.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "Jinhua benefit alleged, not proved", "detail": "Prosecutors alleged the material supported Jinhua's DRAM program, but the court acquitted Jinhua on every count.", "sourceIds": [ "S1", "S3" ] }, { "stage": "consequence", "label": "Plea and acquittal", "detail": "UMC paid a $60 million criminal fine; Jinhua received a complete judgment of acquittal.", "sourceIds": [ "S2", "S3" ] } ], "timeline": [ { "date": "2016", "label": "DRAM partnership develops", "detail": "UMC and Jinhua pursued cooperation as former Micron personnel entered the program.", "sourceIds": [ "S1" ] }, { "date": "2018-11-01", "label": "Federal indictment", "detail": "The United States charged UMC, Jinhua, and three individuals with economic-espionage and trade-secret offenses.", "sourceIds": [ "S1" ] }, { "date": "2020-10-29", "label": "UMC pleads guilty", "detail": "UMC admitted possessing one stolen Micron trade secret and accepted the fine and cooperation terms.", "sourceIds": [ "S2" ] }, { "date": "2024-02-27", "label": "Jinhua acquitted", "detail": "The court found Jinhua not guilty on all counts after trial.", "sourceIds": [ "S3" ] } ], "established": [ { "text": "UMC admitted receiving and possessing one Micron trade secret that had been stolen without authorization.", "sourceIds": [ "S2" ] }, { "text": "Fujian Jinhua was acquitted on all counts and is not treated as convicted in this dossier.", "sourceIds": [ "S3" ] } ], "uncertainties": [ { "text": "The indictment's broader allegations against Jinhua did not produce a conviction; the court found the government's proof insufficient at trial.", "sourceIds": [ "S1", "S3" ] } ], "response": [ { "text": "UMC accepted responsibility through a negotiated plea. Jinhua denied wrongdoing, proceeded to trial, and obtained a complete acquittal.", "sourceIds": [ "S2", "S3" ] } ], "harm": [ { "text": "UMC's admitted possession exposed Micron's DRAM process information; the $60 million fine is a criminal penalty, not a measure of Jinhua's responsibility or Micron's total loss.", "sourceIds": [ "S2", "S3" ], "qualifier": "court_found" } ], "leadershipGaps": [ { "title": "Hiring moved more than labor", "detail": "A cluster of engineers carried a risk that protected files and tacit process knowledge would move with them into a rival program.", "hindsight": true }, { "title": "Partnership blurred attribution", "detail": "A corporate technology relationship created a plausible transfer pathway but did not prove that every partner committed the same offense.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Audit clustered departures", "detail": "Escalate team-level moves to a direct competitor and examine shared repositories, downloads, and post-exit product overlap." }, { "audience": "companies", "title": "Control clean-room inputs", "detail": "Require documented provenance and clean-room development when hiring engineers from competitors into an adjacent manufacturing program." }, { "audience": "both", "title": "Keep defendants separate", "detail": "In investigations and public reporting, never transfer a plea, judgment, or allegation from one company or person to another." } ], "sources": [ { "id": "S1", "title": "PRC State-Owned Company, Taiwan Company, and Three Individuals Charged with Economic Espionage", "publisher": "U.S. Attorney's Office, Northern District of California", "published": "2018-11-01", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-ndca/pr/prc-state-owned-company-taiwan-company-and-three-individuals-charged-economic-espionage", "type": "government_release", "note": "Charging allegations, not findings against Jinhua." }, { "id": "S2", "title": "Taiwan Company Pleads Guilty to Trade Secret Theft in PRC State-Owned Company Case", "publisher": "U.S. Department of Justice", "published": "2020-10-29", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/taiwan-company-pleads-guilty-trade-secret-theft-criminal-case-involving-prc-state-owned", "type": "government_release" }, { "id": "S3", "title": "Minutes: Judgment of Acquittal in United States v. Fujian Jinhua", "publisher": "U.S. District Court, Northern District of California", "published": "2024-02-27", "retrieved": "2026-08-23", "url": "https://regmedia.co.uk/2024/02/28/fujian-jinhua-not-guilty.pdf", "type": "court_record", "note": "Mirror of the federal court minutes documenting the complete acquittal." } ] }, { "slug": "apt40-hainan-mss-campaign", "caseId": "CS-025", "title": "A Hainan intelligence bureau allegedly used a front company to run a global technology-hunting campaign", "shortTitle": "APT40 — Hainan MSS", "deck": "A 2021 federal indictment and joint cyber advisories attributed a multiyear intrusion campaign to officers of the Hainan State Security Department and a contractor front company. The defendants remain accused, not convicted.", "finding": "U.S. authorities officially attributed the campaign to the PRC Ministry of State Security's Hainan bureau and alleged targeting across industries and countries. The charges are unresolved and every operational claim remains an allegation unless independently attributed.", "executiveSummary": [ { "text": "The United States alleged that from 2011 through 2018, officers of the Hainan State Security Department—a provincial arm of the PRC Ministry of State Security—used Hainan Xiandun Technology Development Company as a front to recruit and manage hackers. Four named defendants were charged with a campaign targeting companies, universities, research institutes, governments, and other organizations.", "sourceIds": [ "S1", "S2", "S3" ] }, { "text": "The alleged target list read like a strategic technology portfolio: submersibles and autonomous vehicles, aircraft servicing, chemicals, genetic sequencing, Ebola research, and railway information, among other sectors. U.S. and allied agencies publicly attributed the activity to APT40 and published technical indicators, but the indictment has not produced trial findings; the named individuals are presumed innocent unless proved guilty.", "sourceIds": [ "S1", "S2", "S4" ] } ], "narrative": [ { "heading": "A front company supplied the operating layer", "paragraphs": [ { "text": "According to the indictment, Hainan intelligence officers coordinated hackers through Hainan Xiandun rather than operating only under visible government names. The company allegedly helped recruit technical personnel, provide a workplace, and give state-directed activity a commercial exterior.", "sourceIds": [ "S1", "S4" ] } ] }, { "heading": "The campaign followed useful technologies", "paragraphs": [ { "text": "Victims were not confined to one defense contractor or one country. Prosecutors alleged intrusions against dozens of organizations in at least twelve countries and identified targets spanning maritime systems, aviation, biomedicine, transportation, and research. That breadth is the central vignette: cyber access can be managed as a continuing collection program rather than a one-company theft.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "Attribution is not adjudication", "paragraphs": [ { "text": "CISA, the FBI, and partner agencies released technical advisories linking tools and methods to APT40, while the FBI published a wanted poster naming Zhu Yunmin, Wu Shurong, Ding Xiaoyang, and Cheng Qingmin. Those are official allegations and attributions. Because no cited judgment establishes guilt, this file uses allegation language throughout and does not count the case as adjudicated.", "sourceIds": [ "S2", "S3", "S4" ] } ] } ], "media": [ { "src": "/media/cases/apt40-wanted-poster.jpg", "alt": "FBI wanted poster showing three identified APT40 defendants and a silhouette for a fourth", "caption": "The FBI's official APT40 poster identifies Zhu Yunmin, Wu Shurong, Ding Xiaoyang, and Cheng Qingmin; no photograph is shown for Cheng. A wanted poster records accusations, not convictions.", "credit": "Federal Bureau of Investigation", "sourceUrl": "https://www.fbi.gov/wanted/cyber/apt-40-cyber-espionage-activities/apt-40-fbi-wanted-8-5x11-web-june-2021.pdf", "license": "Public domain U.S. government work", "kind": "document" } ], "status": "officially_alleged_or_attributed", "legalOutcome": "Four defendants were indicted in 2021. The cited public record does not report convictions or trial judgments; the allegations remain unadjudicated and the defendants are presumed innocent.", "statusDate": "2021-07-19", "lastReviewed": "2026-08-23", "nextReview": "2026-11-23", "stateNexus": "officially_attributed", "stateNexusSummary": "U.S. authorities officially attributed the operation to the Hainan State Security Department, a provincial arm of the PRC Ministry of State Security.", "featured": true, "sector": { "slug": "ai-semiconductors-and-telecommunications", "label": "AI, semiconductors & telecommunications" }, "jurisdictions": [ "United States" ], "countries": [ "China", "United States", "Multiple countries" ], "period": "2011–2021", "accessVectors": [ "Internet-facing systems", "Spearphishing", "Front-company recruitment" ], "methods": [ "Credential theft", "Remote exploitation", "Persistent network access", "Contractor cover" ], "assets": [ "Maritime technology", "Aviation data", "Biomedical research", "Railway and industrial information" ], "actors": [ { "name": "Zhu Yunmin", "role": "Hainan State Security Department officer named in the indictment", "outcome": "Indicted; not adjudicated" }, { "name": "Wu Shurong", "role": "Computer hacker named in the indictment", "outcome": "Indicted; not adjudicated" }, { "name": "Ding Xiaoyang", "role": "Hainan State Security Department officer named in the indictment", "outcome": "Indicted; not adjudicated" }, { "name": "Cheng Qingmin", "role": "Hainan State Security Department officer named in the indictment", "outcome": "Indicted; not adjudicated" }, { "name": "Hainan Xiandun Technology Development Company", "role": "Alleged front company used to recruit and support hackers" } ], "originators": [ { "name": "Targeted companies, universities, and public institutions", "role": "Creators and custodians of the allegedly targeted technology and data" } ], "transferChain": [ { "stage": "relationship", "label": "Front-company structure alleged", "detail": "Hainan intelligence officers allegedly used Hainan Xiandun to recruit and employ hackers.", "sourceIds": [ "S1", "S4" ] }, { "stage": "access", "label": "Remote entry into victim networks", "detail": "Advisories attributed exploitation, credential theft, and other intrusion techniques to the campaign.", "sourceIds": [ "S2", "S4" ] }, { "stage": "acquisition", "label": "Strategic data targeted", "detail": "The indictment alleged collection from technology, research, government, and industrial victims.", "sourceIds": [ "S1" ] }, { "stage": "movement", "label": "Network exfiltration alleged", "detail": "Compromised infrastructure allegedly enabled information to move from victim systems to campaign operators.", "sourceIds": [ "S1", "S4" ] }, { "stage": "use", "label": "Intelligence benefit attributed", "detail": "U.S. authorities attributed the campaign to a PRC intelligence bureau seeking strategic and commercial information.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Names, indicators, and charges published", "detail": "The United States unsealed charges and agencies released defensive indicators, but no conviction followed in the cited record.", "sourceIds": [ "S1", "S2", "S3" ] } ], "timeline": [ { "date": "2011", "label": "Campaign period begins", "detail": "The indictment alleged that the charged conspiracy operated from at least 2011.", "sourceIds": [ "S1" ] }, { "date": "2018", "label": "Charged campaign period ends", "detail": "The public charging document described activity continuing through 2018.", "sourceIds": [ "S1" ] }, { "date": "2021-07-19", "label": "Indictment and advisories released", "detail": "DOJ, FBI, CISA, and partners named the actors and published attribution and defensive guidance.", "sourceIds": [ "S1", "S2", "S3", "S4" ] } ], "established": [ { "text": "U.S. authorities formally charged four people and publicly attributed the campaign to the Hainan State Security Department.", "sourceIds": [ "S1", "S2", "S3" ] }, { "text": "Government advisories published technical behaviors and indicators associated with APT40 to support network defense.", "sourceIds": [ "S2", "S4" ] } ], "uncertainties": [ { "text": "The charges have not been adjudicated in the cited record; the named defendants are presumed innocent and the alleged victim counts and objectives have not been tested at trial.", "sourceIds": [ "S1", "S3" ] } ], "response": [ { "text": "The reviewed U.S. sources present the indictment and attribution. They do not contain an adjudicated response from the defendants or a trial-tested PRC government account.", "sourceIds": [ "S1", "S2" ] } ], "harm": [ { "text": "Authorities alleged intrusions against dozens of organizations in at least twelve countries, but the public record does not quantify verified losses across the campaign.", "sourceIds": [ "S1" ], "qualifier": "potential" } ], "leadershipGaps": [ { "title": "One campaign crossed many sectors", "detail": "Organizations evaluating only sector-specific criminals could miss infrastructure and methods reused against unrelated technology portfolios.", "hindsight": true }, { "title": "Commercial cover obscured sponsorship", "detail": "A contractor-style company allegedly supplied recruiting and operational support while shielding an intelligence relationship.", "hindsight": true } ], "actions": [ { "audience": "both", "title": "Use current government indicators", "detail": "Map CISA and FBI indicators and techniques to telemetry, identity systems, vulnerability management, and incident-response playbooks." }, { "audience": "both", "title": "Share cross-sector signals", "detail": "Participate in sector and government information-sharing channels so repeated infrastructure is visible beyond one institution." }, { "audience": "both", "title": "Preserve attribution limits", "detail": "Separate observed technical behavior, official attribution, charged allegations, and court findings in every executive briefing." } ], "sources": [ { "id": "S1", "title": "Four Chinese Nationals Working with Ministry of State Security Charged in Global Computer Intrusion Campaign", "publisher": "U.S. Department of Justice", "published": "2021-07-19", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/four-chinese-nationals-working-ministry-state-security-charged-global-computer-intrusion", "type": "government_release", "note": "Charging allegations; defendants are presumed innocent." }, { "id": "S2", "title": "U.S. Government Releases Indictment and Advisories Detailing Chinese Cyber Campaign", "publisher": "Cybersecurity and Infrastructure Security Agency", "published": "2021-07-19", "retrieved": "2026-08-23", "url": "https://www.cisa.gov/news-events/alerts/2021/07/19/us-government-releases-indictment-and-several-advisories-detailing", "type": "government_release" }, { "id": "S3", "title": "APT40 Cyber Espionage Activities Wanted Poster", "publisher": "Federal Bureau of Investigation", "published": "2021-07-19", "retrieved": "2026-08-23", "url": "https://www.fbi.gov/wanted/cyber/apt-40-cyber-espionage-activities/apt-40-fbi-wanted-8-5x11-web-june-2021.pdf", "type": "government_release" }, { "id": "S4", "title": "Tactics, Techniques, and Procedures of Indicted APT40 Actors Associated with China's MSS Hainan State Security Department", "publisher": "Cybersecurity and Infrastructure Security Agency", "published": "2021-07-19", "retrieved": "2026-08-23", "url": "https://www.cisa.gov/sites/default/files/publications/CSA_TTPs-of-Indicted-APT40-Actors-Associated-with-China-MSS-Hainan-State-Security-Department.pdf", "type": "government_release" } ] }, { "slug": "shan-shi-trelleborg-syntactic-foam", "caseId": "CS-028", "title": "A China-funded Houston venture recruited insiders to reproduce Trelleborg's deep-sea syntactic foam", "shortTitle": "Shan Shi — Trelleborg", "deck": "Shan Shi's Houston company hired former and current Trelleborg personnel, collected recipes and process information, and supplied a China-based partner with the know-how needed to make a specialized buoyancy material.", "finding": "Shi was convicted of conspiracy to steal trade secrets, sentenced to 16 months, and lost his appeal. The same jury acquitted him of economic espionage and money laundering, limits that remain prominent here.", "executiveSummary": [ { "text": "Syntactic foam looks unremarkable, but microscopic hollow spheres let it provide buoyancy under extreme pressure in deep-sea oil, research, and military applications. Trelleborg spent decades developing formulations and manufacturing controls for the material. A China-based venture funded a Houston affiliate led by Shan Shi to acquire and reproduce that capability.", "sourceIds": [ "S1", "S2", "S3" ] }, { "text": "Shi's company recruited people with Trelleborg access, obtained protected recipes and process information, and passed technical data to China. A jury convicted Shi of one trade-secret conspiracy and he received 16 months in prison and more than $330,000 in forfeiture. The jury acquitted him of economic espionage and money laundering, and the D.C. Circuit later affirmed the surviving conviction.", "sourceIds": [ "S1", "S2", "S3" ] } ], "narrative": [ { "heading": "The target was a material system, not a single formula", "paragraphs": [ { "text": "Deep-rated syntactic foam depends on hollow microspheres, resin chemistry, raw-material selection, mixing, curing, and quality controls working together. The court record described Trelleborg information ranging from formulations and supplier details to manufacturing parameters—exactly the package needed to move from laboratory samples toward repeatable production.", "sourceIds": [ "S1", "S3" ] } ] }, { "heading": "Recruiting created the acquisition channel", "paragraphs": [ { "text": "China-based CBMF provided roughly $3.1 million to establish and operate Construct Better Materials International in Houston. Shi's venture identified Trelleborg personnel with relevant access and hired or worked with them. Information then flowed through spreadsheets, messages, samples, and technical collaboration rather than a single dramatic break-in.", "sourceIds": [ "S2", "S3" ] } ] }, { "heading": "The verdict drew a line between theft and espionage", "paragraphs": [ { "text": "The jury concluded that Shi joined a conspiracy to steal Trelleborg trade secrets, but it did not convict him of economic espionage or money laundering. The appellate court upheld the trade-secret conviction. That distinction matters: documented China-based funding and customers provide a nexus, while the acquittal prevents this archive from claiming that the government-benefit element was proved beyond a reasonable doubt.", "sourceIds": [ "S1", "S2", "S3" ] } ] } ], "media": [ { "src": "/media/cases/syntactic-foam.jpg", "alt": "Scanning electron micrograph of hollow glass spheres embedded in syntactic foam", "caption": "A scanning electron micrograph shows the hollow glass microspheres that give syntactic foam its low density and pressure resistance. This is contextual microscopy, not a Trelleborg exhibit from the trial.", "credit": "Nikgupt / Wikimedia Commons", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Syntacticfoam.JPG", "license": "Creative Commons Attribution-ShareAlike 3.0", "licenseUrl": "https://creativecommons.org/licenses/by-sa/3.0/", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Convicted in July 2019 of conspiracy to steal trade secrets and acquitted of economic espionage and money laundering; sentenced in February 2020 to 16 months in prison and more than $330,000 in forfeiture. The D.C. Circuit affirmed the conviction in March 2021.", "statusDate": "2021-03-23", "lastReviewed": "2026-08-23", "nextReview": "2027-03-23", "stateNexus": "documented_affiliation_or_support", "stateNexusSummary": "The record documents China-based corporate and government-linked funding and prospective users, but the jury acquitted Shi of economic espionage; no foreign-government-benefit conviction is claimed.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China", "Sweden" ], "period": "2013–2021", "accessVectors": [ "Recruitment of competitor personnel", "China-funded U.S. subsidiary", "Technical collaboration" ], "methods": [ "Insider solicitation", "Spreadsheet and email transfer", "Sample production", "Supplier mapping" ], "assets": [ "Syntactic-foam formulations", "Hollow-microsphere process", "Raw-material suppliers", "Manufacturing parameters" ], "actors": [ { "name": "Shan Shi", "role": "President of Houston-based CBMI", "outcome": "Convicted of trade-secret conspiracy; acquitted of economic espionage and money laundering" }, { "name": "Construct Better Materials International (CBMI)", "role": "Houston vehicle used to recruit personnel and develop syntactic foam" }, { "name": "CBMF", "role": "China-based partner that funded CBMI and received technical information" } ], "originators": [ { "name": "Trelleborg Offshore", "role": "Developer and owner of protected syntactic-foam technology" } ], "transferChain": [ { "stage": "relationship", "label": "China-funded Houston affiliate", "detail": "CBMF financed CBMI, and Shi led the U.S. operation seeking syntactic-foam capability.", "sourceIds": [ "S2", "S3" ] }, { "stage": "access", "label": "Competitor personnel recruited", "detail": "The venture identified and engaged people with access to Trelleborg's research and production know-how.", "sourceIds": [ "S1", "S3" ] }, { "stage": "acquisition", "label": "Recipes and process data collected", "detail": "Protected formulations, suppliers, raw-material data, and manufacturing details entered the CBMI program.", "sourceIds": [ "S1", "S3" ] }, { "stage": "movement", "label": "Technical data sent to China", "detail": "Emails and spreadsheets moved parts of the Trelleborg knowledge package to the China-based partner.", "sourceIds": [ "S2", "S3" ] }, { "stage": "use", "label": "Competing production attempted", "detail": "CBMI and CBMF used the information to make components and advance a domestic syntactic-foam capability.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Limited conviction affirmed", "detail": "Shi received 16 months for trade-secret conspiracy; the economic-espionage and money-laundering acquittals remain controlling limits.", "sourceIds": [ "S1", "S2", "S3" ] } ], "timeline": [ { "date": "2013", "label": "Houston program organized", "detail": "China-based funding supported CBMI's effort to acquire syntactic-foam capability.", "sourceIds": [ "S2", "S3" ] }, { "date": "2017-05", "label": "Undercover meeting and arrests", "detail": "An undercover presentation exposed the program's technical progress and intended applications before arrests.", "sourceIds": [ "S2" ] }, { "date": "2019-07-29", "label": "Mixed jury verdict", "detail": "Shi was convicted of trade-secret conspiracy and acquitted of economic espionage and money laundering.", "sourceIds": [ "S1" ] }, { "date": "2021-03-23", "label": "Conviction affirmed", "detail": "The D.C. Circuit rejected Shi's appeal and affirmed the surviving conviction.", "sourceIds": [ "S3" ] } ], "established": [ { "text": "A jury convicted Shi of conspiring to steal Trelleborg syntactic-foam trade secrets.", "sourceIds": [ "S1", "S3" ] }, { "text": "The same jury acquitted Shi of economic espionage and money laundering, and those acquittals are not displaced by the trade-secret conviction.", "sourceIds": [ "S1", "S2" ] } ], "uncertainties": [ { "text": "The public record does not establish full-scale production or quantify the final competitive harm; prosecutors said the operation was interrupted before complete mass-production capability was secured.", "sourceIds": [ "S2", "S3" ] } ], "response": [ { "text": "Shi contested the charges at trial and on appeal, obtaining acquittals on economic espionage and money laundering but not reversal of the trade-secret conspiracy conviction.", "sourceIds": [ "S1", "S3" ] } ], "harm": [ { "text": "The conspiracy transferred significant parts of a decades-developed production package, while law enforcement intervention limited the remaining acquisition and large-scale use.", "sourceIds": [ "S2", "S3" ], "qualifier": "documented" } ], "leadershipGaps": [ { "title": "The target was a whole production recipe", "detail": "Individual spreadsheets and supplier details became strategically valuable when combined with formulations, samples, and experienced personnel.", "hindsight": true }, { "title": "Former and current staff formed a bridge", "detail": "Recruiting around one specialist company created multiple paths back into the same protected development program.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Model competitor hiring clusters", "detail": "Review coordinated recruitment of current and former staff who together could reconstruct a protected manufacturing process." }, { "audience": "companies", "title": "Protect supplier and parameter data", "detail": "Treat bills of material, supplier identities, tolerances, and failed experiments as part of the crown-jewel package." }, { "audience": "both", "title": "Preserve count-level outcomes", "detail": "Record each conviction and acquittal separately so a trade-secret finding is not restated as an espionage conviction." } ], "sources": [ { "id": "S1", "title": "Texas Man Convicted of Conspiracy to Commit Theft of Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2019-07-29", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/texas-man-convicted-conspiracy-commit-theft-trade-secrets", "type": "government_release" }, { "id": "S2", "title": "American Businessman Sentenced in Theft of Syntactic Foam Trade Secrets", "publisher": "U.S. Department of Justice", "published": "2020-02-11", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archives/opa/pr/american-businessman-who-ran-houston-based-subsidiary-chinese-company-sentenced-prison-theft", "type": "government_release" }, { "id": "S3", "title": "United States v. Shan Shi, Opinion Affirming Conviction", "publisher": "U.S. Court of Appeals for the District of Columbia Circuit", "published": "2021-03-23", "retrieved": "2026-08-23", "url": "https://media.cadc.uscourts.gov/opinions/docs/2021/03/20-3010-1889998.pdf", "type": "court_record" } ] }, { "slug": "shanshan-du-yu-qin-gm-hybrid", "caseId": "CS-029", "title": "A GM engineer copied 16,000 hybrid-vehicle files before building a venture aimed at a Chinese automaker", "shortTitle": "Shanshan Du & Yu Qin — GM", "deck": "Days after accepting a severance offer, General Motors engineer Shanshan Du copied thousands of files, including hybrid-motor source code and schematics. She and her husband then pursued a business relationship with Chery Automobile.", "finding": "A jury convicted Du and Qin of conspiracy and unauthorized possession of GM trade secrets. Du was acquitted of wire fraud; Qin was convicted on all counts, including wire fraud and obstruction, and the Sixth Circuit affirmed.", "executiveSummary": [ { "text": "Shanshan Du worked in General Motors' hybrid-vehicle group. After accepting a severance offer in January 2005 and before leaving the company, she copied approximately 16,000 files to an external drive. The collection included source code, motor-control material, and engineering schematics related to hybrid vehicles.", "sourceIds": [ "S1", "S2" ] }, { "text": "Du and her husband, Yu Qin, developed Millennium Technology International and pursued a joint venture that contemplated selling related technology to Chinese automaker Chery. Both were convicted of trade-secret conspiracy and possession; Qin was also convicted of wire fraud and obstruction after agents saw him discard shredded subpoenaed records. Du received one year and one day, Qin three years, and their convictions were affirmed.", "sourceIds": [ "S1", "S2", "S3" ] } ], "narrative": [ { "heading": "The copy happened inside the departure window", "paragraphs": [ { "text": "Du accepted GM's severance offer, then used the remaining access period to move roughly 16,000 files to an external drive. When she left, she certified that she had returned company property. The copied material stayed with her and later appeared in the couple's private business environment.", "sourceIds": [ "S1", "S3" ] } ] }, { "heading": "A venture supplied the commercial pathway", "paragraphs": [ { "text": "Du became president of Millennium Technology International while Qin pursued partners and potential investors. Trial evidence tied the venture's aggressive development schedule to technology similar to GM's and showed communications aimed at a relationship with Chery. The files were therefore not merely archived; they sat beside an effort to commercialize adjacent hybrid-motor capability.", "sourceIds": [ "S2", "S3" ] } ] }, { "heading": "Denials and shredding extended the scheme", "paragraphs": [ { "text": "When GM questioned the couple, both denied retaining its files. A later search recovered more GM documents. The day investigators executed a warrant and served subpoenas, surveillance agents watched Qin discard bags of shredded records in a grocery-store dumpster; reconstructed documents supported the obstruction conviction. Du, however, was acquitted on the wire-fraud counts, a separate outcome preserved here.", "sourceIds": [ "S3" ] } ] } ], "media": [ { "src": "/media/cases/shanshan-du-yu-qin.jpg", "alt": "Police booking photographs of Yu Qin and Shanshan Du shown side by side", "caption": "Yu Qin and Shanshan Du in law-enforcement booking photographs published by the Associated Press. Both were convicted of trade-secret offenses; Du was acquitted on the wire-fraud counts.", "credit": "Associated Press via South China Morning Post", "sourceUrl": "https://www.scmp.com/business/article/1094967/ex-gm-engineer-husband-convicted-jury-trade-secrets-theft", "license": "Editorial use; all rights remain with the originating agency and publisher", "kind": "photograph" } ], "status": "adjudicated", "legalOutcome": "Both defendants were convicted in November 2012 of trade-secret conspiracy and unauthorized possession. Qin was convicted on all counts, including wire fraud and obstruction; Du was acquitted of wire fraud. Qin received 36 months and Du 12 months plus one day; the Sixth Circuit affirmed in June 2014.", "statusDate": "2014-06-26", "lastReviewed": "2026-08-23", "nextReview": "2027-06-26", "stateNexus": "none_established", "stateNexusSummary": "The venture pursued business with Chery Automobile, but the cited adjudicated record does not establish PRC government direction or support.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2005–2014", "accessVectors": [ "Hybrid-vehicle engineering employment", "Severance window", "External drive" ], "methods": [ "Bulk file copying", "Private-venture formation", "False denials", "Document shredding" ], "assets": [ "Hybrid-motor control source code", "Motor schematics", "Vehicle engineering files" ], "actors": [ { "name": "Shanshan Du", "role": "Former GM hybrid engineer and MTI president", "outcome": "Convicted of trade-secret offenses; acquitted of wire fraud; sentenced to one year and one day" }, { "name": "Yu Qin", "role": "Du's husband and MTI organizer", "outcome": "Convicted on all counts; sentenced to three years" }, { "name": "Millennium Technology International", "role": "Private venture through which the couple pursued hybrid-technology business" }, { "name": "Chery Automobile", "role": "Prospective Chinese commercial partner" } ], "originators": [ { "name": "General Motors", "role": "Developer and owner of the hybrid-vehicle trade secrets" } ], "transferChain": [ { "stage": "relationship", "label": "GM hybrid engineer", "detail": "Du's engineering role exposed her to GM motor-control and hybrid-vehicle development files.", "sourceIds": [ "S1", "S3" ] }, { "stage": "access", "label": "Severance access remained active", "detail": "She retained system access after accepting severance and before her employment ended.", "sourceIds": [ "S1", "S3" ] }, { "stage": "acquisition", "label": "Sixteen thousand files copied", "detail": "Du moved a large GM collection, including trade-secret documents, to an external drive.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Files entered MTI environment", "detail": "GM documents were found in the defendants' possession and connected to their private venture.", "sourceIds": [ "S3" ] }, { "stage": "use", "label": "Chinese joint venture pursued", "detail": "The couple sought to exploit similar hybrid technology through a proposed relationship with Chery.", "sourceIds": [ "S2", "S3" ] }, { "stage": "consequence", "label": "Convictions and affirmed sentences", "detail": "Both received prison terms; Du's wire-fraud acquittals and Qin's additional convictions remained intact on appeal.", "sourceIds": [ "S2", "S3" ] } ], "timeline": [ { "date": "2005-01", "label": "Files copied before departure", "detail": "Du accepted severance and copied approximately 16,000 GM files during the exit window.", "sourceIds": [ "S1", "S3" ] }, { "date": "2006", "label": "Search and shredding", "detail": "Agents recovered retained GM documents and observed Qin discarding shredded subpoenaed business records.", "sourceIds": [ "S3" ] }, { "date": "2012-11-30", "label": "Jury verdict", "detail": "Both were convicted on trade-secret counts; Du was acquitted on wire fraud while Qin was convicted on all counts.", "sourceIds": [ "S2", "S3" ] }, { "date": "2014-06-26", "label": "Appeal decided", "detail": "The Sixth Circuit affirmed the convictions and sentences.", "sourceIds": [ "S3" ] } ], "established": [ { "text": "Du and Qin were convicted of conspiring to possess and possessing GM hybrid-vehicle trade secrets without authorization.", "sourceIds": [ "S2", "S3" ] }, { "text": "Qin was convicted of wire fraud and obstruction; Du was acquitted of wire fraud.", "sourceIds": [ "S3" ] } ], "uncertainties": [ { "text": "GM estimated the stolen documents at more than $40 million, but that figure is a company estimate and not restated as the court's loss calculation.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Both defendants contested the case at trial and on appeal. The appellate court affirmed, while Du's trial acquittals on wire fraud remained part of the final outcome.", "sourceIds": [ "S3" ] } ], "harm": [ { "text": "GM estimated the 16,000-file collection, including hybrid trade secrets, at more than $40 million.", "sourceIds": [ "S1", "S2" ], "qualifier": "attributed_estimate" } ], "leadershipGaps": [ { "title": "Severance created a live collection window", "detail": "Access remained broad during the period between accepting departure terms and actually leaving the company.", "hindsight": true }, { "title": "A spouse-operated venture multiplied risk", "detail": "Employer information moved into a separate commercial entity whose relationships and objectives were outside normal conflict review.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Re-scope access at notice", "detail": "Reduce permissions and monitor bulk transfers as soon as severance, resignation, or involuntary-departure decisions are known." }, { "audience": "companies", "title": "Review family-linked ventures", "detail": "Require disclosure of outside companies controlled by employees or close relatives when their products overlap protected work." }, { "audience": "both", "title": "Preserve and reconstruct evidence", "detail": "Issue legal holds quickly and maintain the forensic ability to recover deleted, shredded, or dispersed business records." } ], "sources": [ { "id": "S1", "title": "Indictment: United States v. Yu Qin and Shanshan Du", "publisher": "U.S. District Court, Eastern District of Michigan", "published": "2010-07-22", "retrieved": "2026-08-23", "url": "https://www.justice.gov/sites/default/files/criminal-ccips/legacy/2012/03/15/qinIndict.pdf", "type": "court_record", "note": "Charging document; later verdict and appeal control the outcome statements." }, { "id": "S2", "title": "Eastern District of Michigan Annual Report for 2013", "publisher": "U.S. Attorney's Office, Eastern District of Michigan", "published": "2013-12-31", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-edmi/archived-district-reports/annual-report-2013", "type": "government_release" }, { "id": "S3", "title": "United States v. Shanshan Du and Yu Qin, Opinion Affirming Convictions", "publisher": "U.S. Court of Appeals for the Sixth Circuit", "published": "2014-06-26", "retrieved": "2026-08-23", "url": "https://law.justia.com/cases/federal/appellate-courts/ca6/13-1778/13-1778-2014-06-26.html", "type": "court_record" } ] }, { "slug": "huang-qi-pittsburgh-corning-foamglas", "caseId": "CS-032", "title": "Two businesspeople offered $100,000 for Pittsburgh Corning's FOAMGLAS formula in an FBI sting", "shortTitle": "Ji Li Huang & Xiao Guang Qi — FOAMGLAS", "deck": "After tours, photographs, and a recruitment advertisement failed to secure Pittsburgh Corning's cellular-glass know-how, Ji Li Huang and Xiao Guang Qi agreed to buy the formula and process from a person they thought was a corrupt insider.", "finding": "Both men pleaded guilty to conspiracy to steal trade secrets. The supposed seller was cooperating with the FBI, so the purchase was interrupted; the court nevertheless found intended loss above $7 million.", "executiveSummary": [ { "text": "Pittsburgh Corning made FOAMGLAS cellular-glass insulation for buildings, industrial piping, petrochemical systems, and liquefied-natural-gas tank bases. Ji Li Huang, the owner of a Chinese manufacturing company, and employee Xiao Guang Qi wanted the protected formula and production process to open a competing foam-glass plant in China.", "sourceIds": [ "S1", "S2" ] }, { "text": "The pair first pursued access around the Sedalia, Missouri, plant and later advertised for technical talent with Pittsburgh Corning experience. An FBI cooperating source answered. Huang and Qi agreed to pay $100,000 for purportedly stolen documents, arrived with money, and were arrested before receiving genuine secrets. Both pleaded guilty; Huang received 18 months and a $250,000 fine, while Qi received time served and a $20,000 fine.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "The competitive plan began with plant-level observation", "paragraphs": [ { "text": "The complaint described efforts to learn the Sedalia process through visits, photography, and physical proximity to the plant. When direct observation did not yield the protected recipe, the acquisition strategy shifted toward recruiting someone who could supply the missing formula and engineering documents.", "sourceIds": [ "S1" ] } ] }, { "heading": "A newspaper advertisement found the FBI", "paragraphs": [ { "text": "An advertisement sought technical talent with Pittsburgh Corning experience to lead an Asian foam-glass project. A cooperating source responded and claimed access to stolen internal documents. During meetings, the parties negotiated a $100,000 price, an initial payment, and possible consulting trips to China.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The theft was attempted, not completed", "paragraphs": [ { "text": "Huang and Qi arrived at the final meeting with money and were shown documents marked secret and confidential. Agents arrested them before authentic trade secrets changed hands. Their guilty pleas established the conspiracy and intended competitive use, while the sting limits the harm claim: this was a prevented purchase, not proof that the FOAMGLAS recipe reached a factory in China.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/foam-glass.jpg", "alt": "Close photograph of a porous dark gray cellular foam-glass block", "caption": "Foam glass is a rigid cellular insulation material whose performance depends on protected formulation and manufacturing controls. This is an independent contextual sample, not Pittsburgh Corning product evidence.", "credit": "FK1954 / Wikimedia Commons", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Foamglas.JPG", "license": "Public domain", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "Both defendants pleaded guilty in January 2013 to conspiracy to steal trade secrets. Huang received 18 months and a $250,000 fine; Qi received time served and a $20,000 fine.", "statusDate": "2013-01-25", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "none_established", "stateNexusSummary": "The admitted objective was a competing plant in China for private commercial profit; the cited record does not establish PRC government direction or support.", "featured": true, "sector": { "slug": "energy-and-advanced-manufacturing", "label": "Energy & advanced manufacturing" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "China" ], "period": "2012–2013", "accessVectors": [ "Facility visits", "Technical recruitment advertisement", "Purported insider sale" ], "methods": [ "Plant photography", "Employee solicitation", "Cash purchase negotiation", "Planned consulting" ], "assets": [ "FOAMGLAS formula", "Cellular-glass manufacturing process", "Equipment drawings" ], "actors": [ { "name": "Ji Li Huang", "role": "Owner of Ningbo Oriental Crafts and organizer of the purchase", "outcome": "Pleaded guilty; 18 months and $250,000 fine" }, { "name": "Xiao Guang Qi", "role": "Huang's employee and conspiracy participant", "outcome": "Pleaded guilty; time served and $20,000 fine" }, { "name": "FBI cooperating source", "role": "Purported insider seller who enabled the sting" } ], "originators": [ { "name": "Pittsburgh Corning Corporation", "role": "Developer and owner of the FOAMGLAS formula and process" } ], "transferChain": [ { "stage": "relationship", "label": "Competing-plant objective", "detail": "Huang and Qi sought Pittsburgh Corning know-how to establish foam-glass production in China.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Visits and recruiting", "detail": "They used physical observation and a technical-talent advertisement to seek plant-specific knowledge.", "sourceIds": [ "S1", "S2" ] }, { "stage": "acquisition", "label": "$100,000 purchase negotiated", "detail": "The pair agreed to buy formula and process documents from a person they believed was an insider.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Transfer intercepted", "detail": "They brought payment to a Kansas City meeting, but the FBI arrested them before genuine secrets moved.", "sourceIds": [ "S1", "S2" ] }, { "stage": "use", "label": "China factory planned", "detail": "The admitted plan was to use the information to open a plant competing with Pittsburgh Corning.", "sourceIds": [ "S2" ] }, { "stage": "consequence", "label": "Plea and intended-loss finding", "detail": "Both pleaded guilty, and the court held them accountable for intended loss exceeding $7 million.", "sourceIds": [ "S2" ] } ], "timeline": [ { "date": "2012-07-22", "label": "Recruiting advertisement appears", "detail": "An advertisement sought Pittsburgh Corning experience for an Asian foam-glass project.", "sourceIds": [ "S2" ] }, { "date": "2012-09-02", "label": "Cash meeting and arrests", "detail": "Huang and Qi brought money to obtain purported trade secrets and were arrested by the FBI.", "sourceIds": [ "S1", "S2" ] }, { "date": "2013-01-25", "label": "Pleas and sentences", "detail": "Both admitted the conspiracy and received prison or time-served sentences plus fines.", "sourceIds": [ "S2" ] } ], "established": [ { "text": "Huang and Qi admitted agreeing to buy Pittsburgh Corning trade secrets for a competing plant in China.", "sourceIds": [ "S2" ] }, { "text": "The FBI sting prevented genuine formula and process documents from being transferred.", "sourceIds": [ "S1", "S2" ] } ], "uncertainties": [ { "text": "Because the source was cooperating with law enforcement, the record does not establish that authentic FOAMGLAS secrets reached the defendants or a China-based factory.", "sourceIds": [ "S1", "S2" ] } ], "response": [ { "text": "Both defendants accepted responsibility through guilty pleas; their sentences were imposed the same day.", "sourceIds": [ "S2" ] } ], "harm": [ { "text": "The court found intended loss above $7 million based on the company's investment in developing and protecting the information; actual transfer was prevented.", "sourceIds": [ "S2" ], "qualifier": "court_found" } ], "leadershipGaps": [ { "title": "Observation escalated into recruiting", "detail": "When tours and photography failed, the effort shifted toward finding someone with deeper plant knowledge and document access.", "hindsight": true }, { "title": "Process knowledge was the real product", "detail": "The target combined formula, equipment drawings, manufacturing sequence, and consulting—not a single portable object.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Brief tour and plant staff", "detail": "Define photography, questioning, escort, and escalation rules for facilities containing protected process knowledge." }, { "audience": "companies", "title": "Monitor targeted recruitment", "detail": "Watch for advertisements and outreach that seek named-plant experience or unusually specific proprietary process skills." }, { "audience": "both", "title": "Use controlled law-enforcement liaison", "detail": "When a suspected buyer solicits employees, preserve communications and coordinate safely rather than improvising a confrontation." } ], "sources": [ { "id": "S1", "title": "Criminal Complaint: United States v. Ji Li Huang and Xiao Guang Qi", "publisher": "U.S. District Court, Western District of Missouri", "published": "2012-09-04", "retrieved": "2026-08-23", "url": "https://www.justice.gov/archive/usao/mow/news2012/huang_complaint.pdf", "type": "court_record", "note": "Charging account; later guilty pleas establish the conspiracy." }, { "id": "S2", "title": "Chinese Business Owner and Employee Plead Guilty and Are Sentenced for Stealing Trade Secrets", "publisher": "U.S. Attorney's Office, Western District of Missouri", "published": "2013-01-25", "retrieved": "2026-08-23", "url": "https://www.justice.gov/usao-wdmo/pr/chinese-business-owner-employee-plead-guilty-sentenced-stealing-trade-secrets-sedalia", "type": "government_release" } ] }, { "slug": "xtal-asml-brion-source-code", "caseId": "CS-036", "title": "Former ASML staff moved Brion source code into a startup building a competing chip-design product", "shortTitle": "XTAL — ASML Brion", "deck": "A Silicon Valley jury found that XTAL misappropriated computational-lithography source code and induced former ASML employees to breach their duties, allowing the startup to avoid years of research expense.", "finding": "The civil judgment awarded ASML $845 million and an injunction, though XTAL's bankruptcy made the award uncollectable. ASML explicitly said it found no evidence of direct PRC government involvement.", "executiveSummary": [ { "text": "In 2015, former employees of Brion, ASML's California software subsidiary, moved source code and intellectual property related to Process Window Enhancement into work for XTAL. The technology helps chipmakers improve patterns produced through computational lithography; ASML said the affected business was separate from its main lithography-system business and represented less than one percent of annual revenue.", "sourceIds": [ "S1", "S2", "S3" ] }, { "text": "A Santa Clara County jury found XTAL liable for trade-secret misappropriation and for inducing and aiding employee breaches, and found its conduct malicious. The final judgment awarded $845 million and imposed an injunction, with avoided R&D costs driving the award. XTAL went bankrupt, making the judgment uncollectable; ASML also stated that it found no evidence of direct Chinese government involvement and rejected broader speculation.", "sourceIds": [ "S1", "S2" ] } ], "narrative": [ { "heading": "The asset was software around the machine", "paragraphs": [ { "text": "ASML is best known for lithography hardware, but this case concerned Brion software used to enhance semiconductor process windows. Source code embodied research, algorithms, and implementation decisions that a competitor could reuse without repeating ASML's development path.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "A startup assembled people and code together", "paragraphs": [ { "text": "Former employees brought both domain knowledge and protected material into XTAL. The jury found that XTAL induced breaches of contract and fiduciary duty and misappropriated trade secrets while attempting to build a competing product for an existing ASML customer in South Korea, which had also invested in the startup.", "sourceIds": [ "S1", "S2" ] } ] }, { "heading": "The judgment was large, but the company stated its limits", "paragraphs": [ { "text": "The $845 million final judgment principally reflected R&D expense XTAL avoided, not an equal amount of sales lost by ASML. ASML said the customer deal was thwarted, sustained actual damage was limited, and bankruptcy made the award uncollectable. It also said evidence supported self-enrichment, not a government-directed Chinese conspiracy.", "sourceIds": [ "S1", "S2" ] } ] } ], "media": [ { "src": "/media/cases/asml-lens.jpg", "alt": "Two people hold a large precision lens formerly used in ASML chipmaking equipment", "caption": "An older ASML lithography lens illustrates the precision ecosystem around chip patterning. The XTAL case concerned Brion computational-lithography software, not this lens or ASML's core machine designs.", "credit": "The Next Web / Wikimedia Commons", "sourceUrl": "https://commons.wikimedia.org/wiki/File:Lens_from_ASML.jpg", "license": "Creative Commons Attribution-ShareAlike 2.0", "licenseUrl": "https://creativecommons.org/licenses/by-sa/2.0/", "kind": "technology" } ], "status": "adjudicated", "legalOutcome": "A civil jury found XTAL liable on all pleaded counts and malicious in November 2018. The court entered an $845 million final judgment and injunction on May 3, 2019; XTAL's bankruptcy made the monetary judgment uncollectable.", "statusDate": "2019-05-03", "lastReviewed": "2026-08-23", "nextReview": "2027-08-23", "stateNexus": "none_established", "stateNexusSummary": "XTAL had funding from Chinese and South Korean entities, but ASML said it found no evidence of direct PRC government involvement and attributed the objective to self-enrichment.", "featured": true, "sector": { "slug": "ai-semiconductors-and-telecommunications", "label": "AI, semiconductors & telecommunications" }, "jurisdictions": [ "United States" ], "countries": [ "United States", "Netherlands", "China", "South Korea" ], "period": "2015–2019", "accessVectors": [ "Competitor recruitment", "Former-employee access", "Startup funding" ], "methods": [ "Source-code removal", "Employee-duty breaches", "Competing-product development" ], "assets": [ "Process Window Enhancement source code", "Computational-lithography IP", "Research and development knowledge" ], "actors": [ { "name": "XTAL, Inc.", "role": "Silicon Valley startup found liable for misappropriation", "outcome": "Civil judgment and injunction; entered bankruptcy" }, { "name": "Former ASML and Brion employees", "role": "Personnel found to have moved protected source code and breached duties" } ], "originators": [ { "name": "ASML", "role": "Parent company and plaintiff" }, { "name": "Brion", "role": "ASML software subsidiary that developed the affected technology" } ], "transferChain": [ { "stage": "relationship", "label": "Former staff joined a startup", "detail": "XTAL recruited employees with direct knowledge of Brion's computational-lithography software.", "sourceIds": [ "S1", "S2" ] }, { "stage": "access", "label": "Source code and technical IP", "detail": "The employees had access to protected Process Window Enhancement materials.", "sourceIds": [ "S1" ] }, { "stage": "acquisition", "label": "Code misappropriated", "detail": "The jury found that source code and other Brion IP entered XTAL's possession and development work.", "sourceIds": [ "S1", "S2" ] }, { "stage": "movement", "label": "Employer-to-startup transfer", "detail": "People and files crossed from Brion into XTAL during 2015.", "sourceIds": [ "S1" ] }, { "stage": "use", "label": "Competing product built", "detail": "XTAL used the protected material to avoid development costs and pursue an existing ASML customer.", "sourceIds": [ "S1", "S2" ] }, { "stage": "consequence", "label": "Judgment, injunction, bankruptcy", "detail": "ASML won $845 million and strong injunctive relief, but the bankrupt defendant could not pay the award.", "sourceIds": [ "S2", "S3" ] } ], "timeline": [ { "date": "2015", "label": "Source code moves", "detail": "Former Brion employees misappropriated PWE source code and IP for XTAL.", "sourceIds": [ "S1" ] }, { "date": "2018-11-28", "label": "Jury verdict", "detail": "The jury found XTAL liable on all counts and found the conduct malicious.", "sourceIds": [ "S1", "S2" ] }, { "date": "2019-05-03", "label": "Final judgment entered", "detail": "The court awarded $845 million and issued an injunction after bankruptcy proceedings returned the case to trial court.", "sourceIds": [ "S2", "S3" ] } ], "established": [ { "text": "A civil jury found XTAL liable for trade-secret misappropriation and employee-related breaches involving Brion source code and IP.", "sourceIds": [ "S1", "S2" ] }, { "text": "The final judgment awarded $845 million and imposed an injunction, while XTAL's bankruptcy made the award uncollectable.", "sourceIds": [ "S2" ] } ], "uncertainties": [ { "text": "ASML expressly stated that it found no evidence of direct Chinese government involvement and that broad government-directed conspiracy claims were speculative.", "sourceIds": [ "S1" ] } ], "response": [ { "text": "ASML publicly corrected what it viewed as exaggerated reporting, stressing that the affected business was small, the customer loss was prevented, and the evidence pointed to private enrichment rather than state direction.", "sourceIds": [ "S1" ] } ], "harm": [ { "text": "The $845 million judgment primarily measured research and development costs XTAL avoided; ASML said actual sustained commercial damage was limited and the award was uncollectable.", "sourceIds": [ "S1", "S2" ], "qualifier": "court_found" } ], "leadershipGaps": [ { "title": "People and code moved as one package", "detail": "A startup gained value by combining former employees' tacit expertise with the exact source code that accelerated implementation.", "hindsight": true }, { "title": "A non-core unit still held crown jewels", "detail": "The affected business was less than one percent of revenue, yet its software embodied expensive and competitively useful R&D.", "hindsight": true } ], "actions": [ { "audience": "companies", "title": "Fingerprint critical source", "detail": "Use repository controls and code-similarity monitoring to identify proprietary implementations appearing in outside products." }, { "audience": "companies", "title": "Watch coordinated startup moves", "detail": "Review clusters of departures into a newly funded competitor, especially when roles collectively span a full product stack." }, { "audience": "both", "title": "State damages precisely", "detail": "Separate avoided R&D, actual lost sales, punitive awards, collectible value, and unproven strategic harm in public claims." } ], "sources": [ { "id": "S1", "title": "Statement by ASML's Board of Management in Light of the XTAL Court Case", "publisher": "ASML", "published": "2019-04-17", "retrieved": "2026-08-23", "url": "https://www.asml.com/en/news/press-releases/2019/statement-by-asmls-board-of-management-in-light-of-the-xtal-court-case", "type": "company_statement" }, { "id": "S2", "title": "U.S. Court Issues Final Judgment in Favor of ASML Against XTAL", "publisher": "ASML", "published": "2019-05-04", "retrieved": "2026-08-23", "url": "https://www.asml.com/en/news/press-releases/2019/us-court-issues-final-judgment-in-favor-of-asml-against-xtal", "type": "company_statement" }, { "id": "S3", "title": "Judgment in ASML US, Inc. v. XTAL, Inc.", "publisher": "Superior Court of California, County of Santa Clara", "published": "2019-05-03", "retrieved": "2026-08-23", "url": "https://www.bartkopavia.com/a/web/84aXnwG7EAmfaDhLEJUtwa/asml-v-xtal-judgment-may-3-2019.pdf", "type": "court_record", "note": "Court judgment hosted by counsel for ASML." } ] } ] }