Espionage and AI: Former Google Engineer Sentenced to One Year in Prison for Theft of Trade Secrets

A theft, not a betrayal. This is where, after two and a half years of proceedings, the most scrutinized case of Silicon Valley's technological cold war lands. On September 1, 2026, in San Francisco, Federal Judge Vince Chhabria sentenced former Google engineer Linwei Ding to twelve months in prison minus one day for the theft of industrial secrets related to artificial intelligence. A jury had found him guilty in January on fourteen counts: seven for this theft and seven others for economic espionage benefiting Beijing.

The second block collapsed in the middle of summer, with the judge deeming the evidence too thin. Only an unscrupulous employee remains who copied 1,255 documents before resigning. Not the infiltrator that Washington hoped to take down. At Google, this is not even the first time this year that an in-house engineer has found themselves in an embarrassing case of diverted internal information. The evidence of a link to Beijing remains the real obstacle.

Key points of this article:

• Linwei Ding, former Google engineer, was sentenced on September 1, 2026, to one year in prison minus one day for the theft of AI secrets, far from the 70 months sought by the prosecution.
• The judge dismissed the seven counts of economic espionage in favor of China due to lack of evidence of a direct link to Beijing but upheld the seven counts of theft of industrial secrets.
• The case recalls that of Fujian Jinhua, acquitted in 2024 in a similar case: the American justice system struggles to prove state-sponsored espionage, even when the theft is established.

Twelve months in prison for 14,000 pages of Google secrets.

Chhabria did not hold back in his verbal assessment, even if the sentence itself remains measured. "This was a systematic and brazen effort to steal Google's property and profit from it," he stated at the hearing on September 1, before adding that he had "a hard time imagining" not sending Ding to prison for what he had done.

Twelve months minus one day of detention, two years of probation, over $198,000 in restitution to Google, and a $2,500 fine. That is the bill. Ding must report to prison within 90 days.

The prosecution sought 70 months in prison. The defense proposed three months of house arrest to stay with his eight-year-old son. Sixty-seven months separate the two requests. Even the judge struggled to find a middle ground: the official recommendations, calculated based solely on the remaining counts of theft after the summer, capped at six months. A range he himself deemed too lenient for a "systematic effort." Ding's lawyer has already announced plans to appeal.

Why economic espionage did not hold up.

A jury had voted on all fourteen counts as a block in January. Seven months later, on August 20, Chhabria revisited half of the verdict in a partial acquittal order. Chhabria found the evidence too thin. It was necessary to establish, at the time of the illegal transfers, that Ding already knew his actions would benefit Beijing, under the classic standard of reasonable doubt.

The theft of documents dates back to May 2022 and April 2023. The evidence of a link to the Chinese state comes from elsewhere, and especially after the fact. Ding founded his company Zhisuan in China at the end of 2023, and an intern was tasked with discreetly stealing his Google badge while he was courting investors in Beijing. Too late to prove an intention that, by definition, had to already exist at the time of the offense. Chhabria did not deny the theft. He denied the conspiracy. The seven counts of theft of secrets still stand, and it is solely on these that the sentence of September 1 was calculated.

TPU and SmartNIC, the real loss for Google.

Reducing the case to stolen PDFs would be a misreading. The 1,255 documents, approximately 14,000 pages, describe the architecture of Google's TPUs, these custom-designed artificial intelligence chips that the company develops in-house to reduce reliance on Nvidia GPUs.

It also includes the schematics of a proprietary SmartNIC, a network card capable of enabling thousands of chips to communicate at full speed, functioning as a single supercomputer, along with the software that orchestrates the entire setup. This is the complete manual of an industrial advantage that Google has spent a decade building, not just some technical notice. Ding transferred the bulk of the lot between May 2022 and April 2023, while he was still employed. A final batch was downloaded in December 2023, on a personal Google Cloud account. Two weeks later, he resigned.

Fujian Jinhua, the precedent looming over Silicon Valley.

Ding did not invent anything. Long before him, during the height of the China Initiative, Washington had already attempted the same with Fujian Jinhua, a Chinese semiconductor manufacturer accused of conspiring with Taiwanese UMC to steal memory chip manufacturing secrets from American Micron. This Justice Department program, launched under the first Trump administration to track Chinese economic espionage, specifically targeted this kind of case. UMC pleaded guilty and paid a $60 million fine. Fujian Jinhua went all the way to trial.

Verdict at the end of February 2024: total acquittal, including on the theft itself. Judge Maxine Chesney ruled that the prosecution failed to prove that the company, despite being state-owned, had diverted Micron's DRAM schematics. The Justice Department had already learned its lesson two years earlier by dismantling the China Initiative in February 2022. Its head at the time admitted that it fostered a climate of suspicion, and that prosecutions against academic researchers often resulted in dismissals rather than convictions. Ding is the first major test of the aftermath. Deterrence takes a hit. An engineer tempted by a Chinese startup now knows that a one-way trip will cost him, at worst, a year in prison, not the life sentence that the Justice Department has been waving since 2018.

Code circulates faster than the Penal Code. Ding took less than a year to transfer 14,000 pages; the American justice system took two and a half years to decide that it could only punish half of the act. This gap is not unique to artificial intelligence, but it takes on a particular magnitude here. The same chips and data centers that Google fiercely protects are also those that China seeks to bypass by betting on its own GPUs. Hashing and inference now draw from the same power outlet. The race for gigawatts in AI data centers has already caught up with Bitcoin miners, before catching up with federal courts. An engineer can steal a plan. A state, however, still needs to convince a judge that it commissioned it. Between the two, a whole trial.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.