The arrest of Linwei Ding, a Google engineer, by a federal grand jury in Newark, California, has brought to light allegations of trade secret theft related to Google’s AI chip software and hardware. Deputy Attorney General Lisa Monaco stated that Ding pilfered over 500 confidential files containing AI trade secrets while surreptitiously working for Chinese companies keen on gaining an advantage in the AI technology sector.
Ding’s activities reportedly focused on Google’s tensor processing unit (TPU) chips, which play a crucial role in powering the company’s AI workloads. These chips, along with Nvidia GPUs, are instrumental in training and running AI models like Gemini, with access to them being provided through partner platforms such as Hugging Face.
The stolen data comprises software designs for both v4 and v6 TPU chips, hardware and software specifications for GPUs utilized in Google’s data centers, and designs for the machine learning workloads within those data centers. In light of the escalating competition surrounding AI technology and US government initiatives to restrict China’s access to AI-focused chips, some Chinese entities have sought the services of local chip manufacturers to drive their AI platforms.
Amid concerns raised by intelligence chiefs from the Five Eyes alliance nations about potential IP theft by Chinese companies in the fields of AI, quantum computing, and robotics, the indictment against Ding alleges that he transferred the stolen files to a personal Google Cloud account over the course of a year. Utilizing techniques like copying data from Google source files to the Apple Notes application on his Google-issued MacBook and converting them into PDFs, Ding sought to evade detection by Google’s data loss prevention systems.
The government asserts that Ding’s illicit activities extended to accepting an offer to serve as Chief Technology Officer for a Chinese machine learning company named Rongshu, raising funds for the company during a five-month stint in China, and subsequently establishing and heading a machine learning startup called Zhisuan – all while he was still employed at Google. His resignation from Google in December 2023, coupled with suspicious behaviors like faking his presence at Google’s US office and booking a one-way ticket to Beijing, have led to charges of four counts of theft of trade secrets. If convicted, Ding could face up to ten years in prison and fines of $250,000 for each count.
The case serves as a stark reminder of the stringent measures in place to safeguard valuable intellectual property in the rapidly evolving landscape of AI technology.