Judge keeps the theft, drops the state: the Ding ruling narrows how insider cases get charged

A federal judge has thrown out seven economic espionage convictions against former Google engineer Linwei Ding while leaving seven trade secret theft convictions standing, finding that prosecutors proved what he took but not that he was working for China ^[3]. For anyone who owns insider risk at a company with valuable model or datacenter designs, the ruling is a map of which half of the standard narrative survives contact with a courtroom.

Judge Vince Chhabria found the evidence sufficient to show that Ding took the material, and insufficient to show he intended or knew his conduct would benefit the Chinese government ^[4]. A jury had convicted him on all 14 counts in January after an 11-day trial ^[5]. The statutory difference is narrow and total: economic espionage requires a foreign state connection, theft of trade secrets does not ^[6]. According to the account of the ruling, Ding had been accused of connections to Chinese technology companies rather than to the state itself, and that is the gap the decision turns on ^[7]. A commercial recipient in China is not the government of China ^[8].

What was taken is not contested. Prosecutors said Ding removed thousands of pages of confidential material on Google's AI infrastructure, including hardware blueprints and the software platforms the company uses to train large language models in its datacenters ^[1]. That is the tensor processing unit stack, the part of Google that is genuinely difficult to replicate and the reason the case drew attention ^[2].

The arithmetic of exposure explains why the ruling matters to Ding and not only to prosecutors. The espionage counts carried up to 15 years each and the theft counts up to 10 ^[9], so the vacated counts represented a nominal maximum of 105 years against 70 remaining ^[18], and the decision removes the heavier half of his exposure entirely ^[10]. Sentencing is set for 1 September, with up to 10 years on each of seven counts, and the practical outcome will turn on how the guidelines treat the value of what was taken and whether the court finds he intended to use it commercially ^[11].

The procedural lesson is the durable one. Intent to benefit a foreign government is usually proved through communications, payments, or a documented relationship, and here the jury convicted without the judge being satisfied that any of that had been established ^[19]. Charging the state connection is attractive because it converts a commercial dispute into a national security matter, and the Justice Department has been building that case in public ^[12]. The White House has accused China of industrial-scale model distillation and committed to sharing intelligence with OpenAI, Anthropic, and Google, an unusual arrangement between a government and a set of private companies ^[13]. Enforcement has been busiest at the hardware end, where Taiwanese prosecutors have detained an Nvidia employee in a chip-smuggling investigation and Super Micro's co-founder has been charged over server exports to China ^[14].

None of this changes Google's position. The company detected the exfiltration, reported it, and testified, and the material is gone regardless of which statute applies ^[15]. Detection and documentation are what the company controlled; the foreign-state element was never in its hands.

Watch whether the Justice Department appeals. Prosecutors can appeal a post-verdict acquittal of this kind, but the standard is demanding, because the judge is finding that no reasonable jury could have reached that conclusion on the evidence presented ^[16]. Ding's lawyer welcomed the ruling; the department and Google did not immediately comment, and neither has said whether an appeal is planned ^[17]. Watch, too, whether future indictments against engineers lead with the trade secret counts and treat the state connection as an add-on rather than the frame.