Threat actor · all actors
Linwei 'Leon' Ding (Google AI / TPU architecture)INS-DING-GOOGLE-2024 insider
🇺🇸 US
aka Leon Ding, Linwei Ding
Last updated:
0attributed CVEs
0ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
Former Google software engineer convicted in January 2026 on seven counts of economic espionage and seven counts of theft of trade secrets after siphoning over 2,000 pages of confidential AI infrastructure designs (TPU/GPU systems, supercomputer orchestration) while secretly affiliating with two PRC technology companies.
How we know this
- Data origin
- Curated overlay Insider-threat entry synthesised from public reporting and court filings — not a MITRE-tracked intrusion set.
- Techniques
- No ATT&CK techniques mapped.
- Named victims
- 1 extracted from reporting.
Thin data: No ATT&CK techniques are mapped yet — the behavioural profile is empty. Only one named victim is on file.
See how actor data is built for the full pipeline.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
No techniques attributed.
Co-occurring actors
None.