Former IBM developer Xu Jiaqiang pleads guilty to theft of source code with intent to give it to China; sentencing scheduled for October 13
Jeff John Roberts / Fortune :
Context & Ripple Effects
Xu Jiaqiang's guilty plea is an early entry in what the related coverage shows has become a recurring DOJ playbook: insiders at major US tech firms caught moving proprietary code toward China. The arc runs through Xiaolang Zhang, whose Apple car-project theft ended in a guilty plea and then a 120-day prison sentence and roughly $147K fine, and Linwei Ding, whom the DOJ charged in 2024 before a San Francisco jury returned a guilty verdict on AI chip trade-secret theft.
What makes the Xu case worth tracking is that it predates both: the source-code-theft-with-China-intent template was already in place years before the Apple and Google matters, and his October 13 sentencing is the next data point in how severely these insider transfers get punished.
First-order effects
- Xu faces an October 13 sentencing where the judge sets the penalty for handing IBM source code to China — a benchmark the later Zhang and Ding outcomes now sit alongside.
- IBM must treat the compromise of its source code as a live exposure, since a guilty plea confirms the code left with intent to reach Chinese hands.
Second-order effects
- Employers like Apple and Google, facing the same fact pattern in the Zhang and Ding cases, are pushed toward tighter insider-threat monitoring of engineer access to proprietary code and model assets.
- Prosecutors gain a proven template — charge the departing engineer, secure a plea or jury verdict, publicize it — which they reused when charging Ding in 2024.
Third-order effects
- If the pattern holds, insider IP transfer to China becomes a standing enforcement priority rather than episodic prosecution, with each sentencing outcome feeding the deterrence calculus for engineers weighing side deals with Chinese firms.
- US tech companies structurally absorb the cost by hardening code access controls and exit procedures, treating trusted-insider leakage as a persistent operational risk rather than a rare event.
The trend: US prosecution of engineers stealing proprietary code for China is consolidating into a repeatable enforcement pattern, running from Xu's IBM case through Apple's Zhang to Google's Ding.