The United States has, for the first time, used trade-secret sanctions against China's private venture ecosystem, blacklisting five companies it says helped a former Google employee steal supercomputing secrets. The measures, attributed to the State Department, name the early-stage incubator MiraclePlus and the startup Shanghai Zhisuan, and mark a shift from targeting Chinese state firms to targeting the privately funded network behind the country's AI startups. Beijing said it was preparing "necessary measures" in response.
The sanctions stem from the case of Linwei Ding, a former Google engineer who, prosecutors say, stole more than 2,000 pages of the company's internal data on its TPU and GPU systems. Ding is reported to have pitched MiraclePlus and other investors on replicating Google's supercomputing infrastructure to help China use scarce chips more efficiently under US export controls. He was sentenced to 12 months minus one day in prison, and the Department of Justice is appealing a ruling that dismissed seven economic-espionage charges against him.
The Treasury is said to have frozen assets and restricted transactions by US persons with the named entities. The move does not target MiraclePlus founder Lu Qi personally, but reporting warns that portfolio companies such as the robotics firm AgiBot and the inference provider SiliconFlow could face compliance risk if the incubator's stakes cross the Treasury's 50% threshold for an automatic freeze. These details come from a single aggregated report and could not be independently confirmed here; the figures, names and corporate relationships should be read as that report's account.
Whatever its precise contours, the move fits a fast-escalating pattern. For four years the chokepoint in US-China technology policy ran one way, with Washington restricting the chips and tools that could flow into China. Beijing has been building the mirror image. This week Chinese regulators detailed a proposal, reported by Digitimes, to extend export controls across foundation models, AI agents, chip-design intellectual property, memory technologies and large-scale computing clusters, with specific technical thresholds for each. AI Daily covered the draft's outline on 18 October; the new detail is how far up the stack, from model weights to design IP, it reaches.
Sanctioning investors rather than exporters is a notable turn, because venture capital is where capability is funded before it exists. By aiming at an incubator and a startup instead of a manufacturer or a state champion, Washington is signaling that the financing layer of China's AI industry is now inside the perimeter of economic-security enforcement. That is close to the dynamic the political scientists Henry Farrell and Abraham Newman describe in a new Foreign Affairs essay: as each side converts ordinary economic ties into weapons, the definition of a security threat keeps widening, and routine investment starts to look like a front line.
The open questions are about reach and retaliation. It is not clear how many portfolio companies the 50% rule will ensnare, whether the Justice Department's appeal will revive the dismissed espionage charges, or what form Beijing's promised measures will take. China has recently shown it will answer perceived coercion asymmetrically, through rare-earth licensing and antitrust probes rather than like-for-like bans. The first sanctions aimed at its private AI investors give it a fresh reason to do so.