Cybercrime cases
United States v. Ashtor
Emanuel Ashtor, a U.S. citizen and co-owner of Vali Tech Inc., was charged in the Southern District of Florida with conspiracy to damage protected computers, conspiracy to commit wire fraud and mail fraud, conspiracy to commit money laundering, and conspiracy to transfer false identification documents, based on allegations that he facilitated a scheme in which North Korean IT workers obtained remote employment at U.S. companies under stolen identities, receiving and hosting company-issued laptops at his residences and installing unauthorized remote-access software to enable the overseas workers to perform the contracted work. Co-defendant Erick Ntekereze Prince pled guilty to conspiracy to commit wire fraud and mail fraud and was sentenced to 18 months imprisonment, three years of supervised release, and a $100 special assessment, with a forfeiture money judgment of $89,000 also entered against him. Ashtor's case remains active, with a calendar call scheduled for December 9, 2026, and a jury trial set for December 14, 2026.
Upcoming events- NOV4DeadlineRelease Of Transcript Restriction Prince Sentencing4:00 PM EST · S.D. Fla.
- DEC9HearingCalendar Call - Ashtor9:30 AM EST · S.D. Fla.
- DEC14HearingJury Trialtime TBD · S.D. Fla.
Date filed 2025-01-21Last filing date 2026-08-06
United States v. Knoot
3:24-cr-00151 (M.D. Tenn.) — Matthew Isaac Knoot, a Nashville resident, was charged with conspiracy to cause damage to protected computers, conspiracy to commit money laundering, conspiracy to commit wire fraud, aggravated identity theft, and related offenses in the Middle District of Tennessee, stemming from his role as a U.S.-based facilitator who hosted laptops and installed remote desktop software to help a North Korean IT worker fraudulently obtain employment at American companies under a stolen identity. Knoot pled guilty to Count One (conspiracy to cause damage to protected computers) on September 29, 2025, after the court had dismissed Count Six on his motion, and the remaining counts were dismissed on the government's motion following sentencing. At a contested sentencing hearing on May 1, 2026, Knoot was sentenced to 18 months' imprisonment, one year of supervised release, $15,100 in restitution distributed among four victim companies, and a $100 special assessment; he has since appealed his conviction.
26-5455 (6th Cir.) — Matthew Knoot, a Nashville resident, was charged with conspiracy to cause damage to protected computers, conspiracy to commit money laundering, conspiracy to commit wire fraud, intentional damage to a protected computer, aggravated identity theft, and conspiracy to cause the unlawful employment of aliens, based on his role as a U.S.-based facilitator who hosted laptops and installed remote desktop software to help a North Korean IT worker fraudulently obtain employment at American companies under a stolen identity. Knoot pled guilty to Count One (conspiracy to cause damage to protected computers), and the remaining counts were dismissed on the government's motion. He was sentenced to 18 months' imprisonment, one year of supervised release, $15,100 in restitution, and a $100 special assessment, with a self-surrender deadline of June 30, 2026; he has since appealed his conviction.
Date filed 2024-08-07Last filing date 2026-08-31
United States v. Zhenxing Wang
Zhenxing Wang, a New Jersey resident, was charged with conspiracy to commit wire and mail fraud, money laundering conspiracy, conspiracy to commit identity theft, and conspiracy to damage a protected computer, arising from his role as a U.S.-based facilitator for a scheme in which North Korean IT workers used stolen identities to obtain remote employment at more than 100 U.S. companies and funnel the proceeds overseas. Wang pled guilty to Counts One and Two on January 7, 2026. He was sentenced to 92 months imprisonment and three years of supervised release, with a $200 special assessment; Counts Three and Four were dismissed on the government's motion, and Wang must self-surrender by June 9, 2026.
Date filed 2025-06-26Last filing date 2026-06-03
United States v. Kejia "Tony" Wang
Kejia Wang, a/k/a "Tony Wang," a New Jersey resident, was charged in the District of Massachusetts with conspiracy to commit wire and mail fraud, money laundering conspiracy, and conspiracy to commit identity theft for his role in a scheme to place North Korean IT workers in remote jobs at more than 100 U.S. companies using stolen identities, shell companies, and laptop-hosting arrangements that funneled millions of dollars to overseas co-conspirators. Wang pled guilty to all three counts on September 3, 2025, and was sentenced on April 15, 2026, to 108 months imprisonment and three years of supervised release, with $29,236.03 in restitution to Snaplogic, Inc. and a $300 special assessment, along with a forfeiture money judgment of $400,000; he is required to self-surrender to the Bureau of Prisons by July 10, 2026.
Date filed 2025-06-27Last filing date 2026-07-14
United States v. Didenko
CourtListener records (same docket): 1 · 2
Oleksandr Didenko, a Ukrainian national, was indicted in the District of Columbia on charges of conspiracy to commit wire fraud, conspiracy to defraud the United States, aggravated identity theft, and related offenses, stemming from his operation of "UpworkSell," a business that created thousands of fraudulent online accounts and U.S.-based "laptop farms" to help overseas IT workers — including North Koreans — fraudulently obtain remote employment at American companies in violation of U.S. sanctions. Didenko pled guilty to conspiracy to commit wire fraud (Count 1) and aggravated identity theft (Count 4) on November 10, 2025, and was sentenced on February 19, 2026, to 36 months on Count 1 and 24 months on Count 4, to run consecutively, for a total of 60 months imprisonment, followed by 12 months of supervised release on each count to run concurrently, along with $46,547.28 in restitution to Trinity Technology Partners and a $200 special assessment. The court also entered a forfeiture money judgment of $1,420,185.64 against Didenko, and all remaining counts were dismissed on the government's motion.
Date filed 2024-04-29Last filing date 2026-03-18
United States v. Kim Kwang Jin et al.
Four North Korean nationals — Kim Kwang Jin, Kang Tae Bok, Jong Pong Ju, and Chang Nam Il — were charged in the Northern District of Georgia with wire fraud conspiracy and money laundering conspiracy for allegedly posing as non-North Korean IT workers to infiltrate U.S. and foreign technology companies, steal more than $900,000 in cryptocurrency from victims' smart contracts, and launder the proceeds through virtual currency mixers and exchange accounts opened under fraudulent identities; Kim Kwang Jin faces additional substantive wire fraud counts. The defendant information sheet filed at indictment indicates that Kim Kwang Jin had not yet been arrested at the time of filing and that arrest was anticipated.
Date filed 2025-06-24Last filing date 2025-11-24
United States v. Jong Song Hwa et al.
Fourteen North Korean nationals — Jong Song Hwa, Ri Kyong Sik, Kim Ryu Song, Rim Un Chol, Kim Mu Rim, Cho Chung Pom, Hyon Chol Song, Son Un Chol, Sok Kwang Hyok, Choe Jong Yong, Ko Chung Sok, Kim Ye Won, Jong Kyong Chol, and Jang Chol Myong — were charged in the Eastern District of Missouri with conspiracy to violate the International Emergency Economic Powers Act, conspiracy to commit wire fraud, money laundering conspiracy, and identity theft offenses arising from a scheme in which DPRK IT workers used stolen U.S. identities to fraudulently obtain remote employment at American companies and nonprofits, generating at least $88 million in revenue for North Korea's weapons programs between approximately April 2017 and March 2023. The defendants, associated with two sanctioned DPRK front companies — Yanbian Silverstar in China and Volasys Silverstar in Russia — also extorted some U.S. employers by threatening to publish stolen proprietary data, and laundered proceeds through U.S. money transfer services to banks in China. Eight of the defendants face an additional count of aggravated identity theft for using victims' identifying information during and in relation to the wire fraud conspiracy.
Date filed 2024-12-11Last filing date 2024-12-12
United States v. Moucka
Connor Riley Moucka was charged in the Western District of Washington with conspiracy, computer fraud and abuse, extortion in relation to computer fraud, wire fraud, and aggravated identity theft, arising from an international scheme in which he and co-conspirator John Erin Binns hacked into at least ten organizations' cloud computing environments, stole billions of sensitive customer records, and extorted victims of approximately $2.5 million in bitcoin. Moucka pled guilty to conspiracy, computer fraud and abuse, wire fraud, and aggravated identity theft, and Judge Lauren King accepted the plea and adjudicated him guilty on August 20, 2026. The plea agreement calls for a forfeiture money judgment of at least $495,000, forfeiture of identified property including cryptocurrency, a Rolex watch, diamond jewelry, and numerous electronic devices, and restitution exceeding $9.5 million to victims. Sentencing is scheduled for January 27, 2027.
Upcoming events- JAN27HearingSentencing10:00 AM PST · W.D. Wash.
Date filed 2024-10-10Last filing date 2026-08-26
United States v. Chapman
Christina Chapman, a U.S. national from Arizona, was charged with conspiracy to defraud the United States, conspiracy to commit wire fraud, aggravated identity theft, money laundering conspiracy, and related offenses for operating a "laptop farm" that helped North Korean IT workers fraudulently obtain remote employment at hundreds of U.S. companies — including Fortune 500 firms — by hosting their work laptops, validating stolen American identities, and laundering their wages. Chapman pled guilty to conspiracy to commit wire fraud, aggravated identity theft, and conspiracy to launder monetary instruments, and was sentenced on July 24, 2025 to an aggregate term of 102 months' imprisonment — consisting of concurrent 78-month terms on the wire fraud and money laundering counts plus a consecutive 24-month mandatory term on the aggravated identity theft count — along with a $300 special assessment and an obligation to pay restitution. The court also entered an order of forfeiture covering specific seized funds and a forfeiture money judgment, and the remaining counts were dismissed on the government's motion.
Date filed 2024-05-08Last filing date 2026-02-06
United States v. Vong
Minh Phuong Ngoc Vong was indicted in the District of Maryland on one count of conspiracy to commit wire fraud, alleged to have posed as a remote software developer to obtain employment at U.S. companies while a co-conspirator in China performed the actual work using Vong's credentials, defrauding at least 13 companies out of more than $970,000 in salary and allowing foreign nationals to access sensitive U.S. government systems. Vong pled guilty to Count One and was sentenced to 15 months imprisonment, three years of supervised release, and a $100 special assessment. The court also entered a preliminary order of forfeiture covering electronics and currency seized from Vong's residence, and ordered restitution for the full amount of victims' losses.
Date filed 2024-05-16Last filing date 2026-01-27
United States v. Travis
CourtListener records (same docket): 1 · 2
Alexander Paul Travis, an active-duty U.S. Army soldier stationed at Fort Gordon, Georgia, was charged in the Southern District of Georgia with wire fraud conspiracy for knowingly allowing his identity to be used by overseas North Korean IT workers to fraudulently obtain remote employment with eight U.S. companies, causing those companies to pay over $193,000 in salary while Travis received at least $51,397 for his participation. Travis pled guilty to Count One and was sentenced to 12 months plus one day in Bureau of Prisons custody, three years of supervised release, a $2,000 fine, and a $100 special assessment, with a self-report deadline of May 18, 2026. A final order of forfeiture was entered against Travis in the amount of $193,265.
Date filed 2025-09-04Last filing date 2026-04-16
United States v. Salazar
CourtListener records (same docket): 1 · 2
Jason Salazar was charged in the Southern District of Georgia with one count of wire fraud conspiracy for knowingly allowing his identity to be used by overseas North Korean IT workers to fraudulently obtain remote employment with at least fourteen U.S. companies, which paid those workers over $409,000 in salary while Salazar received at least $4,500 for his participation. Salazar pled guilty to Count One on November 13, 2025, and was sentenced on March 19, 2026, to three years of probation, a $2,000 fine, and a $100 special assessment. The court also entered a final order of forfeiture of $409,876.30 against him.
Date filed 2025-09-04Last filing date 2026-05-11
United States v. Phagnasay
Audricus Phagnasay was charged in the Southern District of Georgia with wire fraud conspiracy for knowingly allowing his identity to be used by overseas North Korean IT workers who fraudulently obtained remote employment with at least ten U.S. companies, causing those companies to pay over $680,000 in salary to individuals posing as Phagnasay. He pled guilty to Count One and was sentenced to three years of probation, a $2,000 fine, and a $100 special assessment. The court also entered a final order of forfeiture of $681,926 against him.
Date filed 2025-09-04Last filing date 2026-05-26
United States v. Dubranova
Nine defendants — Victoria Eduardovna Dubranova, Valeriy Valeriyovich Zaborovsky, Maksim Nikolaevich Lupin, Mikhail Evgenievich Burlakov, Roman Omelchenko, Olga Denisovna Evstratova, Vitaly Anatolyevich Zubets, Nikita Alexandrovich Petukhov, and Andrei Stanislavovich Abrosimov — were charged in the Central District of California with conspiracy to damage protected computers under 18 U.S.C. § 371, arising from their alleged membership in NoName057(16), a Russia-aligned hacktivist group that conducted coordinated DDoS attacks against government, financial, and critical infrastructure targets worldwide using the group's proprietary DDoSia malware. The court granted an ex parte application to seal the indictment and related documents on August 21, 2025 (entry 44); some subsequent docket activity may not be publicly visible.
Date filed 2025-08-21Last filing date 2025-08-28
United States v. Martino
Angelo Martino, a former ransomware negotiator employed by a cyber-incident response firm, was charged in the Southern District of Florida with conspiracy to interfere with interstate commerce by extortion, based on allegations that he secretly fed confidential client information — including insurance policy limits and negotiating strategies — to ALPHV BlackCat ransomware actors while purporting to negotiate on victims' behalf, and also participated directly in ransomware attacks on multiple companies. Martino pled guilty to the sole count of the information on April 14, 2026, and was sentenced on July 9, 2026, to 70 months imprisonment, three years of supervised release, and a $100 special assessment, with restitution deferred pending a hearing scheduled for September 17, 2026. A preliminary order of forfeiture was entered covering seized cryptocurrency holdings across multiple wallets as well as two real properties, two vehicles, a trailer, and a vessel.
Date filed 2026-02-25Last filing date 2026-09-22
United States v. Volkov
Aleksei Olegovich Volkov, a Russian national, pled guilty to conspiracy to commit computer fraud and conspiracy to commit money laundering in the Southern District of Indiana, arising from his role as an initial access broker who sold stolen network credentials to the Yanluowang ransomware group, enabling attacks on U.S. businesses that demanded at least $24 million in ransom. He was sentenced to 47 months imprisonment and two years of supervised release, and was ordered to pay $9,167,198.19 in restitution to six identified victims, along with a $200 special assessment; the court also entered a forfeiture money judgment of $1,552,023.00 and ordered forfeiture of an ASUS laptop, an Apple iPhone 13 Pro, and a USB flash drive.
Date filed 2025-10-30Last filing date 2026-05-08
United States v. Zolotarjovs
Deniss Zolotarjovs, a Latvian national operating under the alias "Sforza\_cesarini," was indicted in the Southern District of Ohio on charges of money laundering conspiracy, wire fraud conspiracy, and Hobbs Act extortion conspiracy for his alleged role in the Karakurt ransomware group, which hacked into victim companies' computer systems, encrypted their data, and extorted ransom payments in cryptocurrency from approximately 2021 through 2023. Zolotarjovs pled guilty to counts one and two of the indictment, and was sentenced to 102 months in federal custody, three years of supervised release, and a $200 special assessment. The court dismissed count three on the government's motion, and an amended judgment ordered Zolotarjovs to pay $56,551,689.19 in restitution to more than fifty victim companies and entities.
Date filed 2023-11-28Last filing date 2026-05-18
United States v. Zewei
Xu Zewei is charged in the Southern District of Texas with conspiracy to cause damage to and obtain information from protected computers, wire fraud, aggravated identity theft, and related offenses, stemming from alleged computer intrusions conducted between February 2020 and June 2021 in coordination with officers of the Shanghai State Security Bureau and co-conspirator Zhang Yu. Zewei was arrested in Italy in July 2025 at the United States' request and extradited to the United States in April 2026, after which he made his initial appearance, was arraigned, and was ordered detained pending trial. The court designated the case as complex under the Speedy Trial Act, tolling the speedy-trial clock; a status conference is scheduled for November 14, 2026, a pretrial conference for June 17, 2027, and a jury trial for June 21, 2027.
Upcoming events- JUN14DeadlineProposed Voir Dire Zewei 24:00 PM CDT · S.D. Tex.
- JUN17HearingPretrial Conference 22:30 PM CDT · S.D. Tex.
- JUN21HearingJury Trial9:00 AM CDT · S.D. Tex.
Date filed 2023-11-02Last filing date 2026-10-09
United States v. Akhter
CourtListener records (same docket): 1 · 2 · 3
Muneeb Akhter and his brother Sohaib Akhter were charged in the Eastern District of Virginia with conspiracy to commit computer fraud and destroy records, intentional damage to protected computers, theft of government records, aggravated identity theft, and wire fraud, arising from a scheme in which they allegedly deleted approximately 96 federal government databases, stole sensitive IRS and EEOC data, and used stolen credentials to access victims' online accounts after being fired from a government contractor in February 2025; the superseding indictment also charged Sohaib with unlawful firearm possession and witness tampering. Muneeb pled guilty to intentional damage to a protected computer, obtaining information from a computer without authorization, and two counts of wire fraud on April 15, 2026, and the court denied his motion to withdraw that plea on November 4, 2026; sentencing is scheduled for December 16, 2026. Sohaib proceeded to a jury trial pro se beginning May 4, 2026, and the jury was convicted at trial of conspiracy, password trafficking, and unlawful firearm possession but acquitted him of witness tampering; sentencing is scheduled for December 9, 2026.
Upcoming events- OCT28HearingMotion Hearing Plea - Withdraw Muneeb1:00 PM EDT · E.D. Va.
- NOV23DeadlinePublic Release Akhter 5 5 Transcript4:00 PM EST · E.D. Va.
- DEC9HearingSentencing - Sohaib Akhter10:00 AM EST · E.D. Va.
- DEC16HearingSentencing - Muneeb Akhter11:00 AM EST · E.D. Va.
Date filed 2025-11-13Last filing date 2026-11-04
United States v. Gholinejad
4:24-cr-00016 — CourtListener records (same docket): 1 · 2
4:24-cr-00016 (E.D.N.C.) — Sina Gholinejad, an Iranian national, pled guilty to intentional damage to protected computers and conspiracy to commit wire fraud in connection with a multi-year ransomware scheme in which he and co-conspirators deployed the "Robbinhood" ransomware against city governments, hospitals, and other organizations — including the cities of Baltimore, Greenville (N.C.), and Yonkers — causing tens of millions of dollars in losses. He was sentenced on November 3, 2025, to 72 months' imprisonment and three years of supervised release, and was ordered to pay $14,655,096.24 in restitution to eighteen victims, along with a $200 special assessment; the remaining counts were dismissed. Gholinejad has appealed the judgment and is in federal custody.
25-4607 (4th Cir.) — Sina Gholinejad is appealing his conviction for intentional damage to protected computers and conspiracy to commit wire fraud, to which he pled guilty, after being sentenced to 72 months in prison, three years of supervised release, a $200 special assessment, and $14,655,096.24 in restitution to victims including the City of Baltimore, the City of Greenville, and sixteen other organizations. Briefing in the Fourth Circuit is underway, with the reply brief due June 12, 2026.
Date filed 2024-04-04Last filing date 2026-09-23
United States v. Tymoshchuk
CourtListener records (same docket): 1 · 2 · 3
Artem Aleksandrovych Stryzhak, a Ukrainian national, was charged in the Eastern District of New York with conspiracy to commit computer fraud in connection with the Nefilim ransomware scheme, in which he and co-conspirators gained unauthorized access to corporate networks, exfiltrated data, deployed ransomware, and extorted ransom payments from victims. Stryzhak pled guilty to Count 5 of the superseding indictment on December 19, 2025, and was sentenced on October 27, 2026, to 35 months' imprisonment to run consecutively to his sentence in a related Middle District of Florida case, two years' supervised release to run concurrently with that case's supervised release term, $37,281.75 in restitution, and a $100 special assessment. The court also entered a final order of forfeiture of one Apple MacBook Pro seized in Barcelona, Spain.
Upcoming events- OCT27HearingSentencing - Stryzhak10:30 AM EDT · E.D.N.Y
Date filed 2024-05-07Last filing date 2026-10-27
United States v. Lytvynenko
CourtListener records (same docket): 1 · 2
Oleksii Oleksiyovych Lytvynenko, a Ukrainian national, was charged in the Middle District of Tennessee with conspiracy to violate the Computer Fraud and Abuse Act and conspiracy to commit wire fraud for his role in the Conti ransomware operation, which attacked hundreds of victims worldwide — including government entities and businesses in Tennessee — by encrypting their networks and extorting cryptocurrency ransoms. He pled guilty to Count 2 (conspiracy to commit wire fraud) and was sentenced to 48 months in prison, with credit for time served in Ireland since his arrest there in July 2023, a $100 special assessment, no supervised release, and forfeiture of $25,042; Count 1 was dismissed on the government's motion. A restitution hearing is scheduled for November 16, 2026.
Upcoming events- OCT25DeadlineStatus Report Restitution Lytvynenko4:00 PM CDT · M.D. Tenn.
- NOV16HearingHearing - Restitution Lytvynenko10:00 AM CST · M.D. Tenn.
Date filed 2023-05-22Last filing date 2026-11-02
United States v. Stryzhak
CourtListener records (same docket): 1 · 2
Artem Aleksandrovych Stryzhak was charged in the Eastern District of New York with conspiracy to commit computer fraud and extortion in connection with the Hive ransomware operation, which targeted hospitals, schools, businesses, and government entities worldwide between June 2021 and January 2023. Stryzhak pled guilty to Count 1 of the indictment and was sentenced to 35 months in prison, to run consecutively to the sentence imposed in a related case, followed by two years of supervised release and $37,281.25 in restitution, along with a $100 special assessment. Count 2 was dismissed on the government's motion, and the court entered a final order of forfeiture of one Apple MacBook Pro seized in Barcelona, Spain.
Upcoming events- OCT27HearingSentencing 2time unknown · E.D.N.Y
Date filed 2025-12-09Last filing date 2026-10-27
United States v. Berezhnoy et al.
CourtListener records (same docket): 1 · 2 · 3
Roman Berezhnoy and Egor Nikolaevich Glebov, both Russian nationals, were charged in the District of Maryland with conspiracy to commit computer fraud, conspiracy to commit wire fraud, intentional damage to protected computers, transmitting extortion demands, and wire fraud, arising from their alleged roles as operators of the Phobos/8Base ransomware program that targeted more than 1,000 victims worldwide — including Maryland healthcare providers, school systems, a children's hospital, and a Defense Department contractor — extorting in excess of $16 million in Bitcoin ransom payments beginning as early as May 2019.
Date filed 2023-12-14Last filing date 2025-04-15
United States v. Gallyamov
The United States filed this civil forfeiture action in the Central District of California seeking to forfeit virtual currency and $2,061,517.68 in U.S. currency alleged to constitute traceable proceeds of the Qakbot ransomware and money-laundering conspiracy led by Rustam Rafailevich Gallyamov, who was separately indicted on May 2, 2025, for conspiracy to commit computer fraud and wire fraud. After Gallyamov failed to file a claim or answer, the court granted default judgment on April 3, 2026, extinguishing and forfeiting all of Gallyamov's interests in the defendant assets to the United States; the claims of victim-claimants Concord Music Group, Inc., DISH Network Corporation, Minto Holdings, Inc., and Marathon Fasteners and Hardware Inc. remain pending.
Date filed 2025-05-22Last filing date 2026-09-30
United States v. Schmitz
CourtListener records (same docket): 1 · 2
Patrick Schmitz, a German citizen alleged to have co-founded the dark web marketplace known as the Versus Project, was charged in the District of New Jersey with eight counts including running a continuing criminal enterprise, drug distribution and importation conspiracies, access device fraud conspiracy, conspiracy to transfer stolen identification documents, and money laundering conspiracy, stemming from Versus's operation from approximately November 2019 through May 2022. An initial appearance was held on April 30, 2026, and a status conference was held on October 13, 2026.
Date filed 2024-04-03Last filing date 2026-10-14
Tech cases
Anthropic v. DOW
26-1049 (D.C. Cir.) — Anthropic PBC petitioned for review of the Department of War's determination, under 41 U.S.C. § 4713, that Anthropic's AI products present a supply chain risk to national security — a designation issued after Anthropic refused to remove contractual prohibitions on the use of its Claude models for lethal autonomous warfare and mass surveillance of Americans. A divided D.C. Circuit panel denied the petitions for review on September 25, 2026, in an opinion by Judge Katsas upholding the Secretary's statutory authority and rejecting Anthropic's due process and First Amendment claims, over a dissent by Judge Henderson. Anthropic has petitioned for panel rehearing and rehearing en banc, arguing the majority's ruling conflicts with Supreme Court and circuit precedent on statutory interpretation, procedural requirements, due process, and the First Amendment; the government's response to that petition is due November 18, 2026.
3:26-cv-01996 (N.D. Cal.) — Anthropic PBC sued the U.S. Department of War and numerous other federal agencies and officials in the Northern District of California, alleging that the government's February–March 2026 actions — including a presidential directive ordering all federal agencies to cease use of Anthropic's technology and the Department of War's designation of Anthropic as a "Supply-Chain Risk to National Security" — violated the First Amendment, the Fifth Amendment's Due Process Clause, and the Administrative Procedure Act, in retaliation for Anthropic's public refusal to remove usage restrictions on its Claude AI models prohibiting lethal autonomous warfare and mass surveillance of Americans. Judge Rita F. Lin granted a preliminary injunction on March 26, 2026, finding the challenged actions likely constituted unlawful First Amendment retaliation and enjoining defendants from implementing the Presidential Directive, the Hegseth Directive, and the Supply Chain Designation pending final resolution. Following cross-motions for summary judgment heard on July 30, 2026, the court granted summary judgment in Anthropic's favor on its First Amendment, Due Process, and APA claims, finding the challenged actions constituted unlawful retaliation and that the supply chain designation violated 10 U.S.C. § 3252 and was arbitrary and capricious, while entering judgment for defendants on the ultra vires separation of powers claim and claims against agency defendants that took no relevant independent action, and judgment was entered on August 27, 2026.
26-2011 (9th Cir.) — Anthropic PBC is challenging the Department of War's determination, issued March 3, 2026, that its Claude AI products present a supply chain risk to national security under the Federal Acquisition Supply Chain Security Act of 2018, which the Department used to exclude Anthropic from its procurement supply chain. The D.C. Circuit denied the petitions for review on September 25, 2026, in an opinion by Judge Katsas, upholding the Department's statutory and constitutional authority to exclude Claude, over a dissent by Judge Henderson. Appellants must file a motion for appropriate relief within 21 days after resolution of the related D.C. Circuit petition, if the stay remains in effect.
Upcoming events- NOV18DeadlineRespondents Response To Petition For Panel Rehearing4:00 PM EST · D.C. Cir.
Date filed 2026-03-09Last filing date 2026-11-03
National security cases
United States v. McGonigal
Charles McGonigal, a former FBI Special Agent in Charge of the Counterintelligence Division of the New York Field Office, and Sergey Shestakov, a former Soviet and Russian diplomat, were charged in the Southern District of New York with conspiracy to violate the International Emergency Economic Powers Act, substantive IEEPA violations, and money laundering, arising from their alleged work on behalf of sanctioned Russian oligarch Oleg Deripaska. McGonigal pled guilty to a superseding information charging a single count of conspiracy to violate IEEPA and to commit money laundering, and was sentenced to 50 months imprisonment, three years of supervised release, a $40,000 fine, and a $100 special assessment, with a forfeiture money judgment of $17,500 also entered against him. Shestakov's case remains active, with a final pretrial conference scheduled for May 30, 2024, and a jury trial set for June 12, 2024; pretrial motions briefing has been completed.
Date filed 2023-01-12Last filing date 2026-03-17
United States v. Ding
Linwei Ding, a former Google software engineer, was charged in the Northern District of California with seven counts of theft of trade secrets and seven counts of economic espionage, based on allegations that he secretly uploaded more than 1,000 confidential Google files — covering GPU and TPU chip architecture, software systems, and networking technology — to personal cloud accounts while covertly affiliating with two PRC-based AI startups. A jury trial was held beginning January 7, 2026, and the jury returned its verdict on January 27, 2026; the court subsequently denied Ding's motions for judgment of acquittal and new trial on all issues except the economic espionage intent question, which was reserved for a forthcoming published opinion. The judgment reflects that Ding was convicted at trial of Counts One through Seven (theft of trade secrets) and was acquitted of Counts Eight through Fourteen (economic espionage). He was sentenced to 12 months minus one day in prison, two years of supervised release, a $2,500 fine, a $700 special assessment, and $189,098.01 in restitution to Google, with self-surrender to the Bureau of Prisons ordered by December 1, 2026.
Date filed 2024-03-05Last filing date 2026-11-02
United States v. Wei
3:23-cr-01471 — CourtListener records (same docket): 1 · 2
3:23-cr-01471 (S.D. Cal.) — Jinchao Wei, a U.S. Navy Machinist's Mate assigned to the U.S.S. Essex at Naval Base San Diego, was charged in the Southern District of California with conspiracy to transmit national defense information to the People's Republic of China, substantive transmission of that information, conspiracy to export defense articles without a license, three counts of unlicensed export of defense articles, and unlawful procurement of citizenship — all arising from an alleged handler/asset relationship with a PRC intelligence officer beginning in February 2022. A jury trial was held beginning August 12, 2025, and Wei was convicted at trial of counts 1 through 6 of the superseding indictment; the jury acquitted him on count 7, the unlawful procurement of citizenship charge. Wei was sentenced on January 12, 2026, to 200 months imprisonment and three years of supervised release on each count, all to run concurrently, with a $600 special assessment and fines waived, and he has appealed.
26-399 (9th Cir.) — Jinchao Wei, a U.S. Navy Machinist's Mate assigned to the U.S.S. Essex, is appealing his conviction for conspiracy to transmit national defense information to aid a foreign government, transmitting such information, conspiracy to export defense articles without a license, and exporting defense articles without a license, after being convicted at trial on all six counts of the superseding indictment and sentenced to 200 months in federal prison, three years of supervised release, and a $600 special assessment; the jury acquitted him on Count 7, unlawful procurement of citizenship. The opening brief is due September 18, 2026, the government's answering brief is due October 19, 2026, and the reply brief is due November 10, 2026.
Upcoming events- NOV9DeadlineAppellant Reply Brief4:00 PM PST · 9th Cir.
Date filed 2023-07-19Last filing date 2026-05-12
United States v. Eileen Wang
CourtListener records (same docket): 1 · 2
Eileen Wang, a former Arcadia City Council member, was charged in the Central District of California with one count of acting in the United States as an illegal agent of a foreign government, in violation of 18 U.S.C. § 951, based on allegations that she operated a sham news website and disseminated pro-PRC propaganda at the direction of Chinese government officials from late 2020 through 2022. Wang pled guilty to that single count at a change of plea hearing held on May 29, 2026, and sentencing is scheduled for October 6, 2026.
Date filed 2026-04-01Last filing date 2026-09-21
United States v. Zheng et al.
1:26-cr-00256 (N.D. Ga.) — Tommy Shad English, a Georgia-based IT equipment distributor, is charged in the Northern District of Georgia with one count of knowingly and willfully attempting to export at least 600 servers containing export-controlled H100 GPUs from the United States to China without the required Commerce Department license, in violation of the Export Control Reform Act. English was arraigned on June 10, 2026, and a scheduled change-of-plea hearing on August 12, 2026, was cancelled; a motion hearing was held on August 31, 2026. Pretrial motions are due October 28, 2026, and a pretrial conference is scheduled for October 30, 2026.
1:26-cr-00221 (N.D. Ga.) — Matthew Kelly, a New York-based technology consultant, was charged in the Northern District of Georgia with conspiracy to smuggle goods from the United States and to violate the Export Control Reform Act, based on allegations that he worked with co-conspirators Stanley Yi Zheng and Tommy Shad English to illegally export Nvidia H100 GPU servers to China through Thailand as a transshipment point, without the required export licenses. Kelly pled guilty to Count 1 of the information on July 9, 2026, and sentencing is scheduled for December 10, 2026.
1:26-cr-00271 (N.D. Ga.) — Stanley Yi Zheng is charged in the Northern District of Georgia with conspiracy to smuggle goods from the United States and to violate the Export Control Reform Act, based on allegations that he worked with co-conspirators Tommy Shad English and Matthew Kelly to illegally export Nvidia H100 GPU servers — controlled under U.S. export regulations — to China through Thailand-based intermediaries without the required licenses. A criminal information was filed and a waiver of indictment was held on June 12, 2026, and a change-of-plea hearing is scheduled for July 28, 2026.
Upcoming events- OCT28DeadlinePretrial Motions English4:00 PM EDT · N.D. Ga.
- OCT30HearingPretrial Conference - English10:00 AM EDT · N.D. Ga.
- DEC10HearingSentencing - Kelly10:00 AM EST · N.D. Ga.
Date filed 2026-03-20Last filing date 2026-09-10