A US Spy Memo Alleges a Recruit Was Tasked With Watching Nvidia's CEO

Every so often a story lands that sounds like a le Carré novel but turns out to be a business story about supply chains. This week's version comes from Washington and involves the most valuable chip company on earth — and a memo that a lot of people are now trying to explain.

According to reporting from TechCrunch, a US intelligence memo circulated earlier this year claimed that a technology executive named Alice Huang was recruited by China's Ministry of State Security to gather information on Nvidia CEO Jensen Huang. The New York Times broke the story; the Financial Times followed up with additional details from the same memo. Both outlets are working from a document that is reportedly based on US intelligence assessments, not from anything Nvidia has confirmed.

What the memo actually claims

The core allegation is straightforward: a foreign intelligence service reportedly cultivated a well-placed industry figure whose job gave her legitimate, repeated access to one of the most strategically important executives in tech. Alice Huang was an executive at Megaspeed, a Singapore-based company in the AI compute business. That kind of role — selling or brokering access to GPU capacity — puts you in the same rooms as the people building frontier models.

The FT's reporting went further, stating that the memo also claimed Jensen Huang had a romantic relationship with Alice Huang. That is a claim inside a memo, not a verified fact, and it's worth keeping that distinction sharp. Nvidia's response, as reported by the Times, was that Jensen Huang's interactions with Alice Huang were "not unusual," and the company added that it does not share classified information with its customers.

The part that should worry supply chain people more

Honestly, the espionage angle gets the headlines, but a second thread in the same reporting is the one I'd put in front of any procurement team. The Times also looked at New Matrix, a Chinese company that holds US Commerce Department authorization to buy advanced Nvidia chips. Reporters visited the office address on file and found, in their words, "a hollow gray shell."

Think about what that means operationally. Export controls are enforced on paper through entities — names, addresses, licenses, end-use declarations. If an address on a license resolves to an empty building, then the control was never really on the chips. It was on a form. That is the structural weakness in any export regime, and it doesn't require a spy to exploit. It requires a mailbox.

There's a related concern in the reporting too: the suspicion that the entity could be a front for a private equity firm that already sits on a US blacklist. Nvidia's pushback was that it sells "the first, best and most of our technology in America." Fair point on volume — but volume isn't the question. Destination is.

Why this is an IT story, not just a geopolitics story

If you run infrastructure anywhere in the world, you've spent the last two years learning that compute is a geopolitical asset. What this story adds is a reminder that the risk surface isn't only in the data center. It's in the vendor relationship, the reseller, the regional partner, the shell company two hops away from the invoice.

Three practical takeaways I'd take from it:

Know your counterparty's counterparty. If your GPU capacity comes through a broker, ask where the allocation originates. "We have a partner" is not an answer to a compliance question.

Treat executive access as an asset with an audit trail. The most sensitive information in a chip company doesn't live in a repository. It lives in a calendar. Who gets recurring meetings is a security decision, even when it's made by an assistant.

Assume memos leak. Intelligence assessments get written, circulated, and eventually reported. Anything you'd be uncomfortable reading in the Times is probably worth rethinking before it becomes a memo.

The takeaway

Nothing here has been proven in a courtroom, and the people named deserve the presumption that a memo is an allegation, not a verdict. But the empty office building is the detail that sticks with me. Export controls, sanctions lists, and vendor due diligence all run on the assumption that the entity you're screening is the entity that exists. The New Matrix reporting suggests that assumption is doing a lot of unpaid work — and that the real fix isn't more intelligence collection. It's boring, unglamorous verification. Site visits. Beneficial ownership checks. Asking who actually signs for the delivery.

In AI infrastructure right now, the boring checks are the security program.