On November 8, Nvidia employees opened an email from their chief executive. "I was unfaithful to my wife," Jensen Huang wrote. "My actions hurt her and our children. There is no excuse for what I did." Near the end, almost in passing, he addressed "the national security concerns raised in news reports" and said Nvidia's board had opened an independent investigation.
The email did not name the woman. US intelligence had known her name for more than a year. Alice Huang, also known as Huang Le, is a Chinese citizen and former state media television reporter who became a top executive at Megaspeed, a Singapore-based data center company and one of Nvidia's largest customers in Southeast Asia. The two are not related. According to The New York Times, surveillance of Alice Huang revealed she was feeding information directly to Beijing, and a classified memo drafted under Secretary of State Marco Rubio this spring concluded China's Ministry of State Security (MSS) had recruited her to target Jensen Huang.
The affair is the part everyone understood immediately. The counter-intelligence problem underneath it is harder, and it implicates both governments.
What the Record Shows and What It Does Not
The Times reports Jensen Huang acknowledged to Nvidia's board he had been intimate with a business executive US intelligence had identified as a Chinese spy. The board's statement says a committee of independent directors, assisted by outside counsel, will oversee the inquiry, and it has "no reason to believe that either national security or NVIDIA secrets were compromised." China's Foreign Ministry calls the reporting groundless speculation and an attempt to smear China.
The concern is not confined to Washington. Officials in the US, Singapore, and Taiwan had grown concerned Alice Huang was a Chinese intelligence source, The Wall Street Journal reported on November 1. The Journal also reported she was photographed with Jensen Huang at events in Taiwan in 2024 and 2025, and her current whereabouts are unknown, according to the San Francisco Standard's summary.
Nvidia's October account raises two separate questions. Jensen Huang told Bloomberg his interactions with Alice Huang were "related to Megaspeed, and it was all completely normal and not unusual." His acknowledgment to the board contradicts that description, and the Times calls Nvidia's earlier statements misleading.
A company spokesperson also said allegations of Megaspeed smuggling chips to China "were thoroughly investigated and debunked last year." The Justice Department is now pursuing a criminal investigation into Megaspeed after taking the case over from the Commerce Department. An investigation proves neither that smuggling occurred nor that it did not, but it shows the matter is not closed. Megaspeed bought more than US$4.8 billion in Nvidia chips over two years.
The gaps matter as much as the facts. The memo remains classified, and the collection behind it cannot be examined. Jensen Huang told President Donald Trump he had no idea Alice Huang was a spy, and Trump said on November 10 the FBI is looking into the matter "in terms of something else," without explaining what he meant. Trump also said he heard about the relationship "not long ago," while the Times reports he was briefed roughly a year ago.
The classification of the memo also proves nothing about what Jensen Huang knew. The government classified its own assessment, and nothing public shows Jensen Huang holds a security clearance or received classified briefings.
What Jensen Huang Could Have Told Her
None of the most valuable answers requires a classified document. Jensen Huang sits where US export policy, foreign governments' artificial intelligence ambitions, and China's hunger for American AI capability meet, and the intelligence value lies in what he hears before anyone else does.
The first target is American decision-making on chip exports. On December 8, 2025, Trump announced the H200 could ship to approved Chinese customers. On January 14, the Commerce Department codified the conditions, including customer screening and independent third-party testing in the US. Every one of those conditions was negotiated before it was published. A foreign government learning in advance which conditions were firm and which were bargaining positions gains leverage over the negotiation itself. The screening condition already looks thin. One Chinese buyer Commerce authorized, New Matrix, listed an office address where Times reporters found a hollow gray shell.
The second target is the president. The Times reported Alice Huang's access could have given Beijing insight into Trump's thinking on artificial intelligence ahead of his talks with Xi Jinping. Beijing has pursued the same target technically, through the Salt Typhoon intrusions into US telecommunications companies.
The memo circulated not long before Trump's May state visit to China. Jensen Huang had not initially been invited, but he boarded Air Force One in Alaska to join the delegation. The visit ended with the Commerce Department allowing 10 Chinese companies, among them Alibaba, Tencent, and ByteDance, to buy H200 chips. Trump is expected back in China for the APEC summit in Shenzhen this month.
The third target is the least discussed and potentially the most damaging, US enforcement. Commerce began investigating Megaspeed in 2024. In August 2025, Nvidia general counsel Tim Teter contacted Commerce investigators and said a senior official had permitted the outreach, the Times reported. The case then moved to the Justice Department. Any knowledge inside Nvidia about an investigation into Megaspeed was, by definition, knowledge about Alice Huang's own company. Enforcement methods carry similar value. US authorities have secretly placed location trackers in targeted shipments of servers carrying Nvidia chips. A diversion network learning which shipments draw scrutiny gains far more than any chip specification could offer.
The fourth target is other governments. In May 2025, Nvidia joined Saudi Arabia's HUMAIN sovereign AI project, and in September Jensen Huang appeared with British and American officials as the UK announced its own AI infrastructure investments. On November 19, 2025, Commerce approved exports of up to 35,000 Blackwell chips each to G42 in the UAE and HUMAIN in Saudi Arabia. The approvals are conditioned on "rigorous security and reporting requirements" the department has never published. Those requirements exist to keep advanced chips away from China. Their details would show Beijing exactly what a compliant-looking diversion has to defeat.
I found no evidence Jensen Huang passed any of this to anyone, and Nvidia's board says it has no reason to believe national security or company secrets were compromised while its inquiry continues. I assess with high confidence his position made him an exceptionally attractive collection target. Ranking these categories against Nvidia's own trade secrets would require knowing what he actually heard and what he actually said, and the public record shows neither. The pattern fits the MSS approach visible in its funding of UK academics and the phishing of US AI policy experts, where the target is the person closest to the decision.
Both Sides of the Counter-Intelligence Ledger
Allocation, Not Secrets. The scarcest thing Jensen Huang controls is allocation, deciding who receives Nvidia's most constrained products and how closely Nvidia scrutinizes the customers buying them. An intelligence service gaining influence over allocation and compliance tolerance would leave no stolen document behind. Nvidia kept selling to Megaspeed after the Commerce investigation became public. Whether that reflected ordinary commercial judgment or something else is precisely what the board's investigation cannot answer without the classified record.
Leverage Reduced by Confession. A secret affair is leverage before it is a source of information. As long as the relationship stayed hidden, it gave anyone who knew about it a hold over the chief executive of the world's most valuable company. Jensen Huang's public admission removed the threat of exposing the affair itself, a meaningful counter-intelligence step, though one taken only after the relationship became public. It does not establish whether undisclosed communications or other compromising material remain, and those would carry the same leverage the affair once did.
Washington Withheld a Warning. The Times reports Trump chose not to act on his briefing, partly out of concern for US-China trade relations and Nvidia's business. Jensen Huang never received the defensive briefing sometimes given to Americans targeted by foreign intelligence services, possibly because officials feared it would alert Alice Huang to the surveillance. As I argued in my assessment of why knowing about a threat is not the same as stopping it, a warning withheld leaves the target exposed in the meantime.
The reporting establishes the surveillance, the classified assessment, and the absence of a warning. It does not establish the government's full reasoning. A suspected MSS target still joined the president's delegation to Beijing without being warned.
I assess with moderate confidence the government judged the channel worth watching rather than closing. I saw that decision made repeatedly during my government career. A known channel left open lets counter-intelligence officers learn an adversary's tradecraft, its tasking, and precisely what it is after, and closing it early forfeits all three. The pattern here fits uncomfortably well. The alternative, a decision driven mainly by trade and political considerations, also fits the reporting, and the two are not mutually exclusive.
The Leak Compromised the Collection. Someone gave reporters details of a highly classified memo and an active surveillance operation, weeks before the APEC summit and the November 18 House briefing the committee chairs requested. Disclosure likely compromised continued access, may have revealed collection capabilities, and gives Beijing every reason to change how its people communicate. Leaks expose methods in ways their sources rarely intend, as metadata alone unmasked undercover ICE agents in an unrelated case. Whether the collection has actually ended is not public, and Alice Huang was reportedly in China this year.
The timing also lands in the middle of a policy fight over chip sales to China. Intelligence can be accurate and still be deployed for policy ends, and as I argued in my analysis of attribution, several outlets repeating one government assessment is not independent corroboration.
Exposure Carries Costs for Beijing Too. If the MSS ran this operation, its exposure now threatens the H200 sales China wanted and hands chip-export hawks their strongest argument in years. Exposure says little about the operation's quality or its yield. A well-run operation can still be discovered, and collection value, operational failure, political cost, and commercial damage can all coexist in the same case.
Controls Above the Founder. Founder authority can obstruct scrutiny and weaken escalation, and Jensen Huang runs Nvidia with roughly 60 direct reports and authority over every major customer relationship. The meaningful question is whether any control at Nvidia can constrain the person empowered to override it. Nvidia's board cannot see the classified evidence behind the government's conclusion. Shareholders have already filed a proposed class action accusing the company and Jensen Huang of hiding his ties to Alice Huang. The most sensitive access point in the company sat where ordinary controls struggle to reach, much as OpenAI's most sensitive conversations proved vulnerable to a person rather than a network.
Hypotheses Still on the Board
Witting Cooperation. The hypothesis nobody wants to state is Jensen Huang as a willing participant rather than a target. Nothing public supports it. He told Trump he had no idea, his company and personal fortune depend on Washington's goodwill, and he has committed to cooperate with the board's investigation. I hold it at low confidence. Analysts still have to test it, and his misleading October account is the single data point keeping it on the board until the investigation removes it.
A Back Channel. A relationship reaching from Beijing into the president's circle can carry messages in both directions. Beijing could have used it to read the Trump administration and also to signal through it, especially before the May summit and this month's meeting in Shenzhen. Such a channel can work whether or not Jensen Huang understood his role in it. I hold it at low confidence, but it would explain why both governments might value the relationship staying open.
Chips as the Primary Objective. The MSS memo describes Jensen Huang as the target, but Megaspeed's US$4.8 billion in purchases and the criminal investigation into possible diversion suggest a second objective. Access to the chief executive could protect a supply line by smoothing allocation and softening scrutiny, with information collection a secondary benefit. The record cannot separate the two, and I cannot rank them.
Other Services in the Room. Officials in Singapore and Taiwan shared Washington's concern, and Jensen Huang was photographed with Alice Huang in Taiwan. Partner services may have contributed to the collection or held their own. The leak then exposed more than an American operation. It also put liaison relationships at risk, and partner services weigh that cost when they decide what to share next.
Every institution in this story protected something other than the junction where the risk sat. Nvidia protected a major customer relationship and its own account of it. The White House protected a trade agenda and a favored executive. The intelligence community protected its collection, until the collection was exposed. Beijing, if the assessment is right, protected its access for as long as it lasted. Jensen Huang stood at the point where US export policy, foreign governments' AI ambitions, and China's appetite for chips all converge, and nobody hardened that point until a newspaper forced the issue.