Skip to content
Submit incident
AII-1001-96477
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

TuSimple shared sensitive US autonomous vehicle data with Chinese partners after CFIUS agreement

TuSimple shared sensitive autonomous vehicle data with Chinese truck manufacturer Foton within a week of signing a 2022 national security agreement with the U.S. government to isolate its Chinese operations. A CFIUS investigation found the data sharing did not technically violate the agreement, though TuSimple paid a $6 million settlement for other infractions, and federal investigations by the FBI, SEC and Commerce Department were launched.

February 2022 Β· TuSimple Β· Security and cyberattacks
February 2022
AII-1001-964772 sources ↓
Quick facts
Category
Security and cyberattacks
Country
United States
Source
TechCrunch
Date
February 2022
Drafted by
Raidu Incident Detection

What happened

TuSimple signed an agreement with the Committee on Foreign Investment in the U.S. (CFIUS) in early February 2022 committing to separate its U.S. operations and technology from China-based employees and partners through firewalls and governance controls. Within a week, TuSimple engineers began sending detailed U.S. testing data, design plans and hardware schematics to Chinese truck manufacturer Foton, a state-owned entity, with files translated from English to Mandarin.

The data transfers included brake specifications, steering controls, chip requirements and files developed with American manufacturing partner Navistar, and continued for approximately six months until TuSimple's compliance deadline. According to The Wall Street Journal, documents obtained showed engineers discussing what information Foton requested, with one writing '[Foton] wants a lot of details.'

Reported impact

The data transfers reportedly constituted the blueprint of an American-made autonomous vehicle system being shared with a Chinese state-owned company, raising national security concerns about sensitive U.S. autonomous vehicle technology. Commerce Department officials also intercepted a shipment of Nvidia AI chips en route to China in connection with the company's operations.

Index analysis

A subsequent CFIUS investigation found the data sharing did not technically violate the agreement, though TuSimple was fined for other infractions. The FBI, SEC and Commerce Department launched probes into TuSimple's relationship with China-based spinoff Hydron, which was absorbing TuSimple's technology and talent.

Governance controls

CFIUS examiners visited TuSimple's Arizona offices and initially found no evidence of non-compliance with the 2022 agreement, but mounting evidence later forced a referral to the Justice Department. TuSimple was fined and paid a $6 million settlement without admitting fault.

Classification

Category
Security and cyberattacks
Industry
Mobility and autonomous vehicles
Country
United States
Harm status
Potential harm
Intent
Unknown
Timing
Unknown
Harm types
Public interest, Economic or property
Harmed
Government
Consequences
Regulatory investigation, Fine or settlement
AI systems
TuSimple autonomous vehicle system
Regulations
FCRA (investigation)

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

TechCrunch
Report: TuSimple sent sensitive self-driving data to China after US national security agreement
27 May 2025
The Daily Caller
EV Startup Promised To Cut China Ties -- Then Reportedly Shared US Data Anyway
27 May 2025