Two ISIS Supporters Charged with Attempting to Detonate Explosive Devices During Protests Outside Gracie Mansion
For immediate release: Office of Public Affairs, US Department of Justice
Today, the Department of Justice announced charges against Emir Balat and Ibrahim Kayumi alleging that they attempted to detonate two explosive devices in the vicinity of Gracie Mansion, and that they were acting in support of ISIS, a designated foreign terrorist organization.
“This was an alleged ISIS-inspired act of terrorism that could have killed American citizens,” said Attorney General Pamela Bondi. “We will not allow ISIS’s poisonous, anti-American ideology to threaten this nation—our law enforcement officers will remain vigilant, as they were when these devices were brought to a protest.”
“These men allegedly sought to inflict mass casualties in service to ISIS with the hope of exceeding the carnage of the Boston Marathon bombing,” said Deputy Attorney General Todd Blanche. “We are tremendously grateful to the brave law enforcement officers who ran into harm’s way to apprehend these individuals and disarm the explosives before anyone was harmed. Thanks to the quick investigative work by federal law enforcement, this Department of Justice will prosecute these men who pledged allegiance to a foreign terrorist organization to the fullest extent.”
“The defendants allegedly support ISIS and tried to follow the path of that deadly group by attempting to detonate explosive devices in a crowd,” said FBI Director Kash Patel. “The FBI and our partners have no tolerance for terrorist organizations or those inspired by them to engage in attacks. We are committed to stopping acts of violence and will hold accountable those who seek to harm our citizens. I want to commend the brave NYPD officers who took action to prevent injuries or loss of life on the streets of New York.”
“This alleged act of terrorism, including the packing of metal shrapnel into explosive devices, reveal an intent to cause multiple deaths or serious injuries,” said Assistant Attorney General for National Security John A. Eisenberg. “This is a sober reminder of the threat posed by ISIS and its despicable ideology. NSD will continue to use all tools at its disposal to protect this Nation and its people.”
“As alleged, on Saturday, March 7, during a protest taking place outside Gracie Mansion on the Upper East Side, Emir Balat and Ibrahim Kayumi attempted to detonate two improvised explosive devices amongst the protesters,” said U.S. Attorney Jay Clayton for the Southern District of New York. “Moreover, after being apprehended by NYPD officers, both Balat and Kayumi stated they were aligned with ISIS. Free speech and peaceable assembly are the bedrock of American democracy. Violence is not protected speech, and it’s not protected protest. In New York, violence—particularly acts of terror—will be met with swift justice. This investigation remains ongoing, and we encourage anyone with further information to please contact tips.fbi.gov online or 1-800-CALL-FBI.”
As alleged in the Complaint:
On or about March 7, 2026, a protest called “Stop the Islamic Takeover of New York City, Stop New York City Public Muslim Prayer” and a counter-protest called “Run Nazis Out of New York City” were held outside of Gracie Mansion in Manhattan, New York. Gracie Mansion is the official residence of the Mayor of New York City.
At approximately 12:15 p.m., Balat ignited and threw an explosive device (Device-1) toward the area where the protesters were gathered, as pictured below:

Immediately after throwing Device-1, Balat ran to another location down the block and received a second explosive device (Device-2) from Kayumi, as pictured below:
After apparently igniting Device-2, Balat dropped Device-2 near where several NYPD officers were standing, ran away from the NYPD officers, and jumped over a barricade. He was tackled and arrested by NYPD officers shortly thereafter, as was Kayumi. Pictured below are Balat mid-flight and Device-2 hitting the ground:
Following his arrest, while en route to the NYPD precinct, Balat stated to NYPD officers: “this isn’t a religion that just stands when people talk about the blessed name of the prophet . . . We take action! We take action!”; and “if I didn’t do it someone else will come and do it.” Then, after arriving at the NYPD precinct, Balat requested a piece of paper and, after being given a paper and pen, wrote the following: “All praise is due to Allah lord of all worlds! I pledge my allegiance to the Islamic State. Die in your rage yu [sic] kuffar! Emir B.” “Kuffar” is an Arabic term that refers to “non-believers” or “infidels,” and “Die in your rage” is a slogan used by ISIS.
Law enforcement officers later asked Balat if he was familiar with the Boston Marathon bombing, and if that was what Balat had hoped to accomplish. Balat responded: “No, even bigger. It was only three deaths.”
After Kayumi was arrested, and as he was being placed inside an NYPD vehicle to be transported from the scene to an NYPD precinct, an individual from the surrounding crowd yelled to Kayumi and asked why Kayumi had done this. Kayumi responded, “ISIS.” Then, at the NYPD precinct, in response to a question from law enforcement about whether he was affiliated with ISIS, Kayumi indicated that he was. He further stated, in substance and part, that: (i) he has watched ISIS propaganda on his phone; (ii) his actions that day were partly inspired by ISIS; (iii) he did not feel comfortable holding the Devices earlier that day; and (iv) he would not feel comfortable if the Devices were in the interrogation room with him.
After Balat and Kayumi were arrested and the Devices were secured, an FBI Special Agent Bomb Technician (SABT) conducted a preliminary examination of the Devices and determined that they were each approximately the size of a mason jar; that they each had an attached fuse; and that they each had nuts and bolts attached to the exterior, surrounded by duct tape. A preliminary analysis of Device-1, the device that Balat threw into the crowd of protesters, showed that it contained TATP, a highly volatile explosive that is colloquially known as the “Mother of Satan” and extremely sensitive to impact, friction, and heat. TATP has been used in multiple terrorist attacks over the last decade.
Pictured below are the contents inside Device-1 after it was opened by law enforcement:
On or about March 8, 2026, law enforcement officers located a parked vehicle registered to a family member of Balat a few blocks from Gracie Mansion. From inside the vehicle, law enforcement officers recovered a coiled green material consistent in appearance with hobby fuse, an empty metal can of the same approximate dimensions and appearance as the can recovered from inside Device-1, and a notebook containing handwritten notes. One page of the notebook contains the note “TATP explosive”; another page contains a list of chemical ingredients, including “hydrogen peroxide,” “sulfuric acid,” and “acetone”; and a third page contains a list of components and quantities, such as “aluminum can x6,” and “a box of bolts ect [sic] 2x.”
As the introductory phrase signifies, the entirety of the charging instrument to date constitutes only allegations, and every fact described herein should be treated as an allegation.
Balat, 18, of Langhorne, Pennsylvania, and Kayumi, 19, of Newtown, Pennsylvania, are charged with attempted provision of material support and resources to a designated foreign terrorist organization, which carries a maximum sentence of 20 years in prison; use of a weapon of mass destruction, which carries a maximum sentence of life in prison; transportation of explosive materials, which carries a maximum sentence of 10 years in prison; interstate transportation and receipt of explosives, which carries a maximum sentence of 10 years in prison; and unlawful possession of destructive devices, which carries a maximum sentence of 10 years in prison.
The minimum and maximum potential sentences are prescribed by Congress and provided here for informational purposes only, as any sentencing of the defendants will be determined by a judge.
Mr. Clayton praised the outstanding efforts of the New York Joint Terrorism Task Force of the FBI, which consists of investigators and analysts from the FBI, the NYPD, and over 50 other federal, state, and local agencies. Mr. Clayton also thanked the Counterterrorism Section of the Department of Justice’s National Security Division, U.S. Customs and Border Protection, the New York State Police, Homeland Security Investigations, the FBI Newark Field Office, the FBI Philadelphia Field Office, and the Bureau of Alcohol, Tobacco, Firearms and Explosives for their assistance.
This case is being handled by the National Security and International Narcotics Unit for the Southern District of New York. Assistant U.S. Attorneys Jonathan L. Bodansky and Jane Y. Chong are in charge of the prosecution, with assistance from Trial Attorney James Donnelly of the National Security Division’s Counterterrorism Section and paralegal specialist Juan Muñoz.
Press Release: Office of Public Affairs-U.S. Department of Justice
Yesterday, a federal jury in San Francisco convicted former Google software engineer Linwei Ding, also known as Leon Ding, 38, on seven counts of economic espionage and seven counts of theft of trade secrets for stealing thousands of pages of confidential information containing Google’s trade secrets related to artificial intelligence technology for the benefit of the People’s Republic of China (PRC). The jury’s verdict follows an 11-day trial before U.S. District Judge Vince Chhabria for the Northern District of California.
“This conviction exposes a calculated breach of trust involving some of the most advanced AI technology in the world at a critical moment in AI development,” said Assistant Attorney General for National Security John A. Eisenberg. “Ding abused his privileged access to steal AI trade secrets while pursuing PRC government-aligned ventures. His duplicity put U.S. technological leadership and competitiveness at risk. I commend the trial team and investigators whose exceptional work resulted in this conviction.”
“In today’s high-stakes race to dominate the field of artificial intelligence, Linwei Ding betrayed both the U.S. and his employer by stealing trade secrets about Google’s AI technology on behalf of China’s government,” said Assistant Director Roman Rozhavsky of the FBI's Counterintelligence and Espionage Division. “Not only does this case mark the first-ever conviction on AI-related economic espionage charges, but it also demonstrates the FBI’s unwavering dedication to protecting American businesses from the increasingly severe threat China poses to our economic and national security. We remain committed to working closely with our partners across the private sector to protect our nation’s innovation, safeguard our trade secrets, and hold our foreign adversaries accountable.”
“Silicon Valley is at the forefront of artificial intelligence innovation, pioneering transformative work that drives economic growth and strengthens our national security. The jury delivered a clear message today that the theft of this valuable technology will not go unpunished. We will vigorously protect American intellectual capital from foreign interests that seek to gain an unfair competitive advantage while putting our national security at risk,” said U.S. Attorney Craig H. Missakian for the Northern District of California.
“This conviction reinforces the FBI’s steadfast commitment to protecting American innovation and national security. The theft and misuse of advanced artificial intelligence technology for the benefit of the People’s Republic of China threatens our technological edge and economic competitiveness,” said FBI Special Agent in Charge Sanjay Virmani for the San Francisco Field Office. “The FBI San Francisco division serves Silicon Valley and the companies who lead the world in innovation, and we are committed to safeguarding their work. This case demonstrates the strength of collaboration between the FBI and the private sector, including leading companies like Google, whose partnership is critical to protecting sensitive U.S. technology. Today’s verdict affirms that federal law will be enforced to protect our nation’s most valuable technologies and hold those who steal them accountable.”
Ding was originally indicted in March 2024. A superseding indictment returned in February 2025 described seven categories of trade secrets stolen by Ding and charged Ding with seven counts of economic espionage and seven counts of theft of trade secrets.
According to the evidence presented at trial, between approximately May 2022 and April 2023, while a Google employee, Ding stole more than two thousand pages of confidential information containing Google’s AI trade secrets from Google’s network and uploaded them to his personal Google Cloud account. Ding also secretly affiliated himself with two PRC-based technology companies while he was employed by Google: around June 2022, Ding was in discussions to be the Chief Technology Officer for an early-stage technology company based in the PRC; by early 2023, Ding was in the process of founding his own technology company in the PRC focused on AI and machine learning and was acting as the company’s CEO. In multiple statements to potential investors, Ding claimed that he could build an AI supercomputer by copying and modifying Google’s technology. In December 2023, less than two weeks before he resigned from Google, Ding downloaded the stolen Google trade secrets to his own personal computer.
The jury found that Ding stole trade secrets relating to the hardware infrastructure and software platforms that allow Google’s supercomputing data center to train and serve large AI models. The trade secrets contained detailed information about the architecture and functionality of Google’s custom Tensor Processing Unit chips and systems and Google’s Graphics Processing Unit systems, the software that allows the chips to communicate and execute tasks, and the software that orchestrates thousands of chips into a supercomputer capable of training and executing cutting-edge AI workloads. The trade secrets also pertained to Google’s custom-designed SmartNIC, a type of network interface card used to facilitate high speed communication within Google’s AI supercomputers and cloud networking products.
In presentations to investors, Ding called out the PRC’s national policies prioritizing AI development and innovation in the PRC, and in late 2023 Ding applied for a government sponsored “talent plan” in Shanghai, PRC. The jury heard evidence pertaining to the PRC government’s establishment of talent plans to encourage individuals to come to China to contribute to the PRC’s economic and technological growth. Ding’s application for this talent plan stated that he planned to “help China to have computing power infrastructure capabilities that are on par with the international level.” The evidence at trial also showed that Ding intended to benefit two entities controlled by the government of China by assisting with the development of an AI supercomputer and collaborating on the research and development of custom machine learning chips.
Ding is next scheduled to appear at a status conference on Feb. 3, 2026. Ding faces a maximum sentence of 10 years in prison for each count of theft of trade secrets in violation of 18 U.S.C. § 1832 and 15 years in prison for each count of economic espionage in violation of 18 U.S.C § 1831. Any sentence following conviction would be imposed by the Court only after consideration of the U.S. Sentencing Guidelines and the federal statute governing the imposition of a sentence, 18 U.S.C. § 3553.
Assistant U.S. Attorneys for the Northern District of California Casey Boome, Molly K. Priedeman, and Roland Chang are prosecuting this case, with assistance from Veronica Hernandez and Trial Attorney Yifei Zheng from the Counterintelligence and Export Control Section, National Security Division. The prosecution is the result of an investigation by the FBI.







.jpg)


.png)
.png)
.png)
.png)

