Alibaba's Alleged AI Securities Fraud


By Reed R. Kathrein

The Cost of Make-Believe

There is a fundamental rule of corporate behavior: you are legally permitted to have a terrible business plan, and you are even allowed to be disastrously behind in the artificial intelligence arms race. What you are not allowed to do is lie to your shareholders and pretend everything is fine while secretly running a massive industrial espionage campaign to plug the gap. Corporate executives routinely calculate that the expected value of lying is positive. It is vastly cheaper to steal your competitor's homework today and deal with an SEC wrist-slap five years from now than it is to admit to the market that you are losing the tech race. The SEC is chronically understaffed, drowning in millions of pages of filings, and largely incapable of policing this in real-time. This is why private enforcement and the Fear Of Lawsuit (FOLS) exist. Class actions are not an annoyance to the capital markets; they are the market’s primary mechanism for enforcing reality. Until private litigators show up to demand the receipts, executives have near-zero economic incentive to tell the truth.

The Mechanics of the Mirage

The recent securities fraud complaint against Alibaba Group Holding Limited and its CEO, Eddie Yongming Wu, outlines a fascinating two-pronged approach to corporate obfuscation. The first prong involved a quiet geopolitical omission. Under the FY2025 National Defense Authorization Act, any entity affiliated with the Chinese Ministry of Industry and Information Technology (MIIT) is classified as a "Chinese military company". Alibaba explicitly acknowledged in its 2025 Hong Kong Report that it operates under a license from the MIIT, but curiously forgot to warn investors that this regulatory tether legally designated it as a Chinese military company under U.S. law. The market only found out when the U.S. Department of Defense officially listed Alibaba as such on June 8, 2026, dropping the stock by 3.9% over two trading days and continued to tumble over the rest of the month.

But the plumbing of the AI mirage is where the real mechanics shine. To build a large language model quickly, you can engage in a practice known as "adversarial distillation". Instead of training your AI from scratch, you just barrage a superior U.S. model—in this case, Anthropic's Claude—with millions of queries and use the outputs to train your own system at a fraction of the cost. It is a highly efficient way to build an AI, provided you do not mind triggering an international corporate espionage scandal. Anthropic alleged that Alibaba’s Qwen AI lab used nearly 25,000 fraudulent accounts to execute 28.8 million exchanges with Claude between April and June 2026. When this news broke on June 24, 2026, Alibaba's American Depositary Shares slid 2.7%, followed by another 4.7% drop the next day.

The Texts

The timeless corporate mystery is why executives committing securities fraud always feel compelled to draft SEC disclosures that wink at their ongoing misconduct. In its 2026 Annual Report, filed right in the middle of this alleged 28.8-million-query heist, Alibaba warned investors of a deeply specific "risk":

"Even perceived or alleged misuse of personal data or unauthorized distillation of third-party models by our large language models may result in loss of confidence or trust in our systems and have a material adverse effect on our reputation, business and prospects."

It takes a special kind of deadpan corporate audacity to describe the unauthorized distillation of third-party models as a mere hypothetical risk while your engineers are allegedly running 25,000 burner accounts to pillage Anthropic's servers. You have to admire the lawyer who drafted that risk factor; they managed to perfectly describe the exact thing the company was secretly doing, and label it as something that might happen in the future.

The Enforcement Deficit

This is exactly why these cases end up in federal court rather than just in front of a regulatory tribunal. The Department of Defense had to update a list to expose the military company connection, and a private AI startup had to write a letter to the White House to expose the distillation attack. Regulatory agencies are too overwhelmed to audit 28.8 million API calls in real-time. It is left to private enforcement and FOLS to handle the cleanup, applying the necessary pricing correction to ensure that when management buys a lie on margin, the executives are eventually forced to cover the spread.

If You Bought the Float

If you happened to purchase $BABA securities during the period when management claimed their unauthorized AI distillation was a mere hypothetical risk, and you are interested in seeing the bill for that discrepancy, our litigation team at Hagens Berman is reviewing the paper trail.