← All posts / Policy

Thirty Years for a Stolen Blueprint: South Korea's Rewritten Espionage Law Takes Effect Tomorrow

On September 13, South Korea's first espionage-law rewrite in 73 years takes effect — extending spying charges beyond North Korea to any foreign beneficiary, with courts empowered to impose up to 30 years for leaking chip technology. The target is China's recruitment of Samsung and SK Hynix engineers.

Thirty Years for a Stolen Blueprint: South Korea's Rewritten Espionage Law Takes Effect Tomorrow

Tomorrow, September 13, 2026, one of the most consequential legal changes in the global semiconductor industry quietly takes force. South Korea’s amended Criminal Code Article 98-2 — the country’s first major rewrite of its espionage statute in 73 years — extends the crime of espionage from acts benefiting North Korea to acts benefiting any foreign country or equivalent organization. Courts will now be able to impose sentences of up to 30 years for passing sensitive technology abroad. After months of coverage focused on the law’s February passage, the Financial Times, Bloomberg, and Japan Times have spent this week spotlighting what the effective date actually means: South Korea is reclassifying the theft of chip know-how from a commercial offense into a national-security crime.

A statute frozen in 1953, thawed for the chip war

The old Article 98 was written for a peninsula at hot war. It criminalized espionage committed for an “enemy state,” which South Korean courts had consistently interpreted to mean North Korea and nothing else. That frozen definition produced an absurdity at the heart of the industry’s most damaging prosecution: in the landmark CXMT case, a former Samsung Electronics engineer — identified in court only by the surname Jeon, who spent 28 years at the Korean chip giant before joining China’s Changxin Memory Technologies around 2016 — was never charged with espionage at all. Prosecutors had to reach for the Industrial Technology Protection Act and trade-secret statutes, the only tools available.

The facts of that case explain why the sentence ceiling matters. Jeon transcribed more than 600 sequential steps of Samsung’s DRAM production process by hand before departing — a method prosecutors confirmed was chosen deliberately to bypass Samsung’s digital leak-detection systems, which log and flag electronic file transfers. The handwritten notes contained precise equipment specifications, production sequencing, and yield-optimization techniques. The court found the stolen data constituted a legally designated “national core technology,” sentenced Jeon to seven years, and concluded that the leak gave CXMT a head start that let it debut advanced memory far earlier than independent development would have permitted. Using the stolen data, CXMT achieved production-ready 10nm DRAM in 2023 — the first Chinese company ever to reach that node. A Seoul trial of ten more former Samsung employees accused of transferring technology to CXMT is now underway.

Under the framework that existed until this week, that conduct sat in the same legal category as an ordinary commercial trade-secret violation. Starting tomorrow, the same facts can be prosecuted as espionage.

The hemorrhage the law is meant to stop

The numbers legislators cited frame this as a systemic problem, not a string of isolated incidents. From 2020 through June 2026, 33 national core technology cases and 110 industrial technology cases were transferred overseas, with estimated damages exceeding ₩23 trillion — roughly $16.8 billion. Prosecutors estimate Samsung alone suffered about ₩5 trillion (approximately $3.66 billion) in lost revenue in 2024 from the broader breach series.

The stakes are existential for an export economy. Samsung controls 38% of global DRAM production and SK Hynix 25% — together, nearly two-thirds of the world’s supply of the memory that every AI accelerator depends on, with SK Hynix holding an estimated majority share of the high-bandwidth memory (HBM) stacked alongside Nvidia’s GPUs. More than half of last year’s overseas technology leaks reportedly involved China, and recruitment offers from Chinese chipmakers have reportedly run at three times the current Korean market salary for experienced DRAM engineers.

Against that payoff structure, deterrence has been nearly nonexistent. According to draft figures cited in Korean legislative debate, roughly one in two people convicted of domestic industrial-technology offenses receives a suspended sentence — prison time never served. A three-year statutory floor with a coin-flip chance of suspension, against a potential nine-figure payoff for a single successful transfer, is not a deterrent. It is a business expense.

The catch: allies are covered too

The September 13 revision carries a structural friction the industry has begun to flag loudly. “Foreign country” under the new Article 98-2 covers allied nations as well as adversaries. A Korean engineer who moves proprietary DRAM process data to an American, Japanese, or European employer now falls inside the same statute as one who moves it to Shenzhen.

Defense exporters have identified this as an acute concern: their business model depends on transferring sensitive technical know-how to partner governments and allied defense contractors. Prof. Jang Won-joon of Jeonbuk National University, a defense-industry specialist, warned this week that criminal risk must now be managed technology by technology, through government approval and internal controls, rather than assumed to be resolved by a signed contract. Prof. Choi Gi-il of Sangji University’s military studies department called the tougher framework a welcome answer to organized, state-level technology theft — while noting the obvious limit: domestic criminal law cannot bind a foreign state or firm once technology has been handed over under a government-to-government agreement.

There is also an unresolved legal question at the statute’s core. Article 98-2 covers a “foreign country or equivalent organization” — but it does not explicitly name foreign corporations. Whether courts read “equivalent organization” broadly enough to cover a state-backed company like CXMT on its own will determine how much teeth the law actually has. Industry legal advisors currently expect a narrow reading.

The follow-up bill waiting in the wings

That gap is the target of a bill filed August 31 by Rep. Go Dong-jin of the People Power Party — a former Samsung Electronics president who now represents Seoul’s Gangnam district, home to Samsung’s headquarters. His amendment would raise the espionage minimum sentence from three years to ten years, explicitly add “acting for the benefit of a foreign corporation” as a covered purpose, and expand protected information beyond state secrets to include the government’s designated “national core technologies” — advanced semiconductor processes, display technologies, and next-generation battery designs. The alignment would mirror the United States’ Economic Espionage Act framework, which allows up to 15 years for trade-secret theft benefiting a foreign government, and a 2025 US congressional bill that proposed ten-year mandatory minimums for espionage on behalf of named adversaries.

The politics are tangled: the PPP filibustered the original February 26 amendment, and the party is now the source of the proposal to strengthen it, in an Assembly where the opposing Democratic Party holds the majority. The Ministry of Trade, Industry and Energy has meanwhile launched its 2026 technology-protection consulting and security-infrastructure support program — executive-branch alignment with the bill’s direction, even before any vote.

Why this matters beyond Korea

For the AI industry, the message in this law is that the people who build the memory underneath every model now treat their process knowledge the way nuclear states treat weapons designs. The AI buildout has made DRAM and HBM concentration a strategic vulnerability on both sides: for Seoul, a crown jewel to be defended with criminal statutes; for Beijing, a bottleneck to be closed by any means available, including three-times-salary recruitment and hand-copied blueprints.

Two watch-points follow. First, the first prosecution actually charged under Article 98-2 against a corporate beneficiary — not a government — will define the law’s real reach, and will likely come from the CXMT trial pipeline already in Seoul’s courts. Second, if Go’s ten-year-minimum bill advances, expect multinational chip employers to restructure how Korean engineers participate in global R&D programs, and expect defense exporters to demand clearer government-approval carve-outs. The era in which semiconductor knowledge moved with the people who held it, largely unpoliced, ends tomorrow morning in Seoul.