Taiwanese prosecutors indicted nine people over an alleged scheme to illegally move Nvidia B300 GPU servers to China by exploiting Supermicro’s Taiwan sales channel, falsifying end-user information, and routing shipments through intermediaries in Indonesia, Japan, and Hong Kong. Investigators said Flying Tiger Tech posed as the end user for a 130-unit order placed through Albatron Technology, while colocation arrangements with Chief Telecom were used to help the deal pass inspection even though the site reportedly lacked the capacity to host the hardware. Prosecutors allege the operation also relied on insider assistance tied to Nvidia Taiwan and Supermicro Taiwan.
Authorities said 74 units were transferred in early 2026, producing roughly $21.21 million in profit, before a later 56-unit shipment was flagged over export-permit requirements. The case has drawn wider attention as an example of how AI server export controls can be bypassed through fraudulent paperwork and opaque intermediary firms, prompting increased scrutiny from US authorities and renewed debate over stricter compliance checks for cloud and hardware supply chains. Investigators also said they uncovered a separate fraud scheme involving Albatron’s general manager, a Supermicro manager, and another electronics company over installation work that was allegedly never performed.

See the reporting duties and controls this puts on the clock.
7 events from the most recent confirmed update back to the earliest known activity.
Of the first 74 approved Nvidia B300 units, 16 were reportedly sent directly to China in January 2026. Additional units were allegedly routed through Indonesia and through Japan and Hong Kong before reaching China.
Representatives from Supermicro and Nvidia reportedly inspected the Chief Telecom colocation site presented to support Flying Tiger Tech's order and found it operational but incapable of supporting 130 Nvidia B300 servers due to insufficient racks, power, and bandwidth.
Taiwan's Keelung District Prosecutors' Office indicted nine people over an alleged scheme to smuggle Nvidia B300 GPU servers to China through Supermicro's Taiwan sales channel. Prosecutors said the operation used whitelist abuse, false end-user claims, insider assistance, and transshipment through third countries to evade export controls.
Supermicro previously announced that it had terminated several employees following an internal investigation into U.S. smuggling allegations. The company said the probe found no evidence that senior management knew of the matter or that controlled products were sold to banned entities.
Prosecutors said Albatron's general manager also confessed in the separate installation-work fraud case involving Albatron, a Supermicro manager, and the electronics firm. The alleged participants split proceeds from the bogus NT$39 million billing.
In a separate fraud scheme tied to the case, the head of a small electronics firm reportedly turned himself in, confessed, and implicated other participants in exchange for leniency. Prosecutors said the scheme involved billing Albatron NT$39 million for installation work that was never performed.
The alleged smuggling scheme began to unravel when 56 additional units declared for Japan were flagged after customers requested a strategic high-tech commodities export permit. Prosecutors say the defendants then filed for an export permit using fake mockups of Supermicro's website, and the servers were ultimately blocked from leaving Taiwan.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
arstechnica.com
Open sourcetomshardware.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.