CNBC Special: How a Blacklisted Chinese Tech Firm Is Expanding in the U.S. 7/7/26

0:00At Edward Jones, we believe rich is more than caring about the latest and greatest. It's also taking care of what gives your life meaning. That's why your dedicated financial advisor meets you where you are, with personalized financial strategies that help protect what matters, so you can preserve your progress while creating a path forward. The key to being rich is knowing what counts. Let's find your rich together. Edward Jones, member SIPC. Is your business achieving its current strategic goals? Are operations as tight as they should be? Are finances in a realistic place for expansion? These are questions investors ask.

0:40That's why EY Parthenon brings an investor mindset to help executives reinvent business models for long-term growth, reset strategic goals, optimize operations, and get finances in order. Let us help you reimagine your enterprise. EY Parthenon. Solutions that work in practice. not just on paper.

1:05LIDAR, the technology autonomous systems like self-driving cars use to see their surroundings. And one of the world's biggest makers of LIDAR is at the center of a growing national security debate in the U.S. David Lee is a founder and the CEO of Shanghai-based Hesai Technology. Does the Chinese government have any influence over the operations of your company? There is no additional influence other than following the local rules. Hesai is on what's known as the Blacklist. According to the Department of Defense, Hesai is a Chinese military company. While the Blacklist is designed to protect against national security threats, it only bans Hesai and other companies on the list from securing DOD contracts.

1:48There's nothing illegal about using Hesai sensors in non-military applications, potentially exposing the public to those risks. The danger? Government officials and security experts say the Chinese Communist Party could access, hack or manipulate with malware the sensitive data collected by the Lidar, with potentially serious consequences. And yet HESI sensors are all over the country. In autonomous lawnmowers, in airports, including New York's JFK International, and even in humanoid robots, like the one for sale in the U.S. made by Unitary, another Chinese company on the blacklist.

2:38And now HESI's reach is expanding, announcing earlier this year at the Consumer Electronics Show that its LiDAR is one of the sensors automakers can choose to integrate into NVIDIA's latest self-driving systems, a system NVIDIA hopes will power this technological wave sweeping cities across the country. Our vision is that someday every single car, every single truck will be autonomous and we've been working towards that future. In the global race to dominate artificial intelligence, the next frontier is physical AI and all of it depends on high-tech, low-cost sensors like LiDAR to collect the spatial awareness information necessary for the systems to work.

3:19I don't think there's any doubt that Hesai is a Chinese military company with ties to the Chinese government. Craig Singleton is a senior fellow for China at the Foundation for Defense of Democracies, a conservative D.C.-based think tank known for being critical of the Chinese government. His research has focused on the security risks of Chinese-made sensors operating in U.S. systems. What kind of data are we talking about? As Chinese LIDAR sensors become more prolific across the United States, they're going to operate ever closer to our defense nodes, our utility grids, and our transportation hubs.

3:53The data is so sensitive and it's so precise that it could be weaponized by a hostile foreign power if they ever wanted to target our infrastructure. We sat down with Li in his first extended interview about the company's blacklist designation and whether his LIDAR is a security risk. So you're not in the data business at all? There's no way of getting the data? Zero. There's no way of sending it back. Even if the Chinese government asks you for it, you would have to say no, it's impossible. Exactly that. And in the future, if the Chinese government said to you, we want you to manufacture your LiDAR sensors in a different way, would you have to comply?

4:32They've never done that. I won't be able to answer a hypothetical case that don't exist. You can't answer whether or not you'd have to comply with the Chinese government requests? If it's by the law required, we'll follow the rules, right? but we won't be able to respond to something that never happened. It's a hypothetical case that is not something we would do. That doesn't allay concerns over Hesai, which has a third of the global automotive LiDAR market, now estimated to be a$300 to$400 billion market by 2035. Government officials and security experts say LiDAR sensors can be compromised with potentially dangerous consequences.

5:17LiDAR sensors work by firing laser pulses and measuring how long it takes for them to bounce off an object and back to the sensor. The sensor combines thousands of these measurements to create a point cloud, or 3D map of the world, allowing machines like this robotic dog to see and navigate their surroundings. Miroslav Pajek is a professor at Duke University who studies vulnerabilities in these sensors. How vulnerable is LiDAR? It's easy to physically spoof LiDAR. He says any LiDAR sensor can be compromised with malware inserted at the factory during production or through firmware updates. Malware can be difficult to detect since companies deploying the LiDAR usually cannot access the sensor's proprietary source code, and malware can remain dormant until triggered.

6:05If that happens, the malware can trick the sensors into creating a false picture of a vehicle's surroundings. He demonstrated this in real time at Duke's lab. So we have in front of us a LiDAR. Yeah, off-the-shelf state-of-the-art device. It is transmitting laser pulses, and those pulses are used to map the world around us. So pretty much it's building a 3D point cloud, and as you can see, there are two of us in the scene. So we're here. We're here. Nobody else. Okay. What we have here is a triggering device. It is sending a similar laser pulse. It just has an encoded secret key command that triggers the malware that is deployed on that particular device, on that LiDAR.

6:50So when I press this button, it triggers this malware. It will generate the third fake person. You see there's no one here, but we see in the point cloud that there is another person that is joining us. Other demos from Pajic's lab show how objects can be removed from the sensor's data, causing a vehicle to crash. We are preparing now a demo where you fly a drone over it and you can then, like I know, all the vehicles in the area that have that kind of sensor will be triggered immediately. So think of it from DOD applications, you have deployed like a swarm of ground vehicles or drones, and then all of a sudden everything has been disabled or even worse, attacking their own forces.

7:37And in theory, you could apply that to an autonomous vehicle fleet operating on a city street with a drone flying over to trigger the malware. Yes, yes, yes, yes. It's not science fiction. No, no. We can do that in a month. In a statement to CNBC, Hessei wrote its LIDARs are protected against hacking and remain secure at all times. And Hessei's LIDAR sensors have met the standards set by Tov Rhineland and Decra, independent third-party companies that specialize in product testing, safety validation, and cybersecurity assessments. We interviewed a professor at Duke University who studies LIDAR security specifically.

8:18And he showed us how LiDAR sensors can be remotely disabled or manipulated. I don't know the exact setup, but I tend to argue if you do that in a lab setup, obviously you design a system, you can design a system to be vulnerable. That's not very hard. But Michael Robbins says the risks are not hypothetical. Robbins is president and CEO of the Association for Uncrewed Vehicle Systems International, a trade organization that represents companies including U.S. LiDAR competitors. So in 2024, HSAI pushed a firmware update to all of their LiDAR sensors in the world. And there was an error in the firmware that didn't take into account the fact that that was a leap year.

9:04And on February 29th, every LiDAR sensor stopped working, every HSAI LiDAR sensor, because they didn't account for the leap year. In that case, it was by error, but that could also be done intentionally, where every LIDAR in use in the United States could be turned off, or it could be used against us in a nefarious way. So the real-world impact could manifest in a physical accident? It could manifest in chaos. It was our fault. We had a bug in the firmware that we overlooked. Who's to say if this happens with this simple error not accounting for the leap year that it couldn't be done deliberately?

9:45This is the same possibility of any technology product having a bug that would cause negative impact to the user. And the worst case scenario we can see is that this sensor will have an error signal and then the computer will know. Beyond NVIDIA, HESI's U.S. partners include the autonomous trucking companies Wabi and Kodiak, the autonomous vehicle technology company Neuro, Agtonomy, which builds automation software for agricultural vehicles, and robo-taxi developer Zooks, owned by Amazon, with vehicles that are equipped with multiple HESI LIDARs. You can find Zooks vehicles on the Las Vegas Strip, San Francisco, and it's coming to Austin and Miami.

10:35All of these companies operate commercially, and legally, since the vehicles are not used for military purposes. Has Hesai technology been used in the military at all? Our commercial agreement is such that we prohibit our customers to use that in any military application anywhere in the world. But after the LIDAR is shipped, Lee admits there are no guarantees. It's a piece of hardware. A pure piece of hardware that the moment you ship, you actually don't get to fully control. You can legally control, but you couldn't physically control where they end up. The only thing that you could do, you're saying, is to require by contract that your products are not used for military purpose.

11:28But beyond that, there's nothing else that you can do. I think this is the nature of any hardware. Hessei has been fighting the DOD over the blacklist designation since it was put on the list in 2024. 188 entities are on the list as of June. In court, Hessei said its censors are solely for commercial and civilian uses. But the DOD's case tells a different story. I want to go through some of the evidence that was presented by the DOD. We asked Lee about what the judge deemed to be the DOD's strongest piece of evidence, an article from a national security and defense publication. One piece of evidence that was presented is an article from Defense One, which suggests a connection between Hesai and CETC, which is China Electronics Technology Group Corporation, a company founded to supply electronics to the People's Liberation Army.

12:19Is there a connection between the two companies? There isn't a connection. In the IPO filing for your Shanghai debut, it lists CETC as the third largest supplier to Hesai. So there is a connection between the two companies. It's a supplier agreement. They supply components and that's that. Yes, that's it. It's not the other way around. Correct. I just wanted to make it very clear that we did buy from them, but it was from the civilian part, and it was some very fundamental electronics stuff that has nothing to do with the military, nothing to do with communication, nothing to do with data. And those parts we bought in the past that we no longer do.

13:02And just for that reason, to consider that us as a military company, I feel like it's not biological. One of the arguments is that you have facilities, one or more, in the military-civil fusion zone in Jiading District, Shanghai. That's where you're located. It turns out, A, there isn't a clear boundary of that zone. We were like, how come we end up in a civil-military zone? The answer is we didn't. The zone. We have neighbors like American companies, like European companies next to us. So it's almost like, for lack of a better analogy, just because Pentagon is in Virginia, you think Virginia is a place full of military.

13:47Anybody operating in the state of Virginia becomes military. Last year, Hesai lost its lawsuit against the DOD and remains on the blacklist. It's appealing the decision. Beyond the courtroom, the company is also facing scrutiny. In July 2025, the Prague Security Studies Institute, a nonprofit, non-governmental public policy organization, published a white paper on Hesai. Among the findings, Hesai's LiDAR sensor appeared on a military vehicle during a 2023 Chinese military TV program. I want to show you a couple of pictures because security experts will say Hesai LiDAR has appeared on military vehicles.

14:25Let me show you this one. This is from a university competition in 2023. So, well, it sets a sign on it. So I know that is, even though we don't have direct involvement with military entities, we shipped probably hundreds of thousands of LIDARs like this and the millions more that don't look like this. So there is a possibility that they end up somewhere that we are completely unaware of in the aftermarket. Lee says Hesai has no way to communicate with the sensors once they are shipped out, and the sensors send data directly to the company using them, not to Hesai. Are you familiar with the Land Unmanned Systems Challenge?

15:11That's the competition that this is part of. This one? I am unfamiliar with the concept, and we're not involved in that. This is a competition hosted by the Army Equipment Department and organized by the Army Research Institute. It involves military players and military research institutes. Would that be a competition in which HESAI LIDAR would be applied on a vehicle that would not be considered a military application? You have to refer to the official definition of an event that we are not directly involved in. I understand you see a photo of our product in such a competition, but again, I think it's unfair or irresponsible for me to comment on that nature of the competition.

16:01Sure. You know, we did look at the Ministry of Defense website for the description of this particular competition, and they said the goal is, quote, to thoroughly implement President Xi's strategic thinking on military-civilian integration and create a new pattern of deep military-civilian integration. Would it be problematic in your view if your LIDAR sensors were used in this sort of competition, which clearly promotes military-civilian fusion? I think a better question is that, A, whether we design such a sensor to be of such a purpose. The answer is definitely no, right? Have we done our part to prevent that from happening?

16:43The answer is yes. But questions about how and where Chinese-made LIDAR sensors are being used come alongside broader concerns about Beijing's oversight and its potential to access data collected by Chinese companies. The SEC requires China-based companies to disclose the risk of Chinese government intervention or control. In its SEC filings, HESAI has disclosed that the Chinese government has significant oversight in regulating our operations and may influence or intervene in our operations at any time. Singleton says that in part, that means HESAI can be compelled to share data collected by these LIDAR sensors with the Chinese government.

17:24There is no way in your mind that Hesai could be operating as a respectable, dependable company that will not transmit information to the Chinese government. Whether they want to transmit that information or not isn't a question. It's mandated by law. Still, Li says Hesai has no data to share. So where does the data live? Is it on the sensor? It's only on the computer? Does it go anywhere else? So first, what I do know is it definitely doesn't live in my sensor because we don't have the capability to store that. Is it physically impossible? Even if we wanted to, it's physically impossible to do that because our device just don't have the memory to store that.

18:08Of course, again, it's by design because I don't see why we need that. Do you have safeguards in place with NVIDIA to make sure that all security concerns are addressed? One part is how they handle their data, which honestly is their safeguard that we don't get to control. Or they don't even have to tell us because it's really up to them how to make sure the data is in a safe place. We asked NVIDIA more than a dozen questions, including whether it was aware that HESAI had been blacklisted and what safeguards are in place to protect the data the sensors collect. The company did not respond to our questions and instead provided the following statement.

18:53Automakers worldwide demand an open, vendor-agnostic reference architecture so they can select components that are best for the markets they serve to build the safest cars. Our NVIDIA Drive Hyperion architecture provides that flexibility, ensuring that American industry competes worldwide consistent with all regulatory and commercial requirements. Neuro, Agtonomy, Zoox and Unitry did not respond to CNBC's request for comment. In a statement, Kodiak wrote, HESI does not have access to the data from their sensors or any data produced by Kodiak's autonomous system. A spokesperson for Wabi wrote, We have rigorous data security protocols in place and thoroughly vet all third-party hardware.

19:36There is a race right now to get autonomous vehicles on the road. Shouldn't we emphasize speed at this point? It's a tale as old as time with Chinese tech. We told ourselves the same thing on Huawei. Chinese telecommunications giant Huawei made equipment widely deployed by U.S. companies until the Federal Communications Commission forced companies to rip and replace the equipment from their networks in 2021. This only after the FCC called Huawei a national security threat because the equipment could potentially be used for surveillance, and the DoD placed it on the blacklist. It was the cheapest option, and those systems operated well.

20:15And now the U.S. government and governments around the world are spending tens of billions of dollars to rip out those compromised Chinese systems and replace them with Western alternatives. I've seen that movie once. I don't know why we would need to repeat it again on LIDAR. Besides Huawei, other Chinese companies have been found to be national security risks, only after making their way into U.S. homes and businesses. Shenzhen-based drone maker DJI and the Wi-Fi router maker TP-Link both sold popular consumer goods. Both were blacklisted by the Pentagon for their ties to the Chinese government, like Hisai.

20:51DJI sued the DoD, but a federal judge ruled there was substantial evidence that DJI contributes to China's defense industrial base. DJI is appealing the decision. Ultimately, the FCC banned both DJI and TP-Link from selling new device models in the U.S. because their products pose a national security risk. What's really needed are exhaustive national security reviews of Chinese LiDAR systems to determine, frankly, are they safe? Has that happened? No, it hasn't. Why not? I think we're just catching up to the fact that this is one of the latest new emerging technologies that policymakers have to grapple with.

21:32On Capitol Hill, lawmakers are pushing to address these risks. Proposed legislation would phase out the use of Chinese-made LIDAR in the United States and prevent the Chinese Communist Party from exploiting a fast-growing, strategically critical technology. The sensors and the ability to transmit information is a huge concern. Republican Congressman John Mulinar of Michigan is chairman of the House Select Committee on China, which it says is committed to working on a bipartisan basis to build consensus on the threat posed by the Chinese Communist Party. In May, Mulanar introduced legislation to ban Chinese vehicles from U.S.

22:11roads. We spoke to the CEO and founder of Hesai, and he said that his sensors are not capable of storing data. There is no data to transfer back to the Chinese Communist Party, even if asked. Are you satisfied with that response? I am not. When you think of connected vehicles, when you think of all this technology, these back doors, we've seen it in robots. That's another area where China is trying to dominate that technology. And we've seen back doors in robots that would transmit information back to Chinese communist interests. It seems like a daunting task then to keep up with all the Chinese technology that is making it into the United States and trying to assess what the national security threat may or may not be.

22:55for these technologies. It's true because so many of these are developing technologies and, you know, AI is, you know, talked about every day. America has been in a leadership role in this, but we've viewed this as a sort of an open process where technologies are shared. And ultimately that works when everybody is abiding by the same rules. But if you're abiding by the rule that says it's whatever the interest of the Chinese Communist Party, that's a very different partner relationship. NVIDIA's CEO says, I want this system to be in every single car. If I'm NVIDIA's CEO, my job is to sell technology, make money for my shareholders.

23:36I am thinking I've got to operate within the law, but I'm not focused on national security. And so that's something we need to be concerned with, and often legislation takes a while to catch up. And no proposed legislation or existing laws prohibit blacklisted companies from being listed on U.S. stock markets or prevent U.S. shareholders from investing in them. If a U.S. company wants to buy and incorporate foreign sensors into their autonomous vehicle platforms, can they check before they are installed to make sure that there is no malware on that device? If I have my product and the secret sauce is the IP that I really want to protect from you.

24:24So I try to protect the IP in a way that you cannot fully figure out what is happening on the device. That also provides me a way to hide some of the things that you should not be potentially aware of. Experts say the decision to use foreign components often comes down to price. HESI's LiDAR sensors can cost less than$200 per unit at scale. By comparison, U.S. LiDAR manufacturer Ava told CNBC that its automotive sensors cost in the few hundreds of dollars per unit. A 2025 automotive LIDAR report by the Yol Group, a market analysis firm, says Chinese firms like Hesai are dominating due to cost, scale and government support.

25:12Critics will say that you're able to sell your sensors at a low price or a lower price than a lot of the competitors because the Chinese government supports you in some way, whether it be subsidies or preferential treatment, tax breaks, you name it. Is any of that true? So see, that's an accusation with no evidence. First, that's just imagination. When you see a player being able to build sensors at a much more affordable level, you just assume that they get help. But why don't you look at the finest, right? So we did. According to Hesai's 2025 annual filing with the SEC, the company received Chinese government subsidies, preferential tax rates of 15 percent versus the standard 25 percent, preferential borrowing rates below benchmark, and a tax break, which lets it deduct 200 percent of its research and development costs.

26:08In a statement to CNBC, Hesai wrote, governments worldwide commonly offer tax incentives to technology enterprises as a standard measure to stimulate innovation, adding that these incentives are broadly available to all qualifying companies in China, both domestic and foreign. Hesai also wrote no government organization, including the Chinese government, holds any equity stake in Hesai. We've spoken to LiDAR experts who say that the data from a single LiDAR sensor or two LiDAR sensors, it's not enough because usually for an autonomous vehicle, it's a myriad of sensors, of cameras that are collecting information and together they make that picture.

26:50But the data from one sensor is not that useful. The technology is evolving so fast that it's difficult to predict what those risks will be in the future.