Key Takeaways

  • Apple is suing OpenAI for alleged theft of trade secrets.
  • A former Apple employee is accused of exploiting a bug to access confidential data.
  • The lawsuit highlights challenges in protecting sensitive information post-employment.
  • Apple has fixed the security vulnerability in question.

Allegations Against OpenAI

Apple has initiated legal action against OpenAI, alleging that the company engaged in the theft of trade secrets. The lawsuit claims that OpenAI improperly obtained confidential data while recruiting former Apple employees.

Exploitation of a Security Bug

According to the complaint, a former Apple system electrical engineer named Chang Liu allegedly took advantage of a rare authentication bug to download sensitive files from Apple’s network. This incident reportedly occurred weeks after Liu transitioned to OpenAI.

This bug, categorized as a zero-day vulnerability, was unknown to Apple at the time of the incident, leaving the company unable to address it before it was exploited. Apple has since rectified the issue and terminated Liu’s access once the breach was discovered.

Details of the Breach

The complaint indicates that Liu accessed numerous confidential hardware-related files over several weeks while employed at OpenAI. These files contained detailed information about unreleased products, engineering presentations, and proprietary project data.

Apple claims that Liu did not return his Apple-issued laptop, which he had used to access the company’s network. He allegedly also misused the access of another former employee, Yu-Ting Peng, while she was still with Apple.

Unauthorized Access and Company Response

In February 2026, Liu reportedly attempted to access Apple’s network storage, which houses confidential engineering files and project documentation. He discovered that he could still access this repository due to the authentication vulnerability.

Apple’s complaint states that Liu did not report the bug to the company, nor did he return the laptop. He also failed to delete the program that enabled his unauthorized access. The specific program used has not been disclosed, but such tools are often employed by employees for remote access to sensitive data.

Legal Proceedings

In a message to Peng, Liu expressed amusement at his ability to access the network, stating, “LOL, I found out I can access the [network storage], so funny.”

Apple has filed the lawsuit in the U.S. District Court for the Northern District of California and is seeking a jury trial. OpenAI has previously stated that it has no interest in acquiring trade secrets from other companies.

If the case proceeds, it could begin later this year.