Apple filed a lawsuit against OpenAI in July 2026, accusing the AI company of stealing trade secrets after a former Apple employee allegedly downloaded sensitive internal files weeks after leaving the company to join OpenAI.
The former employee, Chang Liu, a system electrical engineer, allegedly exploited what Apple describes as a “rare, previously unknown authentication bug” — classified as a zero-day vulnerability — to access Apple’s cloud-based network storage after his employment had ended. Apple says it had no opportunity to patch the flaw before Liu allegedly used it.
According to Apple’s complaint, Liu downloaded “dozens of Apple’s confidential hardware-related files” over several weeks while already working at OpenAI. The files reportedly contained details about unreleased products, engineering presentations, technical specifications, and proprietary project data. Apple also alleges Liu failed to return his Apple-issued work laptop and did not delete the program that enabled his access.
Apple further alleges that Liu misused the Apple credentials of Yu-Ting Peng, an acquaintance who was still employed at Apple at the time, using her company-issued laptop while he was no longer an employee. Peng later also went to work at OpenAI. In one message cited in the complaint, Liu allegedly wrote to Peng: “LOL, I found out I can access the [network storage], so funny.”
Apple says it has since fixed the authentication bug and terminated Liu’s access after discovering the breach. The complaint notes the vulnerability could have allowed “a few other” people access, but that server logs showed only Liu exploited it.
The suit was filed in the U.S. District Court for the Northern District of California in San Jose, with Apple seeking a jury trial. OpenAI has previously stated it has “no interest in other companies’ trade secrets.” The case could proceed to trial this year.
The incident highlights the security risks organizations face when departing employees retain access to internal systems, whether through oversight or, as Apple alleges here, an undiscovered software flaw.
Source: TechCrunch