Apple filed a lawsuit against OpenAI accusing it of stealing trade secrets and proprietary information while recruiting former Apple employees. The complaint centers on Chang Liu, a former system electrical engineer who allegedly exploited a rare, previously unknown authentication bug weeks after joining OpenAI. This zero-day vulnerability enabled unauthorized access to Apple’s shared network folders and cloud-based file repository.
According to the suit filed in the U.S. District Court for the Northern District of California, Liu downloaded dozens of confidential hardware-related files over several weeks. The materials included detailed information about unreleased products, engineering presentations, technical specifications, and proprietary project data. Apple also alleged Liu failed to return his company-issued laptop and misused the access of acquaintance Yu-Ting Peng, then still an Apple employee, by using her work laptop.
Apple stated the bug could have allowed a few others access but that server logs showed only Liu exploited it to steal data after leaving. When he discovered the access, Liu messaged Peng “LOL, I found out I can access the [network storage], so funny,” and neither reported the issue nor deleted the program enabling access. Apple has since fixed the vulnerability and cut off the access upon learning of the breach.
The case underscores ongoing challenges companies face in fully decommissioning departing employees’ credentials to prevent data exfiltration. OpenAI has said it has no interest in other companies’ trade secrets. Apple has demanded a jury trial, and proceedings could begin later in 2026 if the case moves forward.