Apple filed a lawsuit Friday against OpenAI, seeking injunctions after a former employee allegedly exploited an authentication bug to steal confidential information. Chang Liu, who left Apple for OpenAI in January 2026, discovered the bug on February 9 that allowed him to access Apple's shared network folders using an Apple-issued laptop he should have returned. Apple alleges Liu downloaded dozens of confidential hardware files over several weeks while developing hardware for OpenAI, rather than reporting the vulnerability. The lawsuit claims OpenAI conspired with former Apple employees to take an unlawful shortcut in launching AI-powered devices comparable to Apple's iPhone.
Apple Files Lawsuit Against OpenAI Over Alleged Trade Secret Theft
Apple filed the lawsuit seeking several injunctions blocking OpenAI from using confidential information allegedly stolen by former employees. According to Apple's complaint, OpenAI conspired with former Apple employees as part of a scheme to launch a line of AI-powered devices as marketable as Apple's iPhone. The lawsuit demands steep penalties after Apple discovered what it described as a rare bug that temporarily allowed the poached employee to maintain access to confidential information on Apple servers for weeks after his termination.
Former Engineer Exploited Authentication Bug to Access Confidential Files
Liu spent eight years working on some of Apple's most sensitive product development programs before joining OpenAI in January 2026. On February 9, he discovered an authentication bug unknown to Apple at the time. Rather than report the bug to Apple, Liu allegedly seized the opportunity to download files detailing various aspects of Apple's business. Apple alleged that over several weeks, while developing hardware for OpenAI, Liu surreptitiously accessed and downloaded dozens of Apple's confidential hardware-related files, including voluminous, detailed information about unreleased products, engineering presentations, technical specifications, and proprietary project data. Liu allegedly downloaded a presentation on Apple's complex circuit boards that Apple claimed would be invaluable to anyone developing hardware. Some files were expressly labeled as confidential, Apple claimed.
Apple Discovers Bug Through Internal Message Investigation
Apple found the bug while investigating internal messages between a then-current employee, Yu-Ting "Alyssa" Peng, and Liu. Among the messages Liu apparently left on his Apple-issued work laptop, he wrote "LOL" and "I found out I can access the [network storage], so funny." In a footnote, Apple confirmed that the bug was quickly fixed after they found Liu's messages and that it did not appear to be widely exploited. Although Apple is still investigating, server logs show that, unlike Liu, the few other users affected by this bug do not appear to have accessed or stolen Apple's confidential information, the lawsuit said.
FAQ
What did Apple accuse OpenAI of in the lawsuit filed Friday?
Apple accused OpenAI of conspiring with former Apple employees to use confidential information allegedly stolen through an authentication bug. The lawsuit seeks injunctions blocking OpenAI from using the confidential information and alleges OpenAI attempted to take an unlawful shortcut to launch AI-powered devices comparable to Apple's iPhone.
How did Chang Liu access Apple's confidential files after leaving the company?
Liu discovered an authentication bug on February 9 that allowed him to access Apple's shared network folders using an Apple-issued work laptop he should have returned after leaving Apple for OpenAI in January 2026. He allegedly downloaded dozens of confidential hardware files over several weeks, including information about unreleased products, engineering presentations, technical specifications, and proprietary project data.
