Apple has filed a lawsuit against OpenAI, alleging that confidential company information was improperly accessed through the actions of a former employee after he left the company.

According to the legal complaint, the former Apple engineer allegedly exploited an undiscovered security vulnerability that enabled him to gain access to Apple’s internal network weeks after his employment had ended.

The company claims the incident involved the unauthorized retrieval of sensitive engineering documents and information relating to unreleased products.

The lawsuit identifies the former employee as Chang Liu, who had worked as a systems electrical engineer before joining OpenAI.

Apple alleges that Liu continued to access its internal file repository by taking advantage of a previously unknown authentication flaw.
The company described the issue as a rare security vulnerability and stated that it has since corrected the weakness after discovering the unauthorized access.

Apple also said its internal investigation found no evidence that other former employees exploited the same vulnerability.

According to the complaint, the files allegedly obtained included engineering presentations, technical specifications, project documentation, and information concerning products that had not yet been announced publicly.

Apple further claimed that Liu did not return a company issued laptop immediately after leaving the organization and that he also used another employee’s work device to gain additional access to internal resources.

The company argues that these actions violated its security policies and confidentiality agreements.

The case highlights the importance of strong cybersecurity practices when employees leave an organization.

Technology companies typically disable system access immediately after an employee’s departure to prevent unauthorized access to confidential information.

Security experts note that delays in removing user credentials or addressing system vulnerabilities can expose organizations to significant risks, including data breaches and the loss of valuable intellectual property.

Apple has asked the court for a jury trial as it seeks legal action over the alleged theft of trade secrets. OpenAI has previously stated that it has no interest in acquiring confidential information belonging to other companies.

If the lawsuit proceeds, the case is expected to draw significant attention across the technology industry because of its potential implications for corporate security, employee access controls, and the protection of proprietary information.

Source: TechCrunch