Apple Escalates Trade Secret Claims Against OpenAI
Apple is intensifying its trade secrets lawsuit against OpenAI, exposing significant internal security gaps at the iPhone maker in the process. In a recent legal filing, Apple requested a preliminary injunction to halt OpenAI from developing an AI device or other products that might be based on Apple's proprietary technology.
The core of Apple's argument is that the alleged theft of intellectual property extends much further than the former employees named in its original complaint. Apple is now seeking expedited discovery from OpenAI, the OpenAI foundation, and 'io'—the hardware startup co-founded by former Apple lead designer Jony Ive.
The filing specifically names senior systems engineer Chang Liu and Chief Hardware Officer Tang Yew Tan as targets for discovery. Furthermore, Apple claims its ongoing investigation has identified 11 additional former employees who may be involved in the case or serve as witnesses.
The specific allegations outline a troubling timeline of data exfiltration. According to Apple, one former employee took screenshots of confidential documents related to an unannounced product right before an interview at OpenAI. Another allegedly met with Liu and previously named OpenAI employee Yu-Ting Peng prior to Peng’s OpenAI interview to discuss proprietary Apple information. Most revealingly, Apple claims that multiple former employees now working at OpenAI only reached out to return their Apple-issued work devices after the initial lawsuit was filed.
OpenAI's Defense Points to Poor Security Procedures
OpenAI has firmly rejected these claims while simultaneously criticizing Apple's administrative competence. In a public blog post, the AI developer dismissed the injunction request as "based on false information and completely unnecessary," explicitly stating that they "do not have, nor want, any of their trade secrets."
Instead of just denying the IP theft, OpenAI's response highlights operational missteps by Apple. OpenAI claims Apple previously emailed the wrong person regarding the matter after confusing two similar surnames, and lied about having discussions with OpenAI's general counsel.
More importantly from a systems perspective, OpenAI argues that the "residual access" allowing these former employees to log into Apple's systems post-employment was the direct result of poor security procedures on Apple's part.
What This Means for SMB Operations
The spectacle of two industry titans battling over frontier AI hardware obscures a mundane but critical lesson for small and mid-sized businesses: your data security is only as strong as your offboarding process. The fact that a heavily resourced enterprise like Apple reportedly failed to revoke system access and retrieve physical hardware before employees departed for a rival highlights a universal operational vulnerability.
For SMBs adopting AI and building automated workflows, this case serves as a stark warning. As you integrate automation into your business, data often becomes more centralized. API keys, shared SaaS accounts, and centralized databases are required to make automated processes run smoothly. If your provisioning and de-provisioning processes rely on manual checklists or human memory, you are leaving the door open for data leakage. When an employee leaves, "residual access" is a liability you cannot afford.
Protecting your operations requires treating offboarding as a strict, automated workflow rather than a human resources afterthought. By connecting your HR platform directly to your identity and access management tools, you can ensure that the moment an employee's status changes to terminated, their access to all company systems, cloud applications, and AI platforms is instantly and automatically revoked.
Furthermore, automated tracking for physical assets ensures that laptops and phones—which often contain cached confidential files or active login tokens—are returned promptly, rather than sitting with a former employee until a lawsuit prompts their return.
You do not need to be building competitive hardware to have proprietary data worth securing. Implementing automated, airtight access controls protects your business from losing its competitive edge to poor administrative hygiene.