Apple has revealed a new legal dispute centered on data protection, saying a former employee allegedly used a rare authentication flaw to reach internal files after joining OpenAI.
According to the company's complaint, the employee, identified as system electrical engineer Chang Liu, is accused of accessing shared network folders weeks after leaving Apple. The files reportedly included material tied to unreleased products, engineering presentations, technical specifications, and other proprietary project data.
Apple says the issue involved a previously unknown login vulnerability, often described as a zero-day flaw, which it has since corrected. The company also states that access was removed once the matter came to light and that server logs suggest the activity was limited to Liu.
The filing also points to broader questions around offboarding security, especially how organizations manage credentials, devices, and internal permissions when employees move on to new roles. Apple alleges the former employee did not return a company laptop and did not report the access issue as required.
The case underscores how quickly corporate systems can be exposed when authentication controls are not fully closed. As digital workplaces expand, stronger identity management and faster access decommissioning are becoming central to enterprise security. This development may help shape the next generation of workplace protection standards.
