The Company That Can't Separate Files From People Sues for Stolen Secrets

The obvious story is about theft. Apple says OpenAI stole its trade secrets. OpenAI says Apple is getting this wrong. The court will decide who's lying.

The less obvious story is about a company that built its internal tools to make data inseparable from the people who use it - and is now trying to prove that people took things they weren't supposed to.

Most people think this lawsuit is a straightforward case of industrial espionage. It started that way. Apple filed suit on July 10 in California federal court, accusing OpenAI of orchestrating a systematic campaign to steal hardware trade secrets. The complaint names OpenAI, two former Apple employees, and io Products - the company OpenAI bought from Jony Ive for $6.5 billion last year to build consumer hardware.

The allegations against the two individuals are specific. Chang Liu, a former system electrical engineer, allegedly kept his Apple work laptop after leaving, exploited a previously unknown authentication bug to re-enter Apple's network storage in February 2026, and downloaded dozens of confidential hardware files - specs on unreleased products, engineering presentations, proprietary project data. He messaged a former colleague: "LOL, I found out I can access the network storage, so funny." Tang Tan, a former Apple vice president who left to become OpenAI's chief hardware officer, allegedly directed Apple employees still on the payroll to bring actual Apple parts to OpenAI interviews for "show and tell" sessions.

Apple called the conduct the tip of the iceberg and has since sent legal preservation letters to about 40 more former Apple employees now at OpenAI. More than 400 former Apple employees work at OpenAI, according to the complaint.

Then The Information published reporting on August 3 that complicates the picture in a way the filing doesn't address. Apple's own iCloud policy created a structural problem that makes it hard to tell whether files followed employees out the door on purpose or by design.

Apple gives employees 2TB of company-funded iCloud storage and encourages them to connect it to their personal Apple ID. The rationale is consistent with Apple's product philosophy: don't make people manage two accounts on one device. An iPhone supports only one primary Apple ID for full iCloud access. Want separation? Buy a second phone.

The side effect is that workplace files - shared via Pages, Keynote, or iMessage - can end up stored in accounts Apple doesn't fully control. Files placed outside the "Apple Work" folder (which does disappear when employees return their badges) remain in the employee's personal iCloud after they leave. More than half a dozen former Apple employees told The Information they accidentally retained confidential documents, including product launch event plans. Some continued receiving notifications when those files were updated.

Apple told The Information that the OpenAI lawsuit doesn't concern documents shared through or stored in iCloud. The company says it doesn't pursue former employees merely because files accidentally remain in their personal accounts. The two named defendants - Liu and Tan - are accused of conduct well beyond accidental retention.

That distinction is supposed to be clean. In practice, it's the hardest kind of thing to prove.

The question for Apple's legal team is whether it can disentangle intentional theft from a system architecture that was designed to make files stick to people. If 400-plus former employees are at OpenAI and Apple's own tools made it easy for workplace documents to follow any of them through personal iCloud accounts, the discovery process is going to produce a lot of former employees who possess confidential Apple files for reasons that have nothing to do with malice. Apple will need to sort the deliberate actors from the accidental ones - while defending a system whose whole point was to blur that line.

OpenAI seized on the ambiguity. On August 3, it published a blog post titled "Apple is getting this wrong." The post claims Apple's outside lawyers emailed the wrong person after confusing two Asian last names, that a claimed discussion with OpenAI's general counsel never happened, and that former employees only accessed Apple information because Apple asked them to after failing to reach them through normal channels. Whether any of this is true will be decided by discovery and deposition. The point of the post is to make the situation look incompetent rather than criminal.

The market hasn't treated this as a big deal. Apple stock hit $317, an all-time high, shortly after the lawsuit was filed. As of this week it's trading around $303. The stock is up roughly 50% over the past year. The put/call ratio has been well below 1, suggesting investors see little downside risk. The numbers make sense on a surface level - Apple is a $4.7 trillion company with services revenue of $31 billion in its last quarter at a 76.7% gross margin. A trade-secret lawsuit, even a messy one, isn't going to dent that.

The more interesting question is what the iCloud problem reveals about Apple's organizational design. Apple is famously secretive. Information compartmentalization is baked into its culture. Yet the very tools that keep Apple employees productive - the same tools Apple sells as a unified ecosystem - make it structurally difficult to enforce that secrecy when people leave. The Apple Work folder was supposed to solve this. It solved half the problem. Files stored inside it disappear on offboarding. Files shared outside it don't.

This isn't an Apple-specific problem. It's the tension between two competing priorities: a system that makes collaboration seamless and a system that makes exfiltration impossible. You can optimize for one. Getting both is harder than most organizations admit.

I suspect Apple's lawsuit will still win - at least in part. The allegations against Liu (exploiting a zero-day bug, keeping a work laptop) and Tan (directing current employees to bring parts to interviews) describe deliberate acts that go beyond whatever iCloud left behind. But the iCloud findings mean the "tip of the iceberg" framing is going to be harder to sustain than Apple hopes. If discovery shows that dozens of OpenAI-hired former employees possess confidential files because of how iCloud works - not because they were stealing - it doesn't exonerate the intentional actors. It does complicate the narrative that OpenAI itself orchestrated a broad campaign.

The test for investors isn't whether Apple will win the case. It's whether this lawsuit reveals a vulnerability in Apple's operating model that the market hasn't priced in. A company that can't prove who took what - not because it lacks evidence but because its own systems were designed to make files inseparable from the people who touch them - is fighting on ground it built itself.

The thing to watch isn't the court date. It's whether Apple changes how its internal tools handle data offboarding. If the company doesn't, every batch of departing employees carries the same risk. If it does, it confirms the problem was real enough to fix. Either answer tells you something about how serious Apple takes its own tools.