Insider IP theft is when employees take trade secrets with them. This cybersecurity news briefing covers OpenAI's October 14, 2026 court filing — allegedly 100+ secret files — and gives you a 60-second offboarding check.
Key figure: The global average cost of a data breach was $4.44 million in 2025 (IBM, Cost of a Data Breach Report 2025).
— Ingenious AI security check.
Most offboarding is a checklist, not an investigation — and this case shows the gap. OpenAI's October 2026 filing alleges a former employee took over 100 secret files, some allegedly destined for a competitor. The check below covers the controls that matter: access-revocation timing, download anomaly alerts, and exit interviews that actually ask questions.
When someone with legitimate access — usually an employee — takes trade secrets or confidential files, often when leaving for a competitor.
In a court filing on October 14, 2026, OpenAI accused an unnamed former employee — who had previously worked at Apple, spent six months at OpenAI, then went back to Apple — of sending more than 100 highly confidential files about at least one unreleased OpenAI device to personal accounts. The files allegedly included detailed images of the device and highly confidential engineering and manufacturing data. OpenAI says the last transfer happened on June 2, 2026 — the employee's final day — and that the employee later presented OpenAI's product plans to Apple's senior leadership. Apple says it found no evidence supporting the claims and will cooperate on remediation. None of this is proven — it is an allegation in an escalating trade-secret war (Apple sued OpenAI first, in July). But the alleged method is textbook: bulk exfiltration to personal accounts on the way out the door. This 60-second data breach check tests whether your offboarding would catch it. Free, no signup.
Answer honestly. Here, "Yes" is the safe answer.
This self-assessment is informational — it reflects the alleged facts of the OpenAI/Apple filing and standard insider-threat controls. It is not legal advice, and none of the case's allegations have been proven in court.
Whether or not OpenAI's allegations hold up, the alleged method — bulk transfers to personal accounts during the final days of employment — is a textbook insider-threat pattern. The controls that would catch it (same-day deprovisioning, DLP on personal-account uploads, forensic access logs, structured offboarding) are the same controls every company with trade secrets needs. Lawsuits make headlines; missing offboarding checklists make victims.
The full story, with Apple's response, from CNN's Hadas Gold (October 14, 2026).
OpenAI alleges a former employee took more than 100 confidential files — including work related to an unreleased device — and that some material may have reached a competitor. The claims are allegations in a court filing, not proven findings.
No — nothing has been proven. These are allegations in an October 2026 court filing, and the accused has the right to respond. Treat every claim on this page as alleged until a court decides otherwise.
The classic controls: revoking access the moment someone resigns, alerting on unusual download volumes before departure, and an exit process that inventories what the person could access — not just collecting the laptop.
Apple told CNN it has found no evidence to support the allegations, that it has strict policies to prevent new employees from using confidential information from previous workplaces, and that it would work with OpenAI to remediate any OpenAI information found on Apple's systems. In an October 12 letter made public in another filing, Apple's lawyers said two personal phone numbers OpenAI identified as recipients did not match the number the employee uses for Apple work.
The filing refers to at least one unreleased OpenAI device under development but does not publicly describe what it is. OpenAI has not disclosed specifics, so treat any claims about the device's identity or features as speculation.