Insider Threat

An insider threat refers to security risks posed by employees, contractors, or other trusted individuals who have authorized access to an organization's systems and data and may intentionally or unintentionally cause harm. In the context of AI governance, insider threats are critical because they can lead to unauthorized access to proprietary AI models, training data breaches, and manipulation of AI systems that could compromise decision-making integrity. Organizations must implement access controls, monitoring systems, and data governance policies to mitigate insider risks while maintaining compliance with regulatory requirements around data protection and AI accountability.

1 item

EnforcementUS2026-07-22

Apple Sues OpenAI Over Trade Secret Theft Linked to Authentication Bug and Coordinated Recruiting, Exposing Insider Threat and Offboarding Failures

Apple filed a lawsuit against OpenAI alleging that a former Apple employee, now an OpenAI hardware engineer, exploited an authentication bug to access and download confidential files after employment ended, and that OpenAI's chief hardware officer orchestrated a broader scheme to extract trade secrets through recruiting. The complaint names more than 400 former Apple employees now at OpenAI and seeks injunctions blocking use of the allegedly stolen hardware information. The case directly implicates access revocation controls, offboarding procedures, and third-party hiring practices as governance failure points.

OpenAI Apple insider threat trade secrets access controls offboarding AI hardware employment controls