Samsung Engineers Uploaded Proprietary Source Code and Meeting Notes to OpenAI Servers
Samsung Semiconductor
What happened
Within three weeks of Samsung authorising ChatGPT use, engineers uploaded confidential source code, battery equipment test programs, and internal meeting notes to OpenAI's US-based servers, creating both trade secret and GDPR implications.
Root cause
No data loss prevention controls on outbound traffic to AI services; no classification of proprietary code as restricted from third-party AI processing.
Architectural failure
No AI gateway to enforce data classification policies; no zero-trust controls preventing confidential data from reaching external AI endpoints; shadow AI use not governed.
Outcome
Samsung banned ChatGPT enterprise-wide. Three employees faced disciplinary action. Incident became the defining case study for enterprise AI data governance failures.
Architectural Failure Patterns
These pattern categories on aipatterns.com.au describe the systemic failure modes this incident exhibited.
security
ai data classification
aipatterns.com.au
security
ai gateway
aipatterns.com.au
security
zero trust ai pipeline
aipatterns.com.au
security
secrets management for ai
aipatterns.com.au
data
privacy by design for ai data
aipatterns.com.au
data
ai training data governance
aipatterns.com.au
governance
ai policy enforcement
aipatterns.com.au
model management
model access governance
aipatterns.com.au
Cite this incident
https://corporateai.com.au/incidents/samsung-source-code-leak-openai-2023Quick facts
- Date
- 6 April 2023
- Organisation
- Samsung Semiconductor
- Sector
- Other
- Severity
- Critical
- Regulatory bodies
- Unfair Competition Prevention and Trade Secret Protection Act (Korea)GDPRIndustrial Technology Protection Act (Korea)
- Tags
- data-leaksource-codetrade-secretsllmdlpshadow-aienterprise-ai-governance
Related in Other
Air Canada Chatbot Gave Wrong Bereavement Refund Policy
Air Canada · 14 February 2024
DPD Chatbot Jailbroken to Swear at Customer and Criticise DPD
DPD · 19 January 2024
Cruise Autonomous Vehicle Dragged Pedestrian 20 Feet After Collision
Cruise (General Motors) · 2 October 2023
Explore failure patterns
aipatterns.com.au