Apple claims former employee destroyed evidence of data theft

Apple has confirmed that it possesses evidence indicating a former employee deliberately destroyed data that could have proven a data‑theft incident after learning he was under investigation. The company said the employee, who had previously worked in a role that involved handling sensitive information, deleted files and logs that were later recovered through forensic analysis. Apple’s statement notes that the evidence was obtained through internal audit procedures and that the employee’s actions violated the company’s data‑security policies.

According to Apple, the investigation was initiated after an anomaly was detected in the company’s data‑management system, prompting a review of access logs and user activity. The employee in question was notified of the investigation and subsequently took steps to remove or alter records that could have linked him to the breach. Apple’s legal team is currently assessing the extent of the damage and the potential regulatory implications, while the company has reiterated its commitment to maintaining robust data‑security protocols.

Apple’s spokesperson said the company will cooperate fully with any regulatory inquiries and that it is reviewing its internal controls to prevent similar incidents. The company has not disclosed the identity of the employee or the specific data involved, citing privacy and legal considerations. The incident underscores the importance of audit trails and the challenges organizations face in safeguarding digital evidence.