iPhone Source Code Was Leaked by Low-Level Apple Employee

Earlier this week, source code for iBoot, a core component of the iPhone's operating system, leaked on GitHub. The code was old, for a version of iOS 9, and it was quickly pulled from GitHub after Apple issued a DMCA takedown notice, but it left many wondering how such sensitive code ended up publicly available.

To answer that question, Motherboard got in touch with unnamed sources who were involved in the leak and investigated screenshots, text messages, and more, to determine just how it happened.

ios 9 ipad iphone
As it turns out, the code originally came from a low-level Apple employee who took the code from Apple in 2016 to share with friends in the jailbreaking community. This employee wasn't unhappy with Apple and didn't steal the code with malicious intent, but instead was encouraged by friends to obtain the code to benefit the jailbreaking community.

The person took the iBoot source code--and additional code that has yet to be widely leaked--and shared it with a small group of five people.

"He pulled everything, all sorts of Apple internal tools and whatnot," a friend of the intern told me. Motherboard saw screenshots of additional source code and file names that were not included in the GitHub leak and were dated from around the time of this first leak.

The original group of five people who were provided with access to the code didn't intend to share it, but it somehow got out. From one of the original people involved:

"I personally never wanted that code to see the light of day. Not out of greed but because of fear of the legal firestorm that would ensue," they said. "The Apple internal community is really full of curious kids and teens.I knew one day that if those kids got it they'd be dumb enough to push it to GitHub."

The code began circulating more widely in 2017 and picked up in popularity late in the year before ending up on GitHub this week. Many in the jailbreaking and iPhone research communities attempted to stop sharing, but the major public leak couldn't be avoided.

According to the unnamed people who spoke to Motherboard, what leaked wasn't the "full leak." "It's not the original leak-it's a copy," said one source.

Following the leak, Apple confirmed the authenticity of the code in a statement to MacRumors and pointed out that it's for a three-year-old operating system that's been replaced by iOS 11 and is in use only on a small number of devices.

"Old source code from three years ago appears to have been leaked, but by design the security of our products doesn't depend on the secrecy of our source code. There are many layers of hardware and software protections built into our products, and we always encourage customers to update to the newest software releases to benefit from the latest protections."

The iBoot code leak should not be of concern to the average user because Apple has many layers of protection in place, like the Secure Enclave, and does not rely on source code secrecy alone to keep its users safe. The leak could, however, make it easier for people to locate vulnerabilities to create new jailbreaks.

Popular Stories

AirPods Pro Firmware Feature

Apple Releases New Firmware for AirPods Pro 3, AirPods Pro 2 and AirPods 4

Tuesday October 7, 2025 11:27 am PDT by
Apple today released new firmware designed for the AirPods Pro 3, prior-generation AirPods Pro 2, and the AirPods 4 models. The firmware has a build number of 8A358, up from 8A356. There's no word on what's include in the updated firmware, but the prior 8A356 update added iOS 26 features to the AirPods Pro 2, AirPods Pro 3, and AirPods 4 with ANC. The software introduced better audio quality ...
iOS 26

Everything New in iOS 26.1 Beta 2

Monday October 6, 2025 3:54 pm PDT by
Apple released the second beta of iOS 26.1 and iPadOS 26.1, introducing useful changes to alarms, multitasking on the iPad, and more. There are also subtle tweaks to some of the Liquid Glass design elements as Apple continues to refine iOS 26. Alarms and Timers Alarms set using the Clock app now have a slide to stop button rather than a tap to stop button on the Lock Screen. To snooze an...
john ternus on stage

Gurman: Major Apple Leadership Shakeup Impending With John Ternus as Next CEO

Monday October 6, 2025 6:21 am PDT by
Apple is entering its most significant leadership transition in more than a decade as multiple senior executives prepare to depart and CEO Tim Cook begins to shape the company's next generation of leaders, according to Bloomberg's Mark Gurman. In the latest edition of his "Power On" newsletter, Gurman explained that Jeff Williams, who was viewed as Cook's potential successor for several...
ios 26 1 slide to stop

Apple Fixes Alarms in iOS 26.1

Monday October 6, 2025 11:56 am PDT by
With the second beta of iOS 26.1, Apple updated the design of alarms set on the iPhone, making them harder to dismiss than before. Stopping an alarm in iOS 26.1 beta 2 requires a new Slide to Stop gesture rather than a simple tap. You can continue to tap to snooze an alarm, but if you want to turn it off entirely, you need to use a swipe. Transitioning from a tap to a slide gesture to...
ipad mini 7 feature blue

iPad Mini 8 on the Way: Expected Features and Release Timeline

Monday October 6, 2025 5:05 am PDT by
A new iPad mini is "absolutely" on the way, according to Bloomberg's Mark Gurman. So what should we expect from the successor to the iPad mini 7 that Apple released a year ago? Processor and Performance Apple is working on a next-generation version of the iPad mini (codename J510/J511) that features the A19 Pro chip, according to information found in code that Apple mistakenly shared in...
tag heuer made for iphone

New TAG Heuer Smartwatches Now 'Made for iPhone'

Wednesday October 8, 2025 8:41 am PDT by
TAG Heuer today announced the Connected Calibre E5 smartwatch, now featuring "Made for iPhone" certification as the watchmaker abandons Google's Wear OS. Three years after launching the Calibre E4, the Connected Calibre E5 comes in two case sizes: 45mm and a new, more compact 40mm. They are powered by the Qualcomm Snapdragon 5100+. The 45mm model features a 1.39-inch AMOLED display, while ...
macbook pro pink

M5 MacBook Pro Could Launch in October as M4 Model Faces Supply Constraints

Monday October 6, 2025 3:23 pm PDT by
Supplies of the 14-inch M4 MacBook Pro model appear to be constrained amid rumors that an upgraded M5 model could launch as soon as this year. As noted by Bloomberg's Mark Gurman, custom configurations of the M4 MacBook Pro model have a delayed shipping date and will not be delivered to customers until October 23 to 28. The restricted supply could be an indication that Apple is planning to...
iphone 17 magsafe silicon rings 1

Apple Modifies In-Store MagSafe Stands to Prevent iPhone 17 Marks

Wednesday October 8, 2025 4:41 am PDT by
Apple has quietly added a protective silicone ring to its in-store MagSafe charging stands following reports of marks appearing on some iPhone 17 series display models, according to Consomac. The apparent move comes after Apple last month confirmed that worn MagSafe chargers in retail stores were causing what appeared to be scratches on the iPhone 17 Pro and iPhone 17 Pro Max. There have...
iOS 26 Feature

iOS 26.1 to iOS 26.4 Will Add These New Features to Your iPhone

Wednesday October 1, 2025 1:26 pm PDT by
iOS 26 was released last month, but the software train never stops, and iOS 26.1 beta testing is already underway. So far, iOS 26.1 makes both Apple Intelligence and Live Translation on compatible AirPods available in additional languages, and it includes some other minor changes across Apple Music, Calendar, Photos, and Safari. More features and changes will follow in future versions,...

Top Rated Comments

rpmurray Avatar
100 months ago
Five people can keep a secret if five of them are dead.
Score: 27 Votes (Like | Disagree)
OldSchoolMacGuy Avatar
100 months ago
BREAKING NEWS: Android source code leaked, possibly by Google themselves!!

https://source.android.com

This isn't a big deal. If anything it means finding some remaining open holes which can then be patched. All Linux is open source. There aren't issues there because of it. If anything it means others can help to find vulnerabilities which can then be corrected.

iOS 9 was released 3 years ago. A LOT has changed in the source code since then and this isn't even the entire source as it can't be compiled.
Score: 22 Votes (Like | Disagree)
sputnikv Avatar
100 months ago
good way to ensure you don’t get hired by another tech giant
Score: 12 Votes (Like | Disagree)
lec0rsaire Avatar
100 months ago
What a scumbag. There's really no other word to describe someone who would do this. You're given an opportunity to work for one of the best companies in the industry or the world for that matter and you betray them in the worst way possible. This isn't a careless employee leaving an iPhone 4 prototype at a bar. Malicious intent or not, this is a criminal act and I hope this guy is prosecuted to the fullest extent of the law.

It's one thing when jailbreakers find exploits on their own through countless hours of hard work and another thing when an employee violates the trust given to him by his employer. Thankfully the impact of this is limited and the security of most users won't be compromised but Apple will have to be a lot more careful with the people they hire from now on and what they're able to leave the premises with.
Score: 10 Votes (Like | Disagree)
hsotnicam8002 Avatar
100 months ago
Thief - jail.
Score: 7 Votes (Like | Disagree)
iOSFangirl6001 Avatar
100 months ago
Yikes. I wonder if he's going to be fired.
Pink Slip Time

The funny thing is that his friends push him to do it and then they expose him.
Funny how “friends” can throw friends under the bus huh?
Also peer pressure may have been a red flag as to how good of “friends” they really were

“Dude come do this thing that’s possibly illegal or could get us sued”

Not well thought out on the part of the friends
Score: 7 Votes (Like | Disagree)