OpenAI $105B Ohio AI Data Centre & Azure Fortune 500 Breach

Samantha: Welcome to The State of Tech, The European Edition, Tuesday August eighteen, 2026. I'm Samantha Lawrence.

Bob: And I'm Bob Russell. Today: OpenAI locks in a giant Ohio data centre with a one hundred five billion dollar Nvidia backing, an Apple investor sues the board over alleged AI piracy, a hacker sells Fortune 500 data lifted from Microsoft's cloud, Coherent starts shipping a new silicon carbide material that could cool the next generation of AI chips, and to close out, two things you can actually use today: the free open-source diagram tool Mermaid Chart, and the privacy-focused travel journal Polarsteps Plan. Let's start with Ohio.

OpenAI locks in a giant Ohio AI data centre backed by one hundred five billion dollars from Nvidia.

Samantha: OpenAI is signing a twenty-year lease on what could become the largest single AI data centre in the world, built on the site of a former Cold War-era uranium enrichment plant in Ohio. The project is backed by a one hundred five billion dollar financing commitment from Nvidia, and when fully built out it could reach eight gigawatts of capacity. For context, that is roughly the electricity draw of a mid-sized European country. SoftBank and SB Energy are adding more than four billion dollars in local energy infrastructure, and the developers promise thirty-five thousand construction jobs plus twenty-five hundred permanent positions, without pushing up local energy prices.

Bob: The numbers are staggering, but what really stands out is the exclusivity. This site will be powered exclusively by Nvidia chips, which cements how tightly the AI boom is bound to one supplier. And Nvidia is essentially financing the customer that then buys its own hardware, a circular flow of capital that has started to worry some analysts. Every dollar Nvidia puts in comes back as chip orders. That is great for growth on paper, but it also concentrates risk in a way regulators are only beginning to look at.

Samantha: For Europe the implication is uncomfortable. This single facility will have more dedicated AI compute than most European countries can muster combined. European AI companies increasingly rent capacity from US hyperscalers, which means competitive access, latency, and data sovereignty all depend on decisions made in Ohio or Texas. The European Commission has talked about AI gigafactories, but the funding envelopes announced so far look modest next to a single Ohio project. Expect renewed pressure in Brussels to accelerate the AI Continent Action Plan, and expect more debate about whether Europe can catch up or whether it has to specialise.

Bob: There is also the energy question. Eight gigawatts is not trivial anywhere, and the promise of no local price rises assumes new generation comes online in time. In Europe, similar-scale projects would immediately run into grid connection queues that stretch years. Ireland has already effectively paused new data centre connections around Dublin. So the Ohio deal is not just an AI story, it is a reminder that the physical constraints on AI, power, water, and land, are becoming the real bottleneck. Whoever solves those constraints fastest wins the next round.

An Apple investor sues the board over alleged AI training on pirated books and inflated stock buybacks.

Samantha: An Apple shareholder has filed a derivative lawsuit against the company's directors, alleging they hid the use of pirated copyrighted material to train Apple's AI models. According to the filing, that alleged conduct exposes Apple to billions of dollars in potential copyright liability, and the board went ahead and authorised forty-five billion dollars in stock buybacks at what the suit calls artificially inflated prices. In plain terms, the investor is arguing that the board bought back shares while sitting on a hidden legal bomb.

Bob: This is part of a broader pattern. Several AI companies have already been sued by authors, news publishers and rights holders over training data scraped from books and websites without permission. What is new here is the angle: this is not the copyright holders suing, it is Apple's own investor going after the directors for allegedly failing in their duty to disclose the risk. If that argument gets traction, it opens a second front for every listed company that trained models on questionable data. Boards everywhere will be reading their disclosures again this week.

Samantha: For Europe the timing is significant. The AI Act's transparency obligations for general purpose AI providers are now in force, and they explicitly require disclosure of training data sources at a summary level. European regulators can point at this lawsuit and say, this is exactly why we required transparency. European rights holders, especially publishers and collecting societies, have been pushing for stronger enforcement, and a US derivative case against Apple's directors gives them fresh ammunition in Brussels and in national courts.

Bob: The financial detail matters too. Buybacks at inflated prices is a serious allegation because it suggests the board effectively used cash to prop up a share price that did not reflect the real risk. Whether that argument survives is a legal question, but the reputational damage is immediate. Apple has always positioned itself as the privacy and ethics champion in big tech. An allegation that its AI was trained on pirated material cuts directly against that brand. Expect Apple to fight this hard, and expect other tech boards to update their AI risk disclosures very quickly.

Samantha: Quick interruption. If you listen to The State of Tech regularly, hit that like button and subscribe, that way you'll never miss an episode. Okay, moving on.

A hacker known as TheHatman is selling data stolen from Microsoft Azure tenants of major Fortune 500 companies.

Bob: A threat actor calling themselves TheHatman is reportedly selling data pulled directly from the Microsoft Azure tenants of several Fortune 500 companies. The list of victims being advertised is heavy: McDonald's, Tata Consultancy Services, Vodafone, and InterContinental Hotels Group are all named. What makes this different from a routine data breach is the claim that the data was taken from inside the customers' cloud environments, not from a leaky app or a stolen laptop. If that holds up, it points at either compromised administrator credentials or misconfigured identity permissions at scale.

Samantha: The Vodafone name in particular will get European regulators moving fast. Vodafone is one of the largest telecom operators on the continent, with tens of millions of subscribers across Germany, the UK, Italy, Spain and beyond. Any confirmed leak of subscriber or corporate data triggers GDPR notification obligations within seventy-two hours, and national regulators from the Information Commissioner's Office in the UK to the BfDI in Germany will want answers. IHG operates hotel chains right across Europe, so booking and loyalty data could be in scope too.

Bob: The bigger lesson is about shared responsibility in the cloud. Microsoft secures the Azure platform, but customers are responsible for their own configurations, identity policies, and access controls. Attackers have shifted focus from breaking into the cloud provider to abusing legitimate customer credentials. Security researchers have been warning for years that identity is the new perimeter, and this campaign is exactly what that phrase means in practice. For European CISOs the immediate to-do list is boring but essential: multi-factor authentication everywhere, review conditional access policies, and audit which service principals have privileged rights nobody remembers granting.

Samantha: There is also a supply chain angle. Tata Consultancy Services is a huge IT services provider used by countless European banks, insurers and public bodies. If TCS's own Azure tenant was breached, attackers may have gathered credentials or documentation that give them a foothold into client environments too. That is the nightmare scenario cloud security teams war-game every year, and it is why the incident deserves close reading even by organisations not on the victim list.

Coherent starts sampling silicon carbide substrates that cool AI chips twenty-five percent better.

Bob: Coherent has begun customer sampling of a new three-hundred-millimeter silicon carbide substrate designed specifically to pull heat away from AI chips. The company says the material spreads heat up to twenty-five percent better than the current standard, and, crucially, it is compatible with existing semiconductor manufacturing lines. That last point matters because it means chip makers can adopt the new material without rebuilding their fabs. Coherent is shipping samples to what it calls leading AI semiconductor partners, though it has not named them.

Samantha: This is the unglamorous side of the AI boom, and it may be the most important side. Every new generation of AI accelerators draws more power and produces more heat than the last. Nvidia's newest server racks are pushing well past one hundred kilowatts per rack, and at some point silicon simply cooks itself. Better thermal materials are one of the few levers left that do not involve building a new power plant. A twenty-five percent improvement in heat spreading is the kind of gain that translates directly into higher clock speeds or longer chip lifetimes.

Bob: For Europe this connects to two priorities. First, the European Chips Act is putting billions into semiconductor capacity across France, Germany and the Netherlands. Better thermal substrates could become part of the specification set for those new fabs. Second, European data centre operators are under increasing regulatory pressure to hit efficiency targets under the Energy Efficiency Directive. Chips that run cooler need less cooling, which trims electricity bills and carbon footprints at the same time.

Samantha: The strategic point is that thermal management is now a competitive frontier. Whichever company or country masters the physics of moving heat out of dense AI systems will have an advantage that pure model design cannot match. Coherent's announcement is a sampling milestone, not a shipping product, but it signals where the industry is heading. Expect to see similar announcements from European materials companies in the coming months, because nobody wants to be left buying critical substrates from a single supplier.

Mermaid Chart turns any browser into a shared workspace for building diagrams from plain text.

Bob: To close out, two things you can actually use today. The first is Mermaid Chart, a free browser-based diagram tool that has quietly become a favourite among developers, technical writers, and project managers. Instead of dragging boxes around a canvas, you type a few lines of plain text and Mermaid Chart draws the flowchart, sequence diagram, org chart, or timeline for you. Change a word in the text, the diagram updates instantly.

Samantha: The clever bit is that Mermaid is based on an open syntax that is already supported by GitHub, GitLab, Notion, and lots of documentation platforms. So diagrams you build in Mermaid Chart travel with you, they do not lock you into one vendor. Users report that a flowchart which used to take twenty minutes in traditional tools can be sketched in under two minutes with a few lines of text. It works entirely in the browser, no installation required, and the free tier is generous enough for most personal and small-team use.

Bob: For European users there is a real practical angle. Because the diagrams are stored as text, they are easy to keep in version control, easy to review in a pull request, and easy to include in technical documentation without a proprietary file format. Public sector teams especially appreciate that, because it fits open-standards procurement rules. The pro version adds team collaboration and private storage, but the free tier covers what most people need. Try it at mermaidchart dot com, sketch out a process you were meaning to document, and see how quickly it comes together. The learning curve is genuinely under half an hour.

Samantha: Reviewers particularly praise how it handles complex flows, the kind with lots of branches and parallel paths, without turning into visual spaghetti. If you spend any time explaining processes or systems to colleagues, this one is worth an afternoon.

Polarsteps Plan lets you build a full multi-country trip itinerary without handing your travel data to advertisers.

Bob: The second thing to try is Polarsteps Plan, the trip planning side of the Dutch travel app Polarsteps. Where the main app quietly maps your trip after you take it, Plan lets you build the itinerary before you go. You drop pins on a map, add hotels, ferries, flights, and points of interest, and the app stitches them into a day-by-day plan you can share with travel companions.

Samantha: What makes it different from Google Trips or similar tools is the European privacy stance. Polarsteps is based in Amsterdam, so it operates under GDPR by default, and the company has been explicit that it does not sell user location data to advertisers. Reviewers highlight how well it handles multi-country European trips, where you might combine trains, budget flights, and the odd ferry. The plan syncs to the main app, so when you actually start travelling, your day-by-day itinerary is already there, offline maps and all.

Bob: The free tier lets you plan one trip at a time, which is enough for most people. If you travel more, there is a paid tier that unlocks unlimited planning and richer collaboration features. It works on iOS and Android, and there is a web version for the heavy lifting on a laptop. With autumn breaks and Christmas markets coming up across Europe, it is a genuinely timely find. Fifteen minutes on the couch and you have a shareable plan you can send to your travel companions.

Samantha: One nice touch users mention often: because it is designed for real travel, it handles things like time zone changes and border crossings sensibly, which surprisingly few travel apps get right.

Samantha: Today we covered: OpenAI's giant Ohio data centre backed by Nvidia, the Apple shareholder lawsuit over alleged AI piracy, the Fortune 500 Azure data breach campaign, Coherent's cooler silicon carbide for AI chips, and two things to try yourself: Mermaid Chart and Polarsteps Plan.

Bob: Want to know more or react? Visit stateoftech.eu or email us at info@doorzetters.net.

Bob: State of Tech, the tech world in 15 minutes.