Federal prosecutors in San Francisco charged OpenAI product engineer Abdulrahman Alfozan, 35, a Saudi national, with using an electronic device to intercept oral communications after the company found a hidden audio recorder in an executive conference room. He was arrested Oct 9 and made his initial appearance today (per DOJ). OpenAI says it caught the device, used its own models to understand it, and referred the case to the FBI.
What was found. On or about Sept 30, OpenAI staff found Recording Device 1 plugged into a USB port on the back of a television in an executive conference room at a San Francisco office. Prosecutors say it had been concealed in toilet paper, installed on or about Sept 28, and its contents were encrypted. On or about Oct 5, security opened an unattended bag belonging to Alfozan in a different room and found Recording Device 2, similar to the first, along with his wallet and ID (per DOJ complaint summary).
What OpenAI says wasn't taken. "At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data," OpenAI said in its newsroom post. TechCrunch reports the company described the device as having advanced encryption, audio monitoring, and a data-transfer mechanism meant to evade monitoring. Alfozan started in July 2025 on the product team (per OpenAI via TechCrunch).
Why prosecutors care. FBI Director Kash Patel said the scheme was to "capture sensitive communications about the company's super intelligence technology." The complaint says meetings in that room regularly covered highly confidential technical, commercial, and strategic topics, and that Alfozan had no authority to be in those meetings. CCTV allegedly shows him near the room before discovery and looking behind the TV on Oct 5. A chatbot account tied to attributes matching his spouse allegedly asked about building, encrypting, and remotely accessing a continuous audio recorder in the days around the install (per DOJ). Motive beyond the recording charge, and whether any audio left the building: Undisclosed.
What we'd do this morning. This is physical insider risk at a frontier lab, not a SaaS CVE. If you run executive or board spaces: inventory what's plugged into displays and UC gear, treat unexpected USB devices as evidence, and pair that with badge and CCTV review for people who have no meeting on the calendar. For AI and R&D shops specifically, assume "no customer data taken" still leaves roadmap, partner, and government-engagement talk as the prize — log who can book or enter those rooms, and don't let productivity bots answer building-map and meeting-room questions without a human gate. If convicted, Alfozan faces up to five years and a $250,000 fine (per DOJ).