OpenAI engineer arrested over alleged hidden conference-room recorder

The FBI arrested Abdulrahman Alfozan, a 35-year-old OpenAI employee and Saudi national, on October 9. According to the U.S. Department of Justice, he was charged with using or attempting to use an electronic, mechanical, or other device to intercept oral communications. He made his initial appearance in federal court on October 13. The charges remain allegations, and he is presumed innocent unless convicted.

The case concerns an audio recorder found inside an OpenAI building in San Francisco. According to the criminal complaint, company personnel discovered the device on September 30 in an executive conference room. It had been inserted into a USB port on the back of a television and concealed in toilet paper. The complaint says the device’s contents were encrypted and that it had been installed on or about September 28.

A room containing sensitive information

The room was used for meetings involving confidential technical, commercial and strategic matters. The complaint says discussions could include proprietary research, product plans, business-development opportunities and nonpublic information about OpenAI’s technical progress, priorities, government engagements and commercial relationships.

The FBI alleges that Alfozan had no authority to access or participate in meetings held there. CCTV footage reportedly showed him near the executive conference room on several dates before the device was discovered. The footage and the device are elements described in the complaint, not findings established by a trial.

The complaint further alleges that Alfozan entered the room on October 5 and appeared to look behind the television. That date was four days before his arrest. On the same day, OpenAI security personnel allegedly found a second, similar recording device in an unattended bag in another room. The bag also contained Alfozan’s wallet and identification.

Searches, accounts and digital clues

Investigators say Alfozan had used a productivity tool to ask about company locations, meeting rooms, room capacities, calendars, leadership locations and meetings with external partners. The complaint presents these searches as part of the evidence gathered in the investigation.

It also refers to a chatbot account associated with Alfozan’s spouse. According to the complaint, that account shared several identifiers and attributes with Alfozan’s own account. Between September 24 and September 30, it allegedly submitted prompts about building, customizing, installing, testing, hiding and remotely accessing an audio-recording device.

The reported prompts included questions about several technical features:

• continuous audio recording;
• customized Wi-Fi connectivity;
• improved audio and live listening;
• encryption of an SD card;
• the custom header and unique MAC address associated with the first device.

The complaint says some prompts specifically concerned the device found in the conference room between September 27 and September 28. The available source does not report any prosecution of Alfozan’s spouse.

OpenAI’s stated response

OpenAI said it takes the protection of its technology, data and employees seriously and treats the matter as nationally important. The company also said it had found no indication that Alfozan accessed or exfiltrated its model weights, source code or customer data.

According to reporting cited by ZDNet France, OpenAI restricted Alfozan’s access, used its own AI models to help identify him, alerted the FBI and dismissed him on the day of his arrest. These points are attributed to the company or to the cited reporting; they are not findings in the criminal case.

The Justice Department framed the prosecution as part of efforts to protect American technology and support National Security Presidential Memorandum 11. Officials described the matter as relevant to national security and counterintelligence. Those statements are government characterizations, while the underlying accusations must still be tested in court.

If convicted, Alfozan could face a maximum sentence of five years in prison, a $250,000 fine and three years of supervised release. The FBI investigation is continuing. An October 19 detention hearing was reported as scheduled by ZDNet France.

What organizations should change

For companies in Mexico and other Spanish-speaking markets, the case is a practical reminder that cybersecurity cannot stop at networks and endpoints. Organizations should control access to executive rooms, inspect connected devices, protect meeting calendars, review unusual physical presence and define a rapid process for preserving evidence. Those measures do not imply guilt in any individual case, but they can reduce the opportunity for unauthorized recording and help organizations respond lawfully when a suspected insider incident occurs.