OpenAI insider case: DOJ charges engineer Abdulrahman Alfozan with planting a hidden audio recorder in an executive conference room; OpenAI says it used its own models to trace the device and sees no sign of model-weight, code or customer-data theft
The US Department of Justice said on 13 October 2026 that Abdulrahman Alfozan, 35, a Saudi national who had worked as an OpenAI engineer since July 2025, was arrested on 9 October and charged with using or trying to use a device to intercept oral communications. According to the complaint, OpenAI staff found a covert audio recording device on 30 September plugged into a USB port behind a television in an executive conference room in one of its San Francisco buildings. The device was wrapped in toilet paper, had been installed around 28 September and stored encrypted data. The room was used for meetings on proprietary research, product plans, business relationships and government work. Prosecutors say camera footage showed Alfozan near the room several times though he was not invited to meetings there; that he searched an internal productivity tool for office, meeting-room and executive schedule details; that a chatbot account linked to his spouse asked how to build and hide recording devices, including prompts naming the device's custom header and MAC address; and that on 5 October he returned to check behind the television, the same day security staff found a second similar recorder in a bag he left in another room. OpenAI said it used its own models to analyse the device and identify the employee, fired him and referred the case to the FBI, and that it has no sign he accessed or took model weights, source code or customer data. The charge carries up to five years in prison.
- Product
- OpenAI offices, San Francisco (insider physical surveillance)
- Versions
- n/a — incident
- Exploited in Australia?
- unknown
- Patch to
- Organisations holding sensitive research: include physical technical surveillance in insider-threat programs. Sweep boardrooms and executive spaces regularly, restrict and monitor USB ports on room displays and AV gear, log badge access to sensitive rooms, and correlate unusual searches of schedules or floor plans with HR and security signals. Practitioner page: /knowledge/insider-threat.
Primary: US Department of Justice — Saudi national arrested for installing surreptitious audio recording device at OpenAI (13 Oct 2026) · BleepingComputer — OpenAI engineer arrested for allegedly planting spy device in office (13 Oct 2026)