OpenAI Engineer Arrested for Planting Recording Device in Conference Room

His own company's AI models helped catch him.
OpenAI used its technology to identify and trace the recording device back to the engineer who planted it.
Mark

Why would someone working inside OpenAI need to plant a recording device? Wouldn't he already have access to conversations?

Mimi

That's the crucial question the complaint doesn't answer. He was an engineer, yes, but maybe not one with access to the specific meetings or rooms where sensitive technology discussions happened. Or maybe he needed audio proof of something for someone else.

Luke

Right—and we don't know if he was acting alone or on behalf of another party. The complaint is silent on motive and on whether there's a larger operation here.

Mark

The company says their AI models helped identify him. How does that work exactly?

Mimi

They used their own language and analysis tools to understand what the device was, where it came from, and trace it back to him. It's a bit poetic—OpenAI's own technology caught the person trying to spy on OpenAI.

Luke

But we should be careful about the word "trace." The complaint shows surveillance footage of him near the room multiple times and later checking the device. That's the real evidence. The AI analysis helped, but the video is what actually places him there.

Mark

He left a bag with another recording device in it. Does that suggest panic, or was that intentional?

Mimi

It reads like panic to me. An unattended bag with your ID and wallet and a second device—that's not a careful operative. That's someone who either got spooked or made a mistake.

Luke

Or it could have been a dead drop, a way to pass something to someone else. We're speculating. The complaint doesn't say what he intended with that second device or the bag itself.

  • A sophisticated recording device, hidden in toilet paper and plugged into a television's USB port, was found in an OpenAI conference room on September 30th — a quiet alarm sounding inside one of the most sensitive workplaces in tech.
  • Surveillance footage revealed the suspect had entered the restricted room at least six times without authorization, and was later caught on a newly installed camera checking the exact spot where the device had been planted.
  • Before his arrest, Alfozan left an unattended bag elsewhere in the building containing his wallet, ID, and a second recording device — signs of an operation that may have unraveled faster than planned.
  • OpenAI moved swiftly to terminate the employee, confirm no model weights, source code, or customer data had been stolen, and credit its own AI tools with helping identify the device and trace it back to its source.
  • Federal prosecutors have charged Alfozan with intercepting oral communications; the FBI investigation remains active, with the motive and any possible outside collaborators still publicly unexplained.

Inside one of the world's most closely watched artificial intelligence companies, a hidden microphone tucked behind a television set raised a question as old as power itself: who is listening, and why? On September 30th, OpenAI discovered a covert recording device in a San Francisco conference room, leading to the federal arrest of a 35-year-old Saudi engineer named Abdulrahman Alfozan the following week. The breach appears to have been contained before any proprietary technology was taken, yet the episode reminds us that the race to understand and possess transformative knowledge does not always unfold in the open.

On September 30th, someone at OpenAI made an unsettling discovery: a recording device, wrapped in toilet paper and wedged into a USB port on the back of a conference room television. The company turned to its own AI models to help identify the equipment and trace its origin — and within days, had a name.

That name was Abdulrahman Alfozan, a 35-year-old Saudi national working as an engineer at the company. Federal prosecutors charged him with using an electronic device to intercept oral communications. He appeared in court Tuesday without clear legal representation, and the criminal complaint filed in San Francisco offered no explanation of his motive or whether he was acting alone.

What the complaint did reveal was a deliberate pattern. Surveillance footage showed Alfozan near the conference room on at least six occasions during the month before the device was found — each time without authorization. After OpenAI installed a new camera in the room, it captured him entering and checking behind the television, precisely where the device had been hidden.

Investigators also found that he had searched a company productivity tool for building addresses, room layouts, capacities, and calendar schedules. And before his arrest, he left a bag unattended in another part of the building — inside it, his wallet, his ID, and a second recording device.

OpenAI terminated Alfozan and confirmed that no sensitive data — no model weights, source code, or customer information — had been accessed or stolen. The company credited its AI systems with helping contain the breach and pledged full cooperation as the FBI's investigation continues.

On September 30th, someone at OpenAI discovered a recording device hidden inside a conference room—a sophisticated piece of equipment concealed in toilet paper and wedged into a USB port on the back of a television. The company's own AI models helped trace it back to its source. Within days, they had identified the person responsible, reported the finding to federal authorities, and watched as the FBI moved to make an arrest by Friday of the following week.

The suspect is Abdulrahman Alfozan, a 35-year-old Saudi national who worked as an engineer at the company. Federal prosecutors charged him with using an electronic device to intercept oral communications—a federal crime. In his first court appearance on Tuesday, Alfozan faced the charge without immediate clarity about his legal representation. The criminal complaint, filed in federal court in San Francisco, does not explain what he intended to do with any conversations he might have captured, or who, if anyone, he was working with or for.

What the complaint does show is a pattern of access. Surveillance footage from inside OpenAI's offices revealed that Alfozan had been near the conference room on at least six separate occasions during the month before the device was discovered, despite having no authorization to enter that space. After the company installed a camera in the room following the initial discovery, that new footage captured him entering the space and checking behind the television—the exact location where the recording device had been planted. The timing suggests he was verifying his work or attempting to retrieve it.

The investigation also uncovered other suspicious activity. Alfozan had used a company productivity tool to search for information about OpenAI's building addresses, the layout of meeting rooms, room capacities, and calendar schedules. Before his arrest, he left an unattended bag in a different part of the building containing his wallet, identification, and a second recording device—suggesting either carelessness or a hastily abandoned operation.

OpenAI moved quickly to contain the damage. The company terminated Alfozan and issued a statement saying there were no indications he had inappropriately accessed or stolen model weights, source code, or customer data. The device itself appears to have been the extent of the breach attempt. The company credited its own AI models with helping to understand what the device was and trace its origin, then worked with federal investigators to support the prosecution. The FBI's investigation remains ongoing, with OpenAI pledging continued cooperation as agents and prosecutors pursue the case further.

We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier.
— OpenAI spokesperson
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data.
— OpenAI statement
Contattaci Domande frequenti