Federal agents arrested a Saudi national and OpenAI engineer for allegedly hiding an encrypted audio recording device inside a San Francisco executive conference room. Authorities charged Abdulrahman Alfozan with intercepting oral communications following a security sweep that uncovered the thumb-sized bug plugged behind a television.
Abdulrahman Alfozan Arrested and Charged in Federal Court
Federal law enforcement arrested 35-year-old Abdulrahman Alfozan, a Saudi national working as an engineer at OpenAI, on October 9 according to a press release from the US Department of Justice. Alfozan joined the artificial intelligence developer in July 2025, serving on the product team according to prosecutors; a LinkedIn profile under his name identifies him as an engineering lead working on OpenAI’s AI agents platform. Following his arrest Friday, Alfozan made his initial appearance in federal court on Tuesday and remained in custody pending a detention hearing scheduled before U.S. Magistrate Judge Alex G. Tse.
The criminal complaint charges Alfozan with using or attempting to use a device to intercept oral communications as detailed by the U.S. attorney’s office in San Francisco. If convicted, he faces a maximum sentence of five years in federal prison, a $250,000 fine, and three years of supervised release pursuant to federal sentencing guidelines. Federal officials described the matter as a matter of national security.
Discovery of the Encrypted Listening Device in the Executive Suite
The security breach came to light on September 30 at one of OpenAI’s San Francisco buildings when staff inspected an executive conference room. Investigators discovered a thumb-sized device plugged into a USB port on the back of a television and concealed in toilet paper. Federal filings describe the hardware as a thumb-sized development board with a detachable camera sensor, digital microphone, and microSD storage
with the branding of Seeed Studio visible in court evidence.
Prosecutors state that the clandestine recorder was installed on or about September 28 while its stored data remained encrypted and inaccessible. Meetings in that specific conference room involved confidential technical, commercial, and strategic information, including nonpublic information about OpenAI’s technical progress, strategic decisions, capabilities, priorities, government engagements, and commercial relationships.
OpenAI Identifies Employee Who Planted Recording Device
OpenAI stated that it used its own artificial intelligence models to examine the physical device and trace its origin. The company announced the discovery and subsequent firing of the employee through a public statement on social media, coordinating the termination directly with federal investigators to avoid disrupting the active probe.
“We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.”
OpenAI Newsroom, via Business Insider
Surveillance footage placed Alfozan near the conference room on multiple occasions prior to the discovery despite lacking authorization to enter the room or attend leadership meetings. On October 5, security cameras captured Alfozan entering the room and looking behind the television where the first device had been inserted. On that same day, security personnel discovered an unattended bag in another office space containing Alfozan’s wallet, identification, and a second recording device matching the configuration of the first.
Chatbot Queries and Federal Security Concerns
Court documents outline digital preparations linked to the suspect and an associated account. Alfozan allegedly utilized an internal workplace productivity agent to research office locations, conference room capacities, calendars, and executive gathering spots. Meanwhile, a chatbot account attributed to Alfozan’s spouse submitted multiple prompts regarding building, customizing, installing, audio recording, testing, obfuscating, and remote accessing a device
with specific inquiries about how to build a continuous audio recorder
and encrypt the SD card
according to the federal indictment.
Federal law enforcement officials framed the breach in geopolitical terms, with federal law enforcement authorities using the term super intelligence
in their announcement on Alfozan’s arrest.
OpenAI maintained that its internal review found no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data
prior to his termination. The company continues to cooperate with federal investigators as the inquiry proceeds.
Federal prosecutors emphasized that the investigation remains active.
The scheduled detention hearing before U.S. Magistrate Judge Alex G. Tse will determine whether Alfozan remains incarcerated pending trial or faces alternative conditions of release.
OpenAI representatives reiterated that safeguarding proprietary models, technical infrastructure, and personnel remains a priority for the organization.
Further updates on the criminal complaint and additional evidence gathered by the FBI are expected to be unsealed as the legal proceedings advance through the U.S. District Court for the Northern District of California.
Law enforcement officials continue to analyze the encrypted contents of the recovered recording devices.
The Department of Justice emphasized that federal agencies monitoring artificial intelligence must continue to protect critical technology assets from foreign and domestic threats.
