OpenAI Engineer Arrested by FBI for Bugging Executive Conference Room

The Justice Department announced Tuesday that the FBI has arrested an OpenAI engineer accused of planting a hidden recording device inside an executive conference room at the company's San Francisco offices. The engineer, 35-year-old Saudi national Abdulrahman Alfozan, faces a federal wiretapping charge that carries up to five years in prison.

OpenAI's San Francisco headquarters, where the alleged bugging took place. (File photo)

The details read like a spy novel. According to the FBI's court filings, OpenAI staff discovered a thumb-sized audio recorder wrapped in toilet paper and plugged into the back of a television in a restricted executive conference room on September 30. Its contents were encrypted and could not be recovered. Security footage and a second, matching device found in the engineer's own bag led investigators to Alfozan, who was arrested on October 9 and has been fired by OpenAI. His motive, prosecutors say, is still unclear.

Who Is Abdulrahman Alfozan?

Prosecutors identified the defendant as Abdulrahman Alfozan, a 35-year-old Saudi national who has lived in the United States as a legal permanent resident since September 2020. According to reports, he joined OpenAI in July 2025 as an engineering lead on the company's product team.

Alfozan was arrested on October 9 and made his initial appearance in federal court in the Northern District of California. He faces one count of using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications under 18 U.S.C. § 2511, the federal Wiretap Act. If convicted, he faces a maximum of five years in federal prison, a $250,000 fine, and three years of supervised release.

He remains in federal custody, with a detention hearing scheduled for October 19. Assistant U.S. Attorney Nicolas Parker is prosecuting the case with support from Trial Attorney Kate Tagert of the Justice Department's Counterintelligence and Export Control Section — a sign, legal observers note, that investigators are weighing possible foreign-intelligence dimensions of the case.

How the Bug Was Found

OpenAI personnel found the recording device on or about September 30, plugged into a USB port on the back of a television in an executive conference room, wrapped in toilet paper. Investigators believe it was planted around September 28, the day its firmware was compiled.

The device was identified as a Seeed XIAO ESP32-S3 Sense — a thumb-sized, off-the-shelf circuit board with a microphone and microSD storage, made by a Shenzhen-based company. When OpenAI made a forensic copy of the memory card, none of the files could be recovered or decrypted. The Justice Department and OpenAI have described the contents as encrypted, and prosecutors say it is still unknown whether the device actually captured any conversation.

The room itself is significant. According to the FBI agent's affidavit, the conference room was used for internal leadership meetings and external briefings with government officials and business counterparts. Meetings there, the affidavit says, would "frequently involve discussions of highly confidential technical, commercial, and strategic information, including proprietary research, product plans, and business-development opportunities." Alfozan did not have access to the room; only executives and their assistants could reserve it.

An illustrative image of a small microcontroller audio board, similar in size to the thumb-sized recording device found at OpenAI. (Illustrative photo)

How Investigators Say the Plan Came Together

The FBI's case runs largely on cameras and logs. OpenAI had no camera in the conference room when the device was planted, but CCTV inside the company's offices placed Alfozan near the room on 10 different days in September, according to court documents. On September 28 — the day the device's firmware was compiled — he was there from 2:18 p.m. to 6:30 p.m.

Then, prosecutors say, he got sloppy. After staff found the device on September 30, OpenAI cooperated with the FBI, and by October 5 a camera had been placed inside the room. In a photo included in the complaint, Alfozan was captured on video at 1:20 p.m. that day, checking behind the television where the recorder had been lodged.

That same day, building security discovered an unattended bag in another common area of the company's offices. When officers opened it to identify the owner, they found Alfozan's wallet and ID — and a second electronic recording device with an identical configuration to the one recovered from behind the conference room television. After he reported the bag lost and reclaimed it from lost and found the next day, he sent a written note describing "stolen" items, including a credit card, about $500 in cash, AirPods, a headphone, sunglasses, and a power bank. He did not mention either device.

The FBI affidavit also describes digital breadcrumbs. Prosecutors say Alfozan used a company productivity tool to look up meeting rooms, calendars, and leadership locations — helping him pick the conference room with the most sensitive conversations. And according to the affidavit, a chatbot account linked to his spouse was prompted between September 24 and September 30 about how to build a continuous audio recorder, improve live listening, and encrypt an SD card. The FBI is still investigating, and no motive has been publicly established.

OpenAI's Response: Its Own AI Caught Him

In one of the more striking twists of the case, OpenAI said it used its own artificial intelligence to identify the device, trace its origins, and finger the employee who planted it. The company fired Alfozan, referred the matter to the FBI, and says there are currently "no indications" he accessed or exfiltrated model weights, source code, or customer data.

OpenAI also says it has evidence Alfozan intended to plant more devices across sensitive areas of its offices — though only two devices have been publicly confirmed.

The Saudi connection is drawing attention. The Financial Times reported that Alfozan hosted a roundtable at a Saudi-backed conference during Saudi IT minister Abdullah al-Swaha's visit to San Francisco last month, and that he was listed as a venture partner at Riyadh-based Raed Ventures. Prosecutors have not publicly accused him of spying for any government, and his motive remains officially unclear.

What This Means

Security experts say the case exposes a blind spot at the heart of the AI race. Frontier labs pour enormous resources into defending their models against cyberattacks — but the roadmap for the most valuable technology on earth is discussed in ordinary rooms by ordinary people, and that remains the softest target.

"We tend to picture AI security as chips, weights, and code," Leah Siskind, an AI research fellow at the Foundation for Defense of Democracies, said of the case. "This case is a reminder that the stack also includes the rooms where the roadmap gets discussed and the people who walk into them."

The case lands as governments, including the Pentagon and the New York City Council, are pressing AI companies over how they protect their systems. It also carries a particular irony: the chatbot prompts linked to Alfozan's household reportedly asked the AI how to build the very recorder he allegedly planted.

Whether anything sensitive was actually captured remains the central unanswered question. With the device's contents encrypted and unrecoverable, prosecutors may never know what — if anything — was heard.

The FBI's J. Edgar Hoover Building in Washington, D.C. Federal agents arrested Alfozan on October 9. (File photo)

What Happens Next

Alfozan remains in federal custody ahead of a detention hearing scheduled for October 19, where a judge will decide whether he can be released pending trial. The FBI's investigation continues, including whether any information was recorded, whether it was shared with anyone, and what his motive was.

Legal experts say the charge — a single count under the Wiretap Act — could be only the opening move. If investigators establish a foreign connection or an attempt to transfer stolen trade secrets, more serious espionage or economic-espionage charges could follow.

For OpenAI and its rivals, the case is likely to trigger a quiet overhaul of physical security inside the industry's most secretive buildings. Camera coverage, room access, and insider monitoring are all suddenly under the microscope. In a race where the ideas themselves are worth billions, the company that invented the modern chatbot has learned the oldest lesson in security: sometimes the threat is already inside the building.