OpenAI Engineer Arrested for Bugging Executive Conference Room with Audio Recorder
Federal prosecutors say Abdulrahman Alfozan hid a recording device in a USB port. He faces charges for intercepting oral communications at the company's headquarters.
Key points
- Abdulrahman Alfozan, an OpenAI engineer, was arrested and charged with using a device to intercept oral communications.
- Prosecutors allege he concealed an audio recorder in toilet paper inside a TV USB port in an executive conference room.
- A second recording device and his identification were found in an unattended bag left in the company offices.
Federal prosecutors announced Tuesday that Abdulrahman Alfozan, a Saudi national and OpenAI engineer, was arrested Friday. He faces charges for using or attempting to use a device to intercept oral communications at the company’s San Francisco headquarters. Alfozan made his initial appearance in federal court Tuesday and remains in custody pending further proceedings related to the alleged surveillance activities.
The complaint filed by the U.S. attorney’s office in San Francisco states that OpenAI personnel discovered the primary recording device on September 30. Investigators determined the device had been installed around September 28. It was plugged into a USB port on the back of a television in an executive conference room and concealed within a roll of toilet paper. The data on the device was encrypted.
View the original post on X
Surveillance and Preparation
Prosecutors allege that Alfozan, who began working as an engineer at OpenAI in July 2025, conducted reconnaissance before installing the bug. He used a productivity tool to query information about building addresses, meeting room capacities, and leadership calendars. He also sought details on the locations of meetings involving outside partners. Surveillance footage shows him near the restricted conference room on multiple dates prior to the discovery, despite lacking authorization to enter.
A chatbot account linked to Alfozan’s spouse, which shared identifiers with his own account, submitted prompts between September 24 and September 30. These queries focused on building, obscuring, and remotely accessing recording devices. Specific questions included how to construct a continuous audio recorder and encrypt an SD card. On September 27 and 28, the account asked about the specific device later found, including its unique MAC address.
Physical Evidence and Charges
The complaint details that Alfozan entered the conference room on October 5 and appeared to look behind the television. On that same day, he allegedly left a bag unattended in a different room. Security personnel opened the bag and found his wallet, identification, and a second recording device similar to the first one hidden in the conference room. The unattended bag contained evidence that linked him directly to the surveillance equipment found in the executive space.
Meetings held in the bugged room frequently involved confidential technical, commercial, and strategic information. According to the complaint, these discussions included proprietary research, product plans, and government engagements. Alfozan was not authorized to attend these meetings or enter the room where the device was concealed. The federal charges stem from the alleged unauthorized interception of these private communications.
What should you do?
Organizations should review physical security protocols for high-value meeting spaces, ensuring that devices like televisions and power outlets are inspected regularly. Employees should be trained to recognize and report unattended bags or suspicious behavior in restricted areas. Companies must enforce strict access controls for executive conference rooms and audit logs for unusual queries in internal productivity tools. Once the vendor provides an update, IT teams should also review policies regarding the use of AI tools for sensitive information.
What to do and how to stay safe: OpenAI
- Inspect physical hardware in executive meeting rooms, such as TVs and audio systems, for unauthorized USB devices or hidden recording equipment.
- Enforce strict access controls and badge requirements for rooms where confidential strategic or proprietary information is discussed.
- Monitor internal productivity tools and chatbot logs for unusual queries regarding building layouts, meeting schedules, or surveillance device construction.
- Establish clear protocols for reporting and handling unattended bags or personal items left in secure office areas.
Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Who was arrested for bugging the OpenAI conference room?
Abdulrahman Alfozan, a 35-year-old Saudi national and OpenAI engineer, was arrested and charged with intercepting oral communications.
How was the recording device concealed?
The device was plugged into a USB port on the back of a television and hidden inside a roll of toilet paper in an executive conference room.
What charges is the engineer facing?
He is charged with using or attempting to use a device to intercept oral communications, according to federal prosecutors.
