US Court Detains Ex-OpenAI Engineer Over Alleged Spy Device and Royal Ties
A federal magistrate denied bail for Abdulrahman Alfozan, citing flight risk due to his alleged communications with Saudi royalty.
Key points
- Abdulrahman Alfozan was detained after being accused of planting a recording device in an OpenAI executive conference room.
- Court filings reveal Alfozan maintained frequent WhatsApp contact with a member of the Saudi Royal Family in 2025 and 2026.
- Prosecutors argue Alfozan is a flight risk due to alleged financial support and recruitment efforts by the Saudi royal.
A U.S. federal magistrate denied bail for Abdulrahman Alfozan, a former OpenAI engineer, on Monday, ordering his continued detention in connection with espionage allegations. The court cited significant concerns regarding flight risk, stemming from alleged financial support and recruitment efforts by members of the Saudi Royal Family, according to court filings released by U.S. prosecutors.
Prosecutors revealed in a Sunday filing that Alfozan, 35, engaged in frequent communications via WhatsApp with an unnamed Saudi royal throughout 2025 and 2026. The defendant last contacted this individual on October 5, 2026, just four days before his arrest. The filing alleges the royal repeatedly attempted to recruit Alfozan, stating that Saudi Arabia needed him more than the United States, to which Alfozan reportedly agreed.
Alleged Espionage Tactics and Preparations
The U.S. Department of Justice stated last week that Alfozan was arrested for allegedly inserting a stealthy audio recording device into a USB port on the back of a television in an OpenAI executive conference room in San Francisco. According to The Hacker News, Alfozan modified the device to prevent data transfer between it and the television, while encrypting the content stored on its microSD card to conceal the recordings.
Alfozan joined OpenAI as an engineer around July 2025, with an annual base salary of $385,000. Before installing the device, he allegedly used an OpenAI productivity agent to identify which meeting rooms leadership and executives used for external partner meetings. He also spent considerable time near the target conference room and used his wife’s personal ChatGPT account to research how to build a continuous audio recorder that saves compressed WAV files.
Legal Proceedings and Flight Risk
Alfozan faces charges for using or endeavoring to use an electronic device to intercept oral communications, a violation that carries a maximum possible sentence of five years in prison. Prosecutors argued that Alfozan possesses ample resources and foreign support, constituting a substantial flight risk. This follows earlier reporting by Threat Times on October 19, 2026, which noted that a federal magistrate had initially ordered Alfozan to remain in custody due to these same concerns.
The court filings indicate that the Saudi royal member asked Alfozan when he planned to leave OpenAI, to which the defendant responded that he would not depart until his stock vested. This detail underscores the alleged financial motivations and the prolonged nature of the recruitment attempts described by prosecutors in their request for detention.
What should you do?
Organizations should review access controls for physical spaces containing sensitive executive discussions, ensuring that USB ports on display devices are disabled or physically secured. Security teams should monitor for unusual queries in internal AI productivity tools that attempt to map executive schedules or meeting room usage patterns. Companies should also enforce strict device management policies that prevent unauthorized hardware from being connected to internal network endpoints or conference room equipment.
What to do and how to stay safe: OpenAI
- Audit conference room hardware to disable unused USB ports and prevent unauthorized device connections.
- Monitor internal AI tool usage for queries related to executive schedules, meeting locations, or sensitive personnel data.
- Implement physical security checks for executive meeting spaces to detect hidden recording devices or unauthorized hardware.
- Review employee access logs for unusual patterns of presence near sensitive areas outside of normal work hours.
Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What specific charges is Abdulrahman Alfozan facing?
Alfozan is charged with using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications.
Did Alfozan work for OpenAI before the alleged incident?
Yes, Alfozan joined OpenAI as an engineer around July 2025 with an annual base salary of $385,000.
Why did the court deny bail to Alfozan?
The court denied bail because prosecutors argued Alfozan is a flight risk due to alleged ample resources and support from Saudi government entities.
