OpenAI engineer charged over a bug hidden in an executive conference room — a recorder wrapped in toilet paper
On October 13, 2026, the US Justice Department announced charges against OpenAI engineer Abdulrahman Alfozan, 35, a Saudi national and US permanent resident, for attempting to intercept oral communications. A recorder wrapped in toilet paper was found on September 30 in the USB port of a TV in an OpenAI executive conference room; a second device turned up in a bag he left on October 5. OpenAI says its own AI models helped analyze the device. He faces up to five years in prison and a $250,000 fine.
The three lines
- Incident — recorder plugged into a TV's USB port around Sept 28, found in a security sweep Sept 30
- Evidence — CCTV visits, and a spouse-linked chatbot account asking how to build and encrypt a recorder
- OpenAI — used its models for forensics; says no sign weights, source code or customer data were taken
Key questions
- OpenAI recording device conference room arrest
- **An OpenAI engineer was arrested on October 9, 2026 and charged with hiding a recorder in an executive conference room.** | Date (PT) | Event | |---|---| | Sept 24-30 | Spouse-linked chatbot account asks about building, hiding and encrypting a recorder (alleged) | | ~Sept 28 | Device 1 installed in TV USB port | | Sept 30 | Found during a room sweep; access gradually restricted | | Oct 5 | Camera shows him checking behind the TV; second device found in his bag | | Oct 9 | Arrested and fired | | Oct 13 | First court appearance; DOJ announcement | | Oct 19 | Detention hearing scheduled |
- Alfozan OpenAI charges penalty
- **One count: using or attempting to use a device to intercept oral communications.** | Item | Detail | |---|---| | Max prison | 5 years | | Max fine | $250,000 | | Supervised release | 3 years | | Prosecutor | Northern District of California, with DOJ National Security Division support | | Status | Allegations in a complaint; no conviction |
- How did OpenAI use AI in the bugging investigation
- **OpenAI says staff used its models to identify the device and analyze its storage before handing the case to the FBI.** | Stage | What the models did (per OpenAI) | |---|---| | Discovery | Identified what the device was and where it came from | | Forensics | Analyzed storage images and data changes | | Outcome | FBI referral, arrest on Oct 9 |
A covert recorder turned up in the room where OpenAI's executives meet, and an OpenAI engineer has been charged with planting it. The US Justice Department said on October 13, 2026 that Abdulrahman Alfozan, 35, a Saudi national and US permanent resident since 2020 who joined OpenAI in July 2025, was charged with attempting to intercept oral communications. He was arrested on October 9 and fired the same day.
Two things make the case unusual. The location: an executive conference room where, according to the complaint, OpenAI routinely discusses proprietary research, product plans and government engagements. And the tooling on both sides: OpenAI says it used its own AI models to analyze the device, while prosecutors say the suspect asked a chatbot how to build one.
1. What happened — a recorder wrapped in toilet paper
According to the DOJ release and the San Francisco Standard's account of the complaint, the first device was plugged into the USB port on the back of a television around September 28. It was wrapped in toilet paper and its storage was encrypted. OpenAI's technical surveillance countermeasures team found it on September 30 during a routine sweep. It was built on a small Seeed XIAO ESP32-S3 Sense development board; OpenAI called it sophisticated and designed to evade detection.
The company added a camera to the room. On October 5 it recorded Alfozan entering and looking behind the TV. That day he left a bag in a printer area on another floor; security found his wallet, ID and a second, similar recorder inside. When he retrieved the bag the next day, prosecutors say, he reported other items stolen but did not mention the device.
2. The evidence prosecutors cite, and OpenAI's response
| Evidence or action | Detail | Source |
|---|---|---|
| CCTV | Near the restricted room on about six occasions in September | Complaint (AP) |
| Productivity tool queries | Building addresses, room capacities, calendars, executive and partner meeting locations | DOJ |
| Chatbot queries | Spouse-linked account sharing his identifiers asked how to "build a continuous audio recorder" and "encrypt the SD card," Sept 24-30 | DOJ, SF Standard |
| Device match | Sept 27-28 queries referenced the device's unique MAC address | SF Standard |
| Company response | Access restricted from Sept 30, leave, firing timed with the FBI arrest | OpenAI |
| Damage | No indication model weights, source code or customer data were taken | OpenAI |
The chatbot record is the striking part: if the allegations hold, the suspect's questions to an AI became evidence against him. The public filings do not say whose chatbot it was. On the other side, OpenAI says employees used its models to work out what the device was, and investigators used them to analyze forensic images of its storage. OpenAI described the case as an example of AI helping to counter sophisticated threats.
3. Why it is being treated as national security
The DOJ's counterintelligence and export control section is assisting, and the release ties the case to National Security Presidential Memorandum 11.
| Official | Remark |
|---|---|
| Jay Clayton, Director of National Intelligence | Winning the global superintelligence race is a national security prerogative |
| Kash Patel, FBI Director | Protecting American SI innovation is essential to economic strength |
| Craig Missakian, US Attorney | "For us it is a matter of national security." |
Still, prosecutors have not alleged any link to a foreign government, and the single charge is eavesdropping, not trade-secret theft or espionage. For context on how AI labs guard their know-how, see our explainer on distillation attacks and our report on Apple's trade-secret suit against OpenAI.
4. What remains open
- October 19 detention hearing will decide whether he stays in custody; his lawyer has not commented.
- Motive: not formally established; no foreign link alleged.
- Recordings: encrypted; whether anything was captured or sent out is unknown. OpenAI says it has evidence he intended to bug other sensitive spaces.
- The chatbot: which company's product he allegedly used is not stated.
Sources
- US Department of Justice — Saudi National Arrested for Installing Surreptitious Audio Recording Device at OpenAI
- San Francisco Standard — OpenAI engineer arrested for allegedly bugging executive conference room
- ABC News (AP) — Employee arrested after listening device found in OpenAI conference room
- The Neuron — OpenAI says AI helped investigate a hidden office recorder