Identity · AI Security
OpenAI engineer accused of bugging executive meeting room remains in custody
A former OpenAI engineer is accused of hiding a recording device in an executive conference room. He remains in custody as US authorities investigate possible spying and flight risk.
Ross GrantUpdated 2 min read
The short version
A former OpenAI engineer is accused of hiding a recording device in a meeting room used by company executives. US authorities arrested him and say he may try to leave the country, partly because of support from the Saudi government. OpenAI says no customer data or code was stolen. The case is ongoing, and the engineer remains in custody.
By the numbers
- 2recording devices found at OpenAI officesWired
- 5 yearsmaximum prison sentence if convictedThe Telegraph
- $250,000maximum fine if convictedThe Telegraph
- $2.2 millionprofit-sharing package received by the engineer at OpenAIWired
What happened?
A former OpenAI engineer, Abdulrahman Alfozan, was arrested after the company found a hidden recording device in an executive conference room. US prosecutors allege he attempted to bug confidential meetings and may be a flight risk due to his ties to Saudi Arabia. Alfozan remains in custody while the investigation continues. OpenAI says there is no evidence that sensitive code or customer data was stolen.
Who is affected
The case centres on Abdulrahman Alfozan, a former engineer at OpenAI, the company behind ChatGPT. He worked at OpenAI from July 2025 until his dismissal in early October 2026. The alleged bugging targeted an executive conference room used for confidential meetings. OpenAI has stated there is no indication that sensitive code or customer data was stolen, but the incident has raised concerns about internal security and the risk of insider threats in high-profile technology companies [Wired (opens in a new tab)][The Telegraph (opens in a new tab)].
How the attack worked
According to US prosecutors, Alfozan allegedly placed a covert audio recording device behind a television in the executive conference room, concealing it in a wad of toilet paper. Surveillance footage reportedly showed him near the room on several occasions, despite not being cleared to be there. OpenAI discovered the device in late September 2026 and linked it to Alfozan. A second device was later found in a bag he left at the office, which also contained his ID and wallet. Authorities say they found components for recording devices at his home and photos of other OpenAI rooms on his phone. Some of the government's evidence includes alleged conversations with an AI chatbot about setting up listening devices. It is unclear what, if anything, was recorded, as the device's data was encrypted [Wired (opens in a new tab)][The Telegraph (opens in a new tab)].
The response
OpenAI called in the FBI after discovering the recording devices. Alfozan was fired and arrested soon after. In court, US prosecutors argued he was a flight risk, citing his ties to Saudi Arabia, a one-way ticket to Riyadh, and support from the Saudi government, which offered to help fund his release. The judge ordered Alfozan to remain in custody, noting concerns about his connections and the risk of him leaving the US. Alfozan's lawyers deny any wrongdoing, saying the electronics at his home were for personal projects and that his travel plans were routine. The Saudi embassy has not commented. Alfozan faces up to five years in prison if convicted on the current charge of intercepting communications, with further charges possible. His next court date is set for November 6 [Wired (opens in a new tab)][The Telegraph (opens in a new tab)].
What you should do
For security teams, this case highlights the importance of monitoring for insider threats, especially in environments handling sensitive intellectual property. Regular physical sweeps for unauthorised devices, strict access controls, and prompt investigation of unusual behaviour can help reduce risk. Companies should also review how they monitor and respond to potential data leaks or espionage attempts from within.
Claimed vs confirmed
- Unconfirmed
Alfozan was spying for the Saudi government.
US prosecutors allege Alfozan has ties to Saudi officials and received support, but there is no direct evidence he was acting on behalf of the Saudi government.
- Denied
Sensitive code or customer data was stolen from OpenAI.
OpenAI says there is no indication that sensitive code or customer data was taken.
Why it matters
The case highlights the risk of insider threats at tech companies, especially those working on sensitive AI projects. It also shows how physical security and employee monitoring are critical, not just digital defences.
Key points
- A former OpenAI engineer is accused of bugging an executive meeting room.
- Authorities found two recording devices linked to the engineer.
- US prosecutors say he is a flight risk due to ties to Saudi Arabia.
- OpenAI says no sensitive code or customer data was stolen.
- The case underscores the importance of insider threat monitoring.
Sources
Wired
Reference
The Telegraph
Reference
