OpenAI Engineer Arrested for Installing Spyware in Executive Conference Room

Key Takeaways

• An OpenAI engineer, Abdulrahman Alfozan, was arrested for allegedly planting a hidden audio recording device in an executive conference room.
• The device was discovered in a room used for highly confidential discussions regarding company research, product strategies, and government engagements.
• Prosecutors have charged Alfozan with attempting to intercept spoken communications, a felony carrying a potential sentence of up to five years in prison.

OpenAI Engineer Arrested Over Alleged Executive Conference Room Eavesdropping

A Saudi national employed as an engineer at OpenAI, Abdulrahman Alfozan, 35, has been taken into custody for allegedly concealing an audio recording device within an executive conference room at the company’s San Francisco headquarters. The U.S. Department of Justice confirmed Alfozan’s arrest on October 9, 2026, followed by his federal court appearance on October 13, 2026.

Prosecutors have formally charged Alfozan with the use or attempted use of a device to intercept spoken communications. While initial reports sensationalized the hardware as “spyware,” official statements clarify it was a hidden audio recorder, with no public information suggesting the installation of malware on OpenAI computer systems.

Investigation Details Emerge

According to the criminal complaint, OpenAI personnel first discovered the clandestine device around September 30. It was found plugged into a USB port behind a television, wrapped in toilet paper, and contained encrypted data. Internal investigations by OpenAI pinpointed its installation date to approximately September 28.

The executive conference room where the device was found is designated for highly sensitive discussions encompassing research initiatives, future product roadmaps, business development opportunities, government interactions, and technical advancements. Prosecutors allege that Alfozan, who joined OpenAI in July 2025, lacked authorization to access this room or participate in these critical meetings.

Evidence Points to Deliberate Action

Surveillance footage from the office’s CCTV system reportedly shows Alfozan in proximity to the conference room on multiple occasions prior to the device’s discovery. Specifically, footage from October 5 allegedly depicts him entering the room and inspecting the area behind the television.

Investigators also scrutinized Alfozan’s search queries made through an internal productivity tool. Before September 28, he reportedly searched for information related to building addresses, room calendars, meeting capacities, leadership locations, and meetings involving external partners.

Further evidence includes prompts from a chatbot account linked to Alfozan’s spouse, which shared several identifying attributes with his own account. Between September 24 and September 30, this account reportedly sought assistance with continuous audio recording, Wi-Fi connectivity, live listening capabilities, remote access, device concealment, and SD card encryption.

Prompts submitted on September 27 and September 28 specifically referenced the first recorder’s custom header and unique MAC address. These technical details are crucial in linking the chatbot activity to the recovered hardware. However, while remote access queries were made, there is no current evidence confirming that recorded audio was transmitted outside OpenAI’s network.

On October 5, security personnel located a second, similar recording device inside a bag allegedly left unattended by Alfozan elsewhere in the office. The bag also contained his wallet and identification.

No Confirmed Network Breach or Foreign Nexus

The ongoing case primarily revolves around alleged physical eavesdropping and does not involve a confirmed network breach. The U.S. Department of Justice announcement has not identified any foreign recipient of the recordings or established that confidential information reached an external party. It is important to note that this incident is distinct from other OpenAI security matters, such as AI reasoning extraction or forum security flaws leading to internal repository access, and no connection between these separate events has been established.

The Federal Bureau of Investigation (FBI) is leading the investigation. Assistant U.S. Attorney Nicolas Parker is prosecuting the case, supported by National Security Division attorney Kate Tagert. According to the Northern District of California announcement, if convicted, Alfozan faces a potential sentence of up to five years in prison, a $250,000 fine, and three years of supervised release. The charge remains an allegation, and he is presumed innocent until proven guilty.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.