Saudi OpenAI engineer charged in boardroom recorder case

Security staff at OpenAI found a tiny audio recorder on Sept. 30 during a routine sweep of an executive conference room in San Francisco. It was plugged into a television USB port and wrapped in toilet paper.

Prosecutors say Abdulrahman Alfozan put it there.

Alfozan, 35, a Saudi national and OpenAI product engineer since July 2025, was arrested Oct. 9 and charged with using or attempting to use a device to intercept oral communications. He remains in federal custody. A detention hearing is scheduled for Oct. 19 to decide whether he stays locked up while the case moves forward.

The device was a Seeed XIAO ESP32-S3 Sense, a thumb-sized board sold on Amazon for $23.99. OpenAI determined it had been installed around Sept. 28, about two days before the sweep. Its contents were encrypted. The room was used for meetings on highly confidential technical, commercial and strategic information, including proprietary research, product plans, government engagements and commercial relationships. Alfozan had no authority to enter it or attend those sessions.

Kash Patel said Alfozan "allegedly concealed a covert recording device inside his employer's executive conference room to secretly capture sensitive communications about the company's super intelligence technology." Craig Missakian put the stake in plain terms: "the protection of US technology companies is a matter of national security."

That framing is not abstract. American firms building advanced artificial intelligence hold work that competitors and foreign governments want. A cheap physical bug in a closed boardroom can reach conversations that firewalls never see. The complaint describes a low-cost path to high-value talk, not a hack of the model itself.

OpenAI fired Alfozan and referred the matter to the FBI, coordinating the timing of his termination with agents. Between discovery and arrest the company gradually restricted his access, suspended his physical and network credentials, placed him on leave and secured his company equipment. On X, OpenAI said employees used the firm's own AI models to analyze the device and trace where it had come from. The company also stated it has "no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data."

That distinction matters for what was and was not compromised. Physical entry into an executive room is one threat surface. Digital theft of weights, code or customer files is another. Prosecutors allege the first. OpenAI says it has not found the second.

The record of Alfozan's movements and queries is specific. CCTV footage shows him near the conference room on eight separate occasions in September. On Oct. 5 he entered the room and looked behind the television where the device had been placed. The same day he left an unattended bag. Security personnel opened it and found his wallet, his ID and a second recording device similar to the first. When he retrieved the bag on Oct. 6, the second device was gone. He reported personal items stolen—a credit card, about $500, two AirPods, headphones, sunglasses and a power bank—but made no mention of the missing recorder.