In a high-profile case that spotlights growing security risks within the global artificial intelligence industry, federal prosecutors from the U.S. Department of Justice have formally charged a Saudi national employed as an engineer at leading AI developer OpenAI with orchestrating a covert surveillance operation inside the company’s San Francisco office.
The defendant, identified as Abdulrahman Alfozan, has been accused of one federal count of using or attempting to use an electronic surveillance device to intercept private oral communications. Court documents outline that Alfozan had joined OpenAI as an engineer only months prior, in July 2025.
OpenAI, the organization behind the world-dominating chatbot ChatGPT, first flagged suspicious activity after internal teams uncovered a well-concealed, sophisticated recording device tucked inside one of the company’s executive conference rooms. According to official complaint details, the device was wrapped in toilet paper and plugged into an unused USB port mounted on the rear of a conference room television — a spot chosen specifically to avoid easy detection. The device was discovered by OpenAI staff on September 30, two full days after prosecutors allege Alfozan installed it, and investigators confirmed the device was encrypted to protect any data it collected.
Remarkably, OpenAI confirmed that it leveraged its own proprietary AI models to trace the origins of the rogue device, ultimately pinpointing Alfozan as the person who planted it. The company immediately notified the Federal Bureau of Investigation (FBI) to launch a formal criminal investigation, and moved quickly to terminate Alfozan’s employment. To date, OpenAI has confirmed there is no evidence that sensitive corporate assets including core model source code, model weights, or private customer data were improperly accessed or exfiltrated during the incident.
FBI Director Kash Patel released an official statement confirming the allegations, noting that Alfozan “allegedly concealed a covert recording device inside his employer’s executive conference room to secretly capture sensitive communications.” Patel added that the stated goal of the operation was to obtain confidential internal information about OpenAI’s cutting-edge AI product development.
Investigative records further outline that Alfozan used common workplace productivity tools and an external chatbot to plan his operation in advance. Prosecutors allege that chat prompts linked to Alfozan include research queries on building, customizing, installing, and hiding audio recording devices, adding remote access functionality, improving live audio capture quality, and encrypting data stored on the device’s memory card.
Prosecutors say that on October 5, roughly a week after the device was installed, Alfozan returned to the executive conference room to check on the covert recorder. Closed-circuit security camera footage from the office confirms his presence at the site, directly tying him to the location of the device. On that same day, Alfozan reportedly left an unattended bag in another section of the OpenAI office building. When the company’s security team inspected the bag, they found Alfozan’s wallet and government identification, along with a second recording device matching the design of the one found in the conference room.
Alfozan made his first federal court appearance on Tuesday, and as of the latest update, it remains unclear whether he has secured legal representation to fight the charges. If he is ultimately convicted on the single federal charge, Alfozan faces a maximum penalty of five years in federal prison and a $250,000 fine.
The incident has sparked new conversations about insider threat risks for high-stakes AI development firms, which hold closely guarded intellectual property that is widely considered among the most valuable commercial assets in the global technology sector.