A former OpenAI engineer has been charged with planting a hidden audio recorder in an executive conference room at the company's San Francisco offices, the Justice Department said Tuesday. The case puts physical insider threats, not just hacking, on the risk list for AI developers, and U.S. officials are treating it as a national security matter.

What Happened

According to a Justice Department press release, the engineer, Abdulrahman Alfozan, 35, who had worked at OpenAI since July 2025, was arrested Oct. 9 and made a first appearance in federal court Oct. 13. He is charged by criminal complaint with using or trying to use a device to intercept oral communications, an offense under the federal wiretap law that carries up to five years in prison, a fine of up to $250,000 and three years of supervised release. A complaint is a set of allegations, not a finding, and the defendant is presumed innocent.

The complaint, sworn by an FBI agent on Oct. 8, refers to OpenAI as "Company 1." It says the room could be booked only by executives and their assistants and was used for leadership meetings, technical and product sessions, and briefings with government officials and business partners. The engineer had no authority to enter it, according to the company.

RelatedNew York City Comptroller Urges Anthropic to Delay IPO Over Safety and Governance Concerns

Staff found the device about Sept. 30 plugged into a USB port on the back of a television and wrapped in toilet paper. The complaint describes it as a thumb-sized development board with a microphone, a detachable camera sensor and a memory card. Its files could not be recovered or decrypted.

There was no camera in the room at the time. Prosecutors say security footage from elsewhere in the office placed the engineer near the room on 10 dates between Sept. 8 and Sept. 29. They also say that from mid-August to mid-September he used an AI "productivity agent" at work to ask about meeting rooms, room calendars and where leadership and outside partners usually meet.

A chatbot account linked to his spouse, which shared device and network identifiers with his own account, submitted prompts that included the recorder's unique hardware address, the complaint says. Between Sept. 24 and Sept. 30, it says, that account sought help building an encrypted audio recorder with live listening. On Oct. 5, after a camera had been added, footage allegedly showed him checking behind the television. The same day, security staff found a second, similar device in a bag he had left in a printer room.

TechCrunch reported that OpenAI said in a post on X that it used its internal AI models to understand the device and has "no indications" the person accessed or took model weights. The AP reported that an OpenAI spokesperson extended that to source code and customer data, and that the company fired the employee and reported the device to the FBI.

Why It Matters

The case shows how much an insider can learn without breaking into any system. The alleged reconnaissance used ordinary access to an internal AI assistant and calendars, and the device was planted in a high-value room that had no camera. For boards and security chiefs, the question is whether rooms where strategy, government contacts and unreleased research are discussed get the same protection as the computer systems that hold the same information, including periodic sweeps for listening devices and tighter access logs.

AI tools cut both ways here. Prosecutors cite prompts to an AI assistant and a chatbot as key evidence, so companies that log such queries gain an investigative trail, along with privacy and governance obligations.

Director of National Intelligence Jay Clayton said the case shows why winning what he called the global superintelligence race is "a national security prerogative," and U.S. Attorney Craig Missakian said that for his office "it is a matter of national security." The department said the case supports National Security Presidential Memorandum 11.

White box security camera on wall
Illustrative photo: Unsplash. Not a photograph of the reported event.

What to Watch

The government has not alleged that the engineer acted for a foreign government, and the charge is a wiretap offense, not trade-secret theft or espionage. The Record reported that prosecutors have not identified an intended recipient of any recordings, and neither the release nor the complaint says what, if anything, was captured. Watch whether a grand jury returns an indictment, whether prosecutors add charges or name anyone else, and whether investigators manage to read the encrypted memory cards.