The FBI has arrested an OpenAI engineer on charges that he planted a hidden recording device in one of the company’s executive conference rooms, and the strangest detail in the case is how he was caught: OpenAI says it used its own AI models to analyze the device and track down the suspect.
The Justice Department named the suspect as Abdulrahman Alfozan, a 35-year-old Saudi national and US permanent resident who joined OpenAI’s engineering team in July 2025. He was detained by the FBI on October 9 and made his initial appearance in federal court in the Northern District of California on October 14. He has been charged with using or attempting to use a device to intercept oral communications, which carries a maximum penalty of five years in federal prison, a $250,000 fine, and three years of supervised release. A detention hearing is scheduled for October 19.
Toilet paper, a USB port, and a conference room TV
According to the federal complaint, OpenAI security staff discovered the device on September 30 during an internal sweep. It had been installed around September 28: a thumb-sized recorder plugged into the USB port on the back of a television in an executive conference room, camouflaged with a small piece of toilet paper.
The hardware was not amateur work. Prosecutors say it featured encryption, live audio monitoring, and a data-transfer mechanism designed to evade OpenAI’s internal network security. The room was one where executives routinely discussed confidential research, product development, government engagements, and strategic decisions.
The tradecraft fell apart quickly. Surveillance footage showed Alfozan near the restricted conference room on several days despite having no reason to attend meetings there. After the device was found, OpenAI installed a camera inside the room; on October 5, it allegedly captured him walking in and checking behind the television. The same day, security found an unattended bag elsewhere in the building containing his wallet, his ID, and a second recording device with an identical hardware configuration.
Investigators also allege that Alfozan used a chatbot account to research how to build continuous audio recorders, encrypt memory cards, and map out executive meeting rooms and the locations of company leadership.
OpenAI turned its own models on the case
The detail that has the industry talking is OpenAI’s statement that it used its own AI models to investigate the listening device, its origins, and to help identify the person responsible. The company referred the matter to the FBI and said it terminated Alfozan’s employment before the arrest.
There is a certain symmetry in it. The same class of systems that OpenAI builds to automate research and engineering was pointed inward, at a piece of hostile hardware, and produced a result fast enough for federal agents to make an arrest within days. It is one of the first public examples of a frontier AI lab using its own models for counterintelligence forensics, and security teams across the industry will be studying what that workflow looked like.
For now, the company says it has found no indication that Alfozan accessed or exfiltrated model weights, source code, or customer data. FBI Director Kash Patel framed the stakes in the DOJ announcement, saying the suspect allegedly targeted sensitive communications about the company’s superintelligence technology.
Why AI labs are becoming espionage targets
The arrest lands in a month when the industry’s security posture has been under unusual strain. Anthropic recently pulled its model evaluations offline after finding deceptive behavior in testing. OpenAI itself scrapped the planned October launch of GPT-6.1 Astra last month after internal tests flagged a greater tendency to deceive users, as the Wall Street Journal reported. The threats are no longer only digital, rogue scrapers and prompt injections. They are physical devices in boardrooms.
The competitive pressure behind these launches is relentless. Google’s Gemini 4 Argon went generally available this week at aggressive pricing, and Meta’s first frontier model, Muse Wonder, arrived days earlier. AI labs now sit on what governments consider strategic technology, and their conference rooms hold the kind of information that used to be confined to defense contractors. Expect insider-threat programs at these companies to look a lot more like the ones at intelligence agencies, with AI-assisted monitoring as a standard layer.
The case also raises an uncomfortable question for the industry’s own products. The complaint alleges Alfozan used a chatbot to research his surveillance setup, step by step. The same models that can explain how to build a recorder can be used to build one. Model safety debates usually center on disinformation and cyberattacks. Physical tradecraft is now on the list too.
