FBI Arrests an OpenAI Engineer Accused of Hiding a Recording Device in an Executive Conference Room -- Found by the Company's Own Counter-Surveillance Team

On October 13, 2026, the US Justice Department and OpenAI confirmed that the FBI had arrested an OpenAI employee, Abdulrahman Alfozan, 35, on October 9. He is charged in the Northern District of California with using an electronic device to intercept oral communications. The charge carries a maximum sentence of five years. OpenAI spokesperson Nate Evans told TechCrunch that Alfozan, hired in July 2025, worked on the product team. He was fired on the day of his arrest. Everything below is an allegation from the criminal complaint, as reported by TechCrunch, NBC News and Fortune.

What the complaint alleges

• On September 28, a device concealed in toilet paper was plugged into a USB port on the back of a TV in an executive conference room. OpenAI's technical surveillance countermeasures team found it on September 30.
• Around October 5, he allegedly left a bag holding a similar device in another room, and CCTV allegedly shows him checking behind the TV.
• Fortune reports he allegedly used an internal tool to look up where executives' meetings were held, and between September 24 and 30 asked a chatbot account linked to his spouse about building and encrypting recorders.
• Fortune: "He was arrested three days before he, his spouse, and a third unnamed family member were set to depart on a one-way flight to Saudi Arabia via Istanbul."

FBI Director Kash Patel said, in NBC's report, that Alfozan "allegedly concealed a covert recording device inside his employer's executive conference room to secretly capture sensitive communications about the company's super intelligence technology." No motive and no link to any foreign government has been alleged publicly. Fortune says a detention hearing is set for October 19.

What OpenAI says was and was not exposed

OpenAI says it analysed the hardware with its own models and describes it as having "advanced encryption, audio monitoring capabilities, and a mechanism for transferring data designed to evade monitoring". It also told TechCrunch: "At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data". TechCrunch notes it is unclear how unusual the device really is.

What remains uncertain. Whether anything was recorded or transmitted, what the alleged target conversations were, and why. The charge has not been tested in court, and the defendant is presumed innocent.

Analysis: Lab security discussions usually focus on weights, model theft and network intrusion. This case is a reminder that the most sensitive information at a frontier lab is also spoken aloud in meeting rooms: strategy, safety decisions, deal terms. It was a dedicated counter-surveillance team, not a cyber control, that found the device. Any organisation handling material that others would pay to overhear, including AI startups preparing fundraises or IPOs, should treat physical sweeps and insider-access monitoring as part of its security programme. The internal tool showing executives' meeting locations deserves a hard look too, because ordinary convenience data like that becomes targeting data.