Federal prosecutors have charged an OpenAI engineer, Abdulrahman Alfozan, with using, or endeavoring to use, a device to intercept oral communications, after a hidden audio recorder was found in an executive conference room at the company’s San Francisco offices. He was arrested Oct. 9, made his first appearance in federal court Tuesday, and faces up to five years in prison if convicted. OpenAI says it has no indications at this time that he improperly accessed or exfiltrated model weights, source code or customer data.
Alfozan is charged by criminal complaint, the document prosecutors file to start a case. He has not been convicted, and the allegations below are those of prosecutors, as described in the Justice Department release and press reports.
The charge
The Justice Department says Alfozan, 35, “a national of the Kingdom of Saudi Arabia,” is charged with “using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications,” which in plain terms means secretly recording conversations. According to the department, he made his initial appearance in federal court Oct. 13. CBS News reported the appearance was in the U.S. District Court for the Northern District of California.
The only charge the release names is that interception charge. It does not describe a charge of theft of trade secrets or espionage, although the U.S. Attorney’s statement in the release speaks of prosecuting people who seek to steal American technology, as alleged in the complaint.
If convicted, he faces a maximum of five years in prison and a $250,000 fine, followed by three years of supervised release. The FBI is investigating. The case is being prosecuted by an assistant U.S. attorney in the Northern District of California, with a trial attorney from the National Security Division’s Counterintelligence and Export Control Section.
What the complaint alleges
According to the complaint as described by the Justice Department, Alfozan had worked as an engineer at OpenAI since July 2025. On or about Sept. 30, OpenAI personnel found a hidden audio recording device plugged into a USB port on the back of a television in an executive conference room in one of the company’s San Francisco buildings.
The device had been concealed in toilet paper, OpenAI determined it was installed on or about Sept. 28, and its contents were encrypted. The department calls it Recording Device 1.
Meetings in that room frequently involved highly confidential technical, commercial and strategic information, including research, product plans and business-development opportunities, the complaint says.
The release describes video footage and computer records:
- Security camera footage allegedly showed Alfozan near the executive conference room on multiple dates before the device was found, although he had no authority to enter it or take part in meetings there.
- Before Sept. 28, he allegedly used a productivity tool to make multiple inquiries about the company’s building addresses, meeting rooms, room capacities and calendars, “leadership and exec” locations, and external partner meetings.
- A chatbot account associated with his spouse, which shared multiple identifiers and attributes with his own account, allegedly submitted prompts between Sept. 24 and Sept. 30 about building, customizing, installing, audio recording, testing, obfuscating and remotely accessing a device, including “build[ing] a continuous audio recorder” and “encrypt[ing] the SD card.” The same account allegedly submitted prompts about Recording Device 1, including its custom header and its unique MAC address, a hardware identifier, between Sept. 27 and Sept. 28. The release does not say who typed the requests, and it does not report any charge against the spouse.
- On Oct. 5, the complaint alleges, he entered the room and appeared to look behind the television. TechCrunch reported that prosecutors said OpenAI had placed a camera that allegedly caught him.
Also on or about Oct. 5, the complaint alleges, Alfozan left a bag unattended in a different room. OpenAI security personnel opened it and found his wallet and ID along with a second recording device, which the release calls Recording Device 2, described as similar to the first.
What OpenAI said and did
OpenAI said it contacted the FBI and terminated the employee; he was arrested Oct. 9, nine days after the Sept. 30 discovery.
In a statement, the company said: “The FBI’s investigation is ongoing and we will continue to support their work.” It added: “At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data.”
OpenAI also said it used its own internal AI models to understand the “sophisticated” device, and framed this case as an example of how AI can help address such security threats. These are the company’s own descriptions. The company told TechCrunch the device had “advanced encryption, audio monitoring capabilities, and a mechanism for transferring data designed to evade monitoring.” The release says only that the device’s contents were encrypted and does not use those terms. TechCrunch noted it is unclear how technically distinct the device is from other recording devices.
What officials said
FBI Director Kash Patel said in the release: “According to the complaint unsealed today, Abdulrahman Alfozan allegedly concealed a covert recording device inside his employer’s executive conference room to secretly capture sensitive communications about the company’s super intelligence technology.” Separately, he said: “Protecting American SI innovation is essential to safeguarding our nation’s economic strength and national security, and the FBI views that mission as one of our highest counterintelligence priorities.” “SI” is Patel’s abbreviation; the same release speaks of “super intelligence technology.”
U.S. Attorney Craig H. Missakian said the case is a matter of national security and that the arrest reflects his office’s work with the FBI to identify and prosecute those who seek to steal American technology, as alleged in the complaint.
Director of National Intelligence Jay Clayton said the case underscores why winning the global super intelligence race is a national security prerogative, and that the intelligence community remains committed to safeguarding America’s cutting-edge intellectual property from foreign threats. That statement speaks of foreign threats in general terms; the release does not allege that Alfozan acted for any government.
The department says the prosecution supports National Security Presidential Memorandum 11, a policy aimed at American superiority in what it calls super intelligence technology.
The defense’s caution
Alfozan’s attorney, William Pernik, told CBS News that his client is presumed innocent. He cautioned against “jumping to conclusions at this very early stage of the case when very little information is known” and against seeking to “politicize” a prosecution based on factors such as nationality.
What is not known
The public descriptions of the case do not yet answer several basic questions:
- Why the device was allegedly placed, and who, if anyone, was meant to receive what it captured.
- Whether either device recorded or transmitted anything.
- Whether the second device was used.
- Whether there is any link to a foreign government. The Justice Department release mentions his nationality and describes the case in terms of national security and counterintelligence priorities, but it does not allege that he acted for any government.
- Whether the court will order him held in custody while the case proceeds.
What comes next
CBS News reported that a detention hearing is set for Oct. 19 in federal court. A detention hearing generally decides whether a defendant stays in custody while the case proceeds.
As a matter of general federal law, not a detail of this case, prosecutors usually must obtain an indictment, or file an information (a charging document that does not require a grand jury), within 30 days of an arrest, subject to extensions and excluded time. Counted from Oct. 9, that would fall in early November. A plea has not been reported.