An engineer allegedly hid a recording device in an executive meeting room, raising hard questions for people leaders on workplace security and access
An OpenAI engineer has been arrested and charged in the United States for allegedly hiding a covert recording device in an executive conference room. The insider threat case puts pre-employment vetting, access controls and offboarding on the HR agenda.
A US Department of Justice statement released on 13 October 2026 (US time) named the employee as Abdulrahman Alfozan, 35, a Saudi national who had worked at OpenAI as an engineer since July 2025. He was arrested on 9 October and charged with using or endeavouring to use a device to intercept oral communications. If convicted, he faces up to five years in prison and a US$250,000 fine.
An insider threat is a security risk posed by someone with legitimate access to an organisation, such as an employee or contractor, who misuses that access.
According to the criminal complaint, OpenAI staff found the device on or about 30 September. It was wrapped in toilet paper and plugged into a USB port behind a television in an executive conference room in San Francisco. The device had been installed about two days earlier, and its contents were encrypted.
Closed-circuit television (CCTV) footage showed Alfozan near the room on several dates, although he had no authority to enter it or attend meetings there, the department said. Before the device was installed, he allegedly used a productivity tool to search for meeting rooms, calendars and the locations of leadership meetings.
Prosecutors also allege that a chatbot account linked to his spouse sought help building a continuous audio recorder and encrypting a memory card.
On 5 October, a newly installed camera allegedly captured him checking behind the television. That same day, security staff searched a bag he had left unattended and found a second, similar device.
OpenAI said it used its own artificial intelligence (AI) models to trace the device. “We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier,” a spokesperson said.
The company added: “At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data.”
Agence France-Presse reported that the Justice Department did not accuse Alfozan or Saudi Arabia of spying. He is due back in court on 19 October.
Lessons for vetting, monitoring and offboarding
The way OpenAI handled the exit is instructive. The company told The New York Times it coordinated the dismissal with the Federal Bureau of Investigation (FBI) to avoid disrupting the investigation. It gradually restricted his access to systems and offices, then suspended him, placed him on leave and recovered his equipment.
The case is a reminder that screening at the point of hire is only the first safeguard. This matters as debate continues over why phone-based reference checks are falling behind.
Tighter monitoring has its own costs. HR teams will need to balance security against how AI and compliance are testing workplace trust. Prosecutors also allege that AI tools were used to plan the scheme, so employers may want to revisit acceptable-use rules, keeping in mind the risks of relying on AI-generated workplace policies.
