OpenAI Engineer Arrested for Allegedly Installing Secret Recording Device to Spy on Executive Meetings

GBHackers News

Source published: Site published:

Original article · فارسی

OpenAI Engineer Arrested for Allegedly Installing Secret Recording Device to Spy on Executive Meetings

An OpenAI engineer has been arrested for allegedly concealing an audio recording device in an executive conference room at the company’s San Francisco offices.

According to a Justice Department announcement, Abdulrahman Alfozan, 35, a Saudi national, was taken into custody on October 9 and appeared in federal court on October 13, 2026.

OpenAI Engineer Arrested

Alfozan, who has worked at OpenAI since July 2025, faces a charge of using or attempting to use a device to intercept oral communications.

Prosecutors allege that the targeted conference room hosted sensitive discussions regarding proprietary research, product development, commercial relationships, government engagements, and strategic decisions related to the company’s artificial intelligence capabilities.

OpenAI personnel discovered the first recording device on September 30, hidden inside a USB port behind a conference room television. Investigators allege that it was installed around September 28 and disguised with toilet paper. Although OpenAI determined that the contents were encrypted, the announcement does not disclose what investigators ultimately recovered.

The hidden device raises concerns about insider threats: a recording device placed in a sensitive meeting space could capture conversations without compromising corporate applications.

However, the announcement does not clarify whether the device successfully recorded meetings, transmitted audio, or exposed confidential information. Its hardware specifications and operating configuration have not been revealed.

According to the complaint, office surveillance footage shows Alfozan near the executive conference room on multiple times before investigators discovered the device.

He allegedly lacked authorization to access the room or participate in its meetings. Prosecutors further claim that he used a productivity tool to investigate building addresses, room capacities, calendars, and leadership locations.

Investigators also identified relevant prompts submitted through a chatbot account associated with Alfozan’s spouse. The complaint states that this account shared multiple identifiers and characteristics with his account.

Between September 24 and September 30, the prompts focused on continuous audio recording, Wi-Fi customization, live listening, device concealment, remote access, and storage encryption.

Additional prompts allegedly referenced the first device’s custom header and unique MAC address on September 27 and 28. Prosecutors say these details link the account’s inquiries to specific hardware. Nevertheless, the announcement does not confirm who submitted each prompt or whether the requested capabilities were applied to either device.

On October 5, surveillance footage reportedly captured Alfozan entering the executive conference room and looking behind the television. That same day, OpenAI security personnel found an unattended bag in another room containing his wallet, identification, and a second recording device similar to the first.

The FBI is investigating the case, and federal prosecutors are handling it. Officials have characterized the allegations as a national security concern involving the protection of American AI innovation. If convicted, Alfozan faces up to five years in prison, a $250,000 fine, and three years of supervised release. The allegations remain unproven in court.

Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.

Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Hot this week

Infosec- Resources

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

1
What is Deep Web The deep web, invisible web, or...
SOC Architecture

How to Build and Run a Security Operations Center (SOC Guide) – 2023

12
Today’s Cyber security operations center (CSOC) should have everything...
Cyber Security News

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

0
TeamViewer's popularity and remote access capabilities make it an...
Checklist

Web Server Penetration Testing Checklist – 2026

0
Web server pentesting is performed under three significant categories: identity,...
Infosec- Resources

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

4
ATM Penetration testing, Hackers have found different approaches to...

Topics

More
    Cyber Security News

    Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections

    0
    Microsoft has addressed a vulnerability in Windows Shell that...
    Cyber Attack

    TFG London Confirms Cyberattack Affecting Hobbs, Whistles, and Phase Eight

    0
    TFG London has confirmed a cybersecurity incident affecting the...
    CVE/vulnerability

    Critical FortiSandbox Vulnerability Lets Remote Attackers Bypass Authentication and Execute Commands

    0
    Fortinet has disclosed a critical authentication bypass vulnerability in...
    CVE/vulnerability

    Microsoft October 2026 Patch Tuesday Fixes 1,411 Vulnerabilities, Including 3 Zero-Days

    0
    Microsoft’s October 2026 Patch Tuesday security updates address 1,411...
    cyber security

    iOS Exploit Kits Can Compromise iPhones Through a Single Malicious Website

    0
    A single visit to a compromised or deceptive website...
    Press Release

    Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo

    0
    Torrance, California, October 13th, 2026, CyberNewswire Criminal IP, developed by...