OpenAI has terminated and the FBI has arrested an employee accused of planting a hidden recording device inside an executive conference room at the company’s San Francisco headquarters. Abdulrahman Alfozan, a 35 year old Saudi national who worked as an engineer at the AI company, was taken into custody on Friday.

Federal prosecutors have charged Alfozan with using or attempting to use an electronic, mechanical, or other device to intercept oral communications, a federal wiretapping offense. According to OpenAI and the FBI, the device was discovered concealed in a conference room reserved for executive meetings, raising concerns that sensitive internal discussions, potentially including strategic, financial, or product related conversations, may have been secretly recorded.

What We Know

  • Alfozan was employed as an engineer at OpenAI prior to his arrest.
  • He was terminated by the company following the discovery of the device.
  • The alleged interception took place in a conference room used by company executives at OpenAI’s San Francisco offices.
  • He faces a federal charge tied to illegal interception of oral communications.

Neither OpenAI nor investigators have publicly detailed the type of recording device used, how long it may have been in place, or what, if any, conversations were captured. It also remains unclear what motive prosecutors allege behind the covert surveillance, or whether the case connects to competitive, financial, or personal interests.

Why It Matters

The incident underscores a growing insider threat concern for high value technology companies: physical security and device sweeps for corporate meeting spaces, not just network and endpoint defenses. AI companies in particular now sit on commercially and strategically sensitive discussions ranging from model development to partnership negotiations, making executive spaces attractive targets for insider or external espionage attempts.

Security teams at organizations handling similarly sensitive discussions may want to revisit physical security protocols for executive and boardroom spaces, including routine technical surveillance countermeasures (TSCM) sweeps, access control auditing, and insider threat monitoring programs that extend beyond digital systems.

ZeroDayWire will update this story as more details from the investigation and any court proceedings become available.