Ex-OpenAI engineer detained over covert recording device in executive conference room; Saudi royal contacts alleged
A U.S. court on Monday granted the government's request to detain Abdulrahman Alfozan, a 35-year-old Saudi national and former OpenAI engineer, accused of planting a concealed audio recorder in an executive conference room at the company's San Francisco office. A prosecution filing says he was in frequent WhatsApp contact in 2025-2026 with a member of the Saudi Royal Family, who tried to recruit him for a Saudi AI initiative. The last contact was on October 5, 2026, four days before his arrest. Prosecutors call him a flight risk, citing a planned one-way trip to Riyadh on October 12, 2026, and say his wife and son have already left the U.S. He is charged with using a device to intercept oral communications, which carries a maximum of five years in prison. The investigation is ongoing, and the article does not confirm whether any recordings were exfiltrated or whether a foreign government directed the activity.
Technical Details
- The device was inserted into a USB port on the back of a television in the executive conference room. It was modified to block data transfer with the TV, and the content on its microSD card was encrypted.
- He used his wife's personal ChatGPT account to research how to build a continuous audio recorder that saves compressed WAV files to an SD card.
- He used an internal OpenAI productivity agent to identify the meeting rooms used by leadership, executives and external partners. He also spent considerable time near the target room beforehand.
- A search of his residence found electronic components similar to the installed devices. His iPhone held photos dated September 22-28, 2026, of one more concealed recorder and of TV input/output panels in several OpenAI locations, including a second sensitive conference room.
- A deleted September 2026 note linked to recording devices from Seeed Studio, the same manufacturer as the devices found in OpenAI's offices and his residence.
- Browsing history shows he opened a folder named "Saudi Gov Docs" on October 4, 2026. He also used the OpenAI agent to query Saudi Ministry of Communication and Information Technology (MCIT) engagements between July and September 2026.
Remediation
The article gives no official remediation guidance. Defenders can draw on the case to review insider-threat controls: physical inspection of USB and HDMI ports on conference-room equipment, monitoring of internal AI agent queries about executive meeting locations, and tighter controls on personal hardware and unusual device use in sensitive areas.
Linha do tempo
-
Ex-OpenAI engineer detained over covert recording device in executive conference room; Saudi royal contacts alleged
ler a análise desta fonte ocultar
A U.S. court on Monday granted the government's request to detain Abdulrahman Alfozan, a 35-year-old Saudi national and former OpenAI engineer, accused of planting a concealed audio recorder in an executive conference room at the company's San Francisco office. A prosecution filing says he was in frequent WhatsApp contact in 2025-2026 with a member of the Saudi Royal Family, who tried to recruit him for a Saudi AI initiative. The last contact was on October 5, 2026, four days before his arrest. Prosecutors call him a flight risk, citing a planned one-way trip to Riyadh on October 12, 2026, and say his wife and son have already left the U.S. He is charged with using a device to intercept oral communications, which carries a maximum of five years in prison. The investigation is ongoing, and the article does not confirm whether any recordings were exfiltrated or whether a foreign government directed the activity.
Technical Details
- The device was inserted into a USB port on the back of a television in the executive conference room. It was modified to block data transfer with the TV, and the content on its microSD card was encrypted.
- He used his wife's personal ChatGPT account to research how to build a continuous audio recorder that saves compressed WAV files to an SD card.
- He used an internal OpenAI productivity agent to identify the meeting rooms used by leadership, executives and external partners. He also spent considerable time near the target room beforehand.
- A search of his residence found electronic components similar to the installed devices. His iPhone held photos dated September 22-28, 2026, of one more concealed recorder and of TV input/output panels in several OpenAI locations, including a second sensitive conference room.
- A deleted September 2026 note linked to recording devices from Seeed Studio, the same manufacturer as the devices found in OpenAI's offices and his residence.
- Browsing history shows he opened a folder named "Saudi Gov Docs" on October 4, 2026. He also used the OpenAI agent to query Saudi Ministry of Communication and Information Technology (MCIT) engagements between July and September 2026.
Remediation
The article gives no official remediation guidance. Defenders can draw on the case to review insider-threat controls: physical inspection of USB and HDMI ports on conference-room equipment, monitoring of internal AI agent queries about executive meeting locations, and tighter controls on personal hardware and unusual device use in sensitive areas.