A concealed recording device was discovered in an OpenAI office, leading to the engineer's firing and an FBI investigation.
A security incident at OpenAI ended with the firing of an engineer after authorities found a hidden recording device in an office. OpenAI says the device was plugged into a TV’s USB port and disguised with toilet paper, and the employee responsible has been identified. The FBI is investigating, and there is no public evidence yet that crucial data was accessed.
Why it matters: insider risk is a real concern for tech labs and startups alike. OpenAI used its own AI tools to trace the device, showing how AI can aid security work. What this means for you: expect stricter office-device controls and clearer insider-risk policies where you work.
What happens next: the FBI investigation will continue, and official updates will come as they become available.
Update · Oct 14, 7:50 AM ET
New details show prosecutors describing the covert device as a Seeed Xiao ESP32-S3 Sense, the same kind of micro board listed for about $14 on its supplier site (and $24 on Amazon), and that a second recording device was found in an unattended bag in another room. The arrest happened on Oct. 9, 2026, and OpenAI said the employee was terminated and the matter referred to the FBI.
Additional disclosures reveal CCTV footage of Abdulrahman Alfozan near the executive conference room on multiple dates before the discovery, and that he used a productivity tool to gather office details and calendars. It’s also alleged a spouse-linked chatbot account was used to prompt about building, installing and hiding a recording device. The FBI continues the investigation.
Update · Oct 13, 7:25 PM ET
New details show investigators uncovered a second recording device later in the same security sweep, found inside a bag left unattended in another room. The DoJ also confirms the initial discovery of Recording Device 1 happened on September 30, with the device concealed in toilet paper and plugged into a TV’s USB port around September 28.
The update also flags new behavior by the suspect, including using a productivity tool to research OpenAI offices and meeting schedules and using a chatbot account tied to a spouse to ask questions about recording devices. OpenAI previously said it used its own AI to trace the device and identified the responsible employee, who was fired and arrested on October 9. The FBI continues investigating.
Update · Oct 13, 6:15 PM ET
New details show the arrest came on Oct. 9, when OpenAI confirmed to authorities that the employee, Abdulrahman Alfozan, was fired and arrested on charges related to using an electronic device to intercept oral communications.
OpenAI described the device as “advanced encryption, audio monitoring capabilities, and a mechanism for transferring data designed to evade monitoring.” Prosecutors say Alfozan started with OpenAI in July 2025 and faces up to five years in prison if convicted. OpenAI reiterates there is no indication that model weights, source code, or customer data were accessed or exfiltrated. The FBI continues its investigation.
OpenAI says it fired an engineer after investigators uncovered a sophisticated, hidden recording device inside one of its offices. The individual, named in official charges as Abdulrahman Alfozan, 35, faces allegations tied to using or attempting to use a device to intercept oral communications. The arrest and charges came to light after the company described its response.
Officials say the device was found in an executive meeting space, plugged into a television via USB. It was reportedly concealed with toilet paper and placed around Sept. 28. OpenAI says it acted quickly, terminating the employee and turning the case over to the FBI. The FBI is handling the investigation and has not released further public charges as of now.
OpenAI stresses there is no evidence at this point that the intruder accessed or stole model weights, source code, or customer data. The company says it used its AI systems to analyze the device and trace its origin to the installer a few days prior, and it will continue assisting investigators as the case unfolds.
In a broader sense, the incident underscores the persistent risk of insider threats even in high-security labs. OpenAI reiterates its commitment to protecting its technology, data, and staff, noting that its security program covers a wide spectrum of threats, from insider risks to external hackers and nation-state actors.
The FBI investigation will likely bring more details in the coming weeks. For now, OpenAI remains focused on security enhancements and supporting the ongoing inquiry.
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re…
— OpenAI Newsroom (@OpenAINewsroom) October 13, 2026
Incidents like this highlight how insider risks can affect even prominent research labs. OpenAI’s approach, using its own AI to determine the device’s origin, followed by termination and FBI referral, illustrates a trend toward AI-assisted security practices in the workplace.
Two straightforward lessons stand out. First, limit access to sensitive spaces and equipment to reduce opportunities for hidden devices. Second, establish clear policies about personal devices and monitoring, while balancing privacy and due process. Regular drills and security reviews can help teams detect insider risks early.
For most people, this case is a reminder that security isn’t just about defending against external hackers. Insiders can pose real risks, and organizations are increasingly leaning on AI to help spot them. If you work in a tech or research environment, expect tighter controls around office devices and clearer insider-risk policies.
The FBI is handling the criminal investigation, with additional details potentially emerging as the case progresses. OpenAI says it will keep supporting investigators and uphold its security commitments during the ongoing process.
An OpenAI engineer was arrested after a concealed recording device was found in an executive meeting room and linked to that employee of record.
OpenAI said it used its AI tools to determine the device’s origin, terminated the employee, and referred the matter to the FBI.
Review insider-risk policies, tighten access to sensitive areas, and consider regular security drills that include AI-assisted detection and rapid incident-response procedures.
Disclaimer: This article relies on publicly disclosed information from OpenAI and authorities. Investigations are ongoing, and details may change as new information emerges.
You're reading the quick version.
Read next
Is Microsoft Authenticator safe? What the Android token bug means
A now-fixed bug let a harmless-looking Android app borrow your work account's sign-in pass. Here's who was at risk and the one update to check today.
An encrypted copy of mSecure Cloud data was taken. Here is who is exposed, what the company says to change, and why your master password now matters most.
A race condition in the WordPress update process is under attack, CISA confirms. Here is who is exposed, what the fix changes and what to check.
Freezers in stores across Europe were switched to defrost or pushed to 50C, and now UK meat suppliers say they were caught in the same wave.
The Daily Brief
Every morning, the news that matters from AI, phones, apps and the people shaping tech. Explained in plain English. Free.
One email a day. No spam, unsubscribe anytime. Privacy policy
