OpenAI engineer charged after boardroom bug found wrapped in toilet paper

The Department of Justice has charged an OpenAI engineer with attempting to intercept oral communications after allegedly planting a recording device in an exec conference room.

Investigators claim company security staff found a second device in his bag.

Saudi national Abdulrahman Alfozan, 35, is described in court documents as an engineer at OpenAI who had worked there since July 2025, and has held permanent residency in the US since September 2020.

He was arrested on October 9 and made his initial federal court appearance on October 13.

He is accused of installing, on or around September 28, 2026, a Seeed XIAO ESP32-S3 Sense recording device via a USB port in a TV located in OpenAI's executive conference room.

According to the complaint, staff discovered the device concealed in toilet paper on September 30.

OpenAI said it used its models to analyze the device.

According to the complaint, it may have been modified to prevent data transfer between the recorder and the TV.

The contents of the bug's microSD card may also have been encrypted, as the company could not retrieve any of the data stored on the card after making a forensic image of it.

CCTV footage placed him near the room on several dates, although prosecutors say Alfozan had no authority to access or participate in meetings held in the executive conference room, which is often reserved for the highest-level discussions.

Officials did not state whether the device was able to capture anything of importance, but said the room typically plays host to non-public and secret technical meetings, as well as those with government representatives.

OpenAI did not have CCTV covering the executive conference room at the time when the secret device was planted, but the company subsequently installed a camera.

Court documents [PDF] include an image taken on October 5 from a camera situated behind the TV into which the DoJ claims the recording device was installed, allegedly showing Alfozan checking on it.

Investigators examined Alfozan's devices, according to the complaint, which alleges that between around August 17 and September 16, 2026, Alfozan used a productivity agent to inquire about company building addresses, meeting rooms, room capacities and calendars, and external-partner meeting venues.