What DOJ alleges about the recording device found inside OpenAI

OpenAI personnel found a surreptitious audio recorder on September 30, according to the [U.S. Attorney's Office for the Northern District of California](https://www.justice.gov/usao‑ndca/pr/saudi‑national‑arrested‑installing‑surreptitious‑audio‑recording‑device‑openai‑san). The device was inserted into a USB port on the back of a television in an executive conference room at one of the company's San Francisco buildings. DOJ's published photographs show the alleged placement and the exposed circuit board. The release says the device had been concealed in toilet paper and that its contents were encrypted. Those details make this a physical office‑security incident involving a purpose‑built recorder, not a software bug or an ordinary meeting transcription feature. The charge and the underlying complaint contain allegations. The defendant is presumed innocent unless proved guilty, and the public release does not establish what audio, if any, the device successfully captured.

DOJ says OpenAI determined that the recorder was installed on or about September 28, two days before personnel discovered it. The company identified the room as one used for discussions of proprietary research, product plans, technical progress, government engagements, commercial relationships and other confidential matters. The public account does not identify a specific meeting that was recorded or disclose decrypted audio. [Associated Press reported](https://apnews.com/article/7f512b2552ffcbbf8f1ebbb18f81a9ba) OpenAI's statement that it had no indication the employee improperly accessed or exfiltrated model weights, source code or customer data. That statement narrows what the company said it had found; it does not resolve whether conversations were captured. Readers should keep those evidence categories separate: physical placement is documented in the government's account, data or source‑code theft was not indicated by OpenAI, and the contents of the encrypted device have not been described publicly.

The complaint alleges that Abdulrahman Alfozan, an OpenAI engineer since July 2025, appeared near the executive conference room on multiple dates despite lacking authority to enter the room or attend its meetings. DOJ says he had used a productivity tool to query building addresses, room capacities, calendars, and locations for leadership and external‑partner meetings. Prosecutors also allege that a chatbot account associated with his spouse and sharing identifiers with his account submitted prompts about building, hiding, testing and remotely accessing an audio recorder. DOJ says the account asked about a custom header and the unique MAC address tied to the device found in the room. These are allegations summarized by prosecutors, not independent proof that every query had the purpose asserted in the complaint. The detailed sequence matters because it shows the government's case relies on several kinds of evidence rather than the device alone.

DOJ says OpenAI added a camera to the room after discovering the recorder. On October 5, that camera captured Alfozan entering the room and appearing to look behind the television where the device had been placed. The same day, the complaint says he left a bag unattended elsewhere in an OpenAI building. Security personnel opened the bag and found his wallet, identification and another recorder similar to the first one. Alfozan was arrested on October 9 and made an initial federal‑court appearance on October 13. His next scheduled appearance was a detention hearing on October 19. The single charge cited publicly is using or endeavoring to use a device to intercept oral communications.

If convicted on the cited count, DOJ says the maximum statutory penalty is five years in prison, a $250,000 fine and three years of supervised release. Any actual sentence would depend on the court and applicable law. The public documents support a factual story about an alleged concealed recorder, the investigation and the criminal charge. They do not support claims that a foreign government directed the conduct, that OpenAI's models were stolen, or that customers were compromised. Those questions remain unproven on the released evidence. OpenTools will treat later court filings, a plea or verdict, and any disclosed forensic findings as separate developments. Related company coverage is collected on the [OpenAI organization page](https://opentools.ai/organizations/openai). *Image: Official DOJ evidence photographs showing the device and alleged placement, preserved at their original pixel dimensions inside a labelled documentary layout.*