The US Attorney's Office for the Northern District of California announced on 13 October the arrest of Abdulrahman Alfozan, 35, a Saudi national employed as an engineer at OpenAI since July 2025, charged with using a device to intercept oral communications.

These are allegations from a complaint. The release states it plainly: "A complaint merely alleges that crimes have been committed, and a defendant is presumed innocent until proven guilty beyond a reasonable doubt."

What was found

On or about 30 September, OpenAI personnel discovered a recording device "inserted into a USB port on the back of a television in an executive conference room". It had been "concealed in toilet paper", was installed on or about 28 September, and its contents were encrypted.

CCTV is said to show Alfozan near that conference room on multiple dates before the discovery, "although he had no authority to access, or to participate in meetings occurring in" it. On 5 October he is alleged to have entered the room and appeared to look behind the television.

Also on 5 October, he is alleged to have left a bag unattended elsewhere in an OpenAI building. Security staff opened it and found, alongside his wallet and ID, another recording device similar to the first.

The complaint describes what the room was used for: "highly confidential technical, commercial, and strategic information, including proprietary research, product plans, and business-development opportunities", as well as nonpublic information about technical progress, capabilities, priorities, government engagements and commercial relationships.

The evidence that makes this case unusual

Most of the above is ordinary corporate-security evidence: a device, some CCTV, a bag. What follows is not. A chatbot account linked to Alfozan's own by shared identifiers is alleged to have submitted prompts between 24 and 30 September "related to building, customizing, installing, audio recording, testing, obfuscating, and remote accessing a device".

The release quotes four of those prompts: "build[ing] a continuous audio recorder", "customiz[ing] Wi-Fi . . . connectivity", "improv[ing] audio and live listening", and "encrypt[ing] the SD card". Between 27 and 28 September, the same account is alleged to have submitted prompts about the specific device later recovered, "including its custom header and unique MAC address".

Separately, the complaint alleges that before 28 September Alfozan "used a productivity tool to make multiple inquiries about OpenAI's building addresses, meeting rooms, meeting-room capacities and calendars, and locations of 'leadership and exec' and external partner meetings".

Why that matters beyond this case

Set aside guilt or innocence, which a court will decide. The structure of the evidence is the thing worth noticing.

A prompt log is not like a search history. A search is a question. A sequence of prompts about building, testing and obfuscating a device is a working record: the order of the steps, the problems encountered, the refinements made. It reads less like curiosity and more like a build log, and the government is using it that way.

It is also an unusually complete record, retained by a third party, that the person generating it was not treating as a document. Email gets deleted, notes get shredded, conversations happen in rooms. A chat session is typed, timestamped and stored by default.

Two further wrinkles in what has been alleged. The prompts are attributed to an account associated with a spouse, linked by shared identifiers — which is to say the government is doing account attribution, not reading a confession. And the "productivity tool" queries about meeting rooms and executive calendars are the kind of thing an employee might legitimately run, until they sit next to the rest.

Subsequent court filings reported on 18 October add that prosecutors allege contact with a member of the Saudi royal family and describe him as days from leaving for Riyadh, with family members departing on a ticket said to be paid for by a Saudi military official. His defence says the planned travel was for family and immigration reasons. Those details are from reporting on the filings rather than from the 13 October release.

The official framing

US Attorney Craig Missakian: "For us it is a matter of national security." FBI Director Kash Patel describes protecting American innovation as "one of our highest counterintelligence priorities".

The charge is narrower than the framing. It is a single count under the federal wiretap statute, carrying a maximum of five years, a $250,000 fine and three years of supervised release. Nobody has been charged with taking anything.

What to do

  • If you run an organisation with rooms where things get said that matter, physical inspection of those rooms is a control, not theatre. The device here was in a USB port on the back of a television, which is where you would put one.
  • Treat conference-room access as an access-control question. The complaint's point about having no authority to be in that room is doing real work in it.
  • Note what found this: people, looking. Not a system.
  • If you are building insider-risk detection, prompt and tool-query logs are now part of the record in both directions. That cuts for and against your staff, and it deserves a policy rather than a surprise.

What is not established

  • Whether any of it is true. This is a complaint, and he is presumed innocent.
  • What, if anything, the device recorded. Its contents were encrypted and the release does not say they have been read.
  • Who the recordings were for, or what was intended with them. The release does not say.
  • Whether the second device found in the bag was ever used.
  • Whether the prompt logs will be admitted, or how account attribution will survive challenge.
  • What relationship, if any, the alleged Saudi contacts have to the alleged conduct. Prosecutors assert contact; the filings reported so far do not allege direction.