The recording device was discovered on September 30 after OpenAI staff noticed an unfamiliar USB plug attached to the back of a conference-room television. FBI investigators say the hardware had been wrapped in toilet paper and likely placed on September 28. Upon analysis, the drive was found to be encrypted, prompting a rapid forensic response. The agency later announced that the suspect faces up to five years imprisonment and a $250,000 fine for unlawful recording.
Abdulrahman Alfozan, a 35-year-old Saudi national who became a U.S. permanent resident in 2020, was hired by OpenAI in July 2025 and worked there for more than a year. Federal agents allege he used an OpenAI productivity agent in August to identify the timing and location of sensitive meetings, suggesting a pre-meditated effort to capture confidential discussions. The FBI characterizes the conduct as a threat to national security and economic strength, citing a Trump administration memo on AI advantage.
The seized hardware was identified as a Seeed XIAO ESP32-S3 Sense, a Chinese-manufactured development board capable of audio capture and remote access. FBI data analyst Lydia Liang, a former tech-industry employee, examined the device and linked it to multiple chatbot prompts submitted from an account associated with Alfozan’s spouse. Those prompts referenced the board’s unique MAC address and asked how to enable continuous, speech-triggered recording, encrypt an SD card, and maintain covert network connectivity.
CCTV footage obtained from the conference room shows Alfozan lingering near the television on ten separate days in September, including a retrieval attempt on October 5 after OpenAI installed a monitoring camera. The same day, he reported a lost bag to the facility’s lost-and-found; security later discovered a second Seeed device hidden inside that bag, which had been left unattended in a printer room. Alfozan returned the following day to claim additional missing items, never mentioning the second recorder.
OpenAI responded by incrementally revoking Alfozan’s system privileges while collaborating with the FBI to analyze the encrypted data. Once sufficient evidence was gathered, the company timed his termination to coincide with the federal arrest. FBI Director Kash Patel highlighted the case as evidence of coordinated counter-intelligence efforts to protect America’s AI leadership, referencing a Trump-era directive to safeguard economic strength. The agency indicated ongoing monitoring of similar threats in Silicon Valley.