Feds Say OpenAI Engineer Hid a $13.99 Bug in an Executive Boardroom

A federal criminal complaint unsealed Tuesday alleges that an OpenAI engineer hid an audio recording device inside a piece of toilet paper and attached it behind a monitor in an executive conference room at one of the company's San Francisco offices. The device, a Seeed XIAO ESP32-S3 Sense development board, currently retails for $13.99.

The defendant, Abdulrahman Alfozan, is a 35-year-old Saudi Arabian national and US permanent resident, according to federal prosecutors. He made an initial appearance in US district court in San Francisco on Tuesday on one charge of "use of an electronic, mechanical, or other device to intercept oral communications." If convicted, he faces up to five years in prison.

Alfozan joined OpenAI in July 2025. The company fired him last Friday, timed to coincide with his arrest. He couldn't be immediately reached for comment.

What does the complaint actually allege?

Prosecutors say Alfozan spent several weeks planning the operation with the help of an unspecified "productivity agent" and an "AI chatbot." He used an internal OpenAI tool to ask about meetings scheduled in the targeted conference room. He also appears to have used a chatbot account associated with his spouse to ask technical questions about setting up a covert audio recording device, according to prosecutors and the court filing.

The complaint states Alfozan planted the listening device "no later than on or about September 28, 2026." OpenAI's security team discovered it on September 30 during a countersurveillance sweep. The bug, which the complaint says was "concealed in toilet paper" and "inserted into a USB port on the back of a television" in the conference room, was described by OpenAI as "sophisticated."

The hardware itself was anything but exotic. Authorities identify it as a thumb-sized board with a detachable camera sensor, digital microphone, and microSD storage. OpenAI's security team tried to export the data on the microSD card but couldn't review it, because it was encrypted.

Why the target room matters

The conference room was not a random pick. According to the complaint, it "can be reserved only by executives and executive assistants" and is typically used "for internal leadership meetings," "technical and product sessions," and "external briefings" with business partners and government officials. The filing says the room is frequently used for discussions involving "highly confidential" information, including research, products, business strategy, and government relationships.

Federal Bureau of Investigation director Kash Patel said in a statement that Alfozan aimed "to secretly capture sensitive communications about the company's super intelligence technology." Neither prosecutors nor OpenAI have offered any information about a potential motive so far.

OpenAI, for its part, says its core systems stayed clean. "At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data," the company said in a statement on X. "We take protecting our technology, data, and people seriously, and as a matter of national importance."

How the second device unraveled the story

The investigation picked up speed on October 5, when OpenAI security personnel found a bag Alfozan had left unattended in a printer room. Inside, according to the complaint, was a second encrypted Seeed listening device that had not been installed, along with personal items connected to Alfozan, including his wallet.

What happened next reads like an amateur spy's checklist of mistakes. Prosecutors say Alfozan later reported the bag as missing to OpenAI and recovered it from the company's lost and found. He then followed up with unnamed personnel to say items he expected to be in the bag were still gone, including a credit card, about $500 in cash, and two AirPods. He didn't mention the second listening device, which OpenAI security had already removed.

After discovering the first device, OpenAI says it notified the FBI and connected the bug to Alfozan by reviewing chat logs and surveillance footage, and by searching the unattended bag. The company gradually disabled his access to internal systems while the investigation ran.

Who is Abdulrahman Alfozan?

A purported LinkedIn profile says Alfozan previously worked at a cargo logistics startup and at Meta. In a recent podcast interview, he said he was part of a group of Saudi engineers in Silicon Valley who offered consulting services to Saudi organizations. The LinkedIn profile also lists him as a part-time "venture partner" at RAED Ventures, a Saudi Arabia-based venture capital firm. Neither RAED Ventures nor Meta immediately responded to WIRED's request for comment.

Why the geopolitics can't be ignored

The case lands at an awkward moment in US-Saudi tech relations. Last year, the Trump administration signed a pact with Saudi Arabia granting the kingdom access to advanced chips and AI technologies that might otherwise have been restricted over national security concerns. Saudi investment firms remain a major source of capital for US tech companies, which makes any allegation involving a Saudi national at a frontier AI lab politically charged regardless of what prosecutors ultimately prove about motive.

There's also the uncomfortable irony at the center of the complaint. The same category of AI tools that OpenAI sells as productivity boosters allegedly helped one of its own engineers plan surveillance of his employer's leadership — and the company only caught it through a physical countersurveillance sweep, not through any monitoring of how its internal tools were being used.

The encryption on both devices means investigators may never recover whatever the first bug recorded in those two days before its discovery. Whether prosecutors can establish a motive, and whether the chatbot queries surface as evidence at trial, will shape how this case is read across an industry where insider access to frontier AI research is now treated as a national security asset.