Arrest and Charges
An OpenAI engineer was arrested after the company said it discovered a recording device hidden in one of its offices. The employee was identified as Abdulrahman Alfozan, a 35-year-old national. Alfozan is charged with using or endeavoring to use a device to intercept oral communications, according to a press release from the Department of Justice.
OpenAI employee arrested for allegedly planting a bug in a conference room
The recording device was apparently discovered plugged into a TV’s USB port in an executive meeting room.
Internal Investigation
OpenAI stated that it used its internal models to analyze the device and its origins, identifying that a specific employee had planted it a few days earlier.
The recording device recovered from a TV in OpenAI’s office.
As noted by the DOJ, OpenAI found the device plugged into a TV’s USB port in an executive conference room, where discussions about highly confidential technical, commercial, and strategic information frequently take place.
CCTV Evidence
Although Alfozan did not have authorization to access the room, CCTV footage allegedly showed him near the executive conference room on multiple dates prior to the device’s discovery. Footage also captured him appearing to look behind the TV where the device was installed, federal prosecutors claim.
A photo allegedly showing Alfozan looking behind the TV where the device was installed.
Seized Items
The device was concealed and installed on or around September 28th with encrypted contents. Additionally, the DOJ claims OpenAI security discovered a bag left behind in another office room containing his wallet, identification, and a second recording device.
Legal Proceedings
OpenAI terminated the employee and referred the incident to the FBI. Alfozan was arrested and remained in custody, making his first appearance in federal court.
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
Update, October 13th: Added information from the DOJ.
