Federal authorities arrested an OpenAI engineer on October 9. Prosecutors say Abdulrahman Alfozan planted a recording device in an executive conference room. Security found it September 30 during a sweep. The device was wrapped in toilet paper and plugged into a USB port behind a television. OpenAI used its own models to understand the device and trace it to the employee. The arrest notice went out October 13.
The complaint cites a chatbot account associated with Alfozan's spouse. It queried how to build a continuous audio recorder. It also asked how to encrypt an SD card and modify Wi-Fi connectivity. Those queries ran between September 24 and September 30. On September 27 and 28, the chatbot received prompts about the specific hardware later found in the room. The prompts included its MAC address. The model logged those queries. Prosecutors say security cameras showed Alfozan near the room multiple times. He had no authorization to access it. On October 5, the complaint says, he walked in and looked behind the television. Security found a second similar device in his bag that day.
The model answered the queries and logged the evidence
The estimating tool scores subcontractor bids. Atelier routes prompts to nine providers. Each platform calls a model. The model answers. The API logs request and response. A user can query a model about continuous audio recording, SD-card encryption or Wi-Fi obfuscation. The model answers. The API records the exchange. That user may deploy a physical device matching those specifications later.
The Department of Justice says Alfozan also used a productivity tool to search for building addresses and meeting rooms. He searched for executive locations and partner calendars. The device sat in the conference room for two days. The room hosted discussions of proprietary models and business plans. OpenAI says it has no indication he took model weights, source code or customer data.
Prosecutors cite the chat logs
The construction ERP reconciles invoices. The flight planner calculates fuel burns. The ERP's AI tools call a model. The API logs the request. A user can ask the model how to exfiltrate a table. A user can ask how to modify an invoice or forge a webhook signature. The model answers. The request appears in the logs. The API records the query, the response and the timestamp.
Alfozan worked at OpenAI since July 2025. He left a bag unattended October 5. Security opened it and found his wallet, his ID and a second recording device. On October 6 he reported items stolen from the bag. He listed a credit card, five hundred dollars and AirPods as missing. He listed headphones, sunglasses and a power bank. He did not mention the recording device. The FBI says the device in the bag had a recording microcontroller. It was customized to obfuscate stored data. OpenAI says it has evidence he intended to deploy more devices in other rooms.
The logs proved the queries.
The jewelry site processes product-drawing sessions. The dating-profile tool runs on one Cloudflare Worker. It assumes the user calls the model, receives an answer and moves on. The model may tell a user how to modify a route or rewrite an invoice. It may explain how to access a restricted endpoint. The integration has no baseline. The API cannot tell whether the answer ships to a dashboard or to a hardware build. The chat log showed queries about audio recorders and encryption. It showed queries about Wi-Fi between September 24 and September 30. The physical device appeared in the conference room September 28. OpenAI linked those events with its own models and security footage. The model answered the queries. The logs recorded the answers. The deployment happened offline.