OpenAI Engineer Charged After Using ChatGPT to Build Secret Recording Device
Federal prosecutors allege an engineer attempted to plant surveillance hardware inside OpenAI's San Francisco offices.
1Unauthorized Surveillance Attempt
Abdulrahman Alfozan, an OpenAI engineer, allegedly attempted to plant a recording device in a high-security executive conference room. Federal prosecutors claim he used his wife’s ChatGPT account to generate technical prompts for building a continuous audio recorder. The device was discovered hidden behind a television during a routine office security sweep.
2AI-Assisted Hardware Development
Between September 24 and September 30, Alfozan used ChatGPT to refine the device's specifications. Prompts included instructions for live listening, SD card encryption, and power-only USB output. The hardware, a Seeed XIAO ESP32-S3 Sense board, was designed to capture audio from sensitive leadership meetings and briefings with external government officials.
3Internal Reconnaissance Tactics
Six weeks prior to the incident, Alfozan reportedly used an internal OpenAI productivity agent to identify meeting rooms with high-capacity and strategic importance. He specifically targeted rooms hosting confidential discussions regarding proprietary research and business development. He lacked authorized access to these executive areas, which were restricted to senior leadership and assistants.
4Forensic and Physical Evidence
OpenAI security discovered the device wrapped in toilet paper on September 30. Forensic analysis of the memory card failed to recover data, as the contents were encrypted. CCTV footage placed Alfozan near the conference room for ten days in September, including a four-hour window on the day the device's firmware was compiled.
5Failed Recovery and Arrest
After security removed a second recording board from his bag, Alfozan reported his items as stolen, omitting the surveillance hardware. He was arrested on October 9, just three days before a scheduled one-way flight to Saudi Arabia. Prosecutors argued he possessed both the means and the incentive to flee the United States.
6Legal Charges and Implications
Alfozan faces one count under the federal Wiretap Act, carrying a maximum sentence of five years in prison. While the complaint does not currently charge him with trade-secret theft or economic espionage, a trial attorney from the National Security Division is assisting the prosecution to evaluate potential broader national security implications.
7Corporate Security Response
OpenAI confirmed the use of its platform for the illicit activity and stated there are no indications that model weights, source code, or customer data were compromised. Following the discovery, the company increased physical security measures, including the installation of cameras in the conference room to monitor for further unauthorized access attempts.
8Broader Counterintelligence Context
The involvement of the National Security Division highlights the high priority placed on protecting American AI innovation from potential threats. While the specific intent remains under investigation, the case underscores the evolving risks of using generative AI tools to facilitate physical security breaches and the necessity for robust internal monitoring systems.