An OpenAI engineer has been accused of hiding a recording device in an executive conference room in San Francisco and now is facing charges from the federal authorities.
The surprising turn is that AI technology had supposedly assisted the individual in his preparation, while OpenAI said that its models helped investigate the case.
What prosecutors say Alfozan did
Prosecutors said that Abdulrahman Alfozan, aged 35, hid the recording device in toilet paper and attached it to the USB port of a television set on September 28, 2026. OpenAI’s security discovered it during a search on September 30, according to the Department of Justice.
The gadget is identified as a $13.99 Seeed XIAO ESP32-S3 Sense board that comes with an encrypted microSD storage, according to WIRED. Authorities reviewed the surveillance clips. They discovered a second recorder in an unattended bag containing Alfozan’s identification on October 5.
After being arrested on October 9, he was brought to court on October 13. If he is found guilty, he will spend five years in jail and pay the fine of $250,000. According to the New York Times, another hearing is scheduled for October 19. The prosecution did not provide any information regarding the motive.
The chatbot trail, and OpenAI’s AI-assisted response
Prosecutors claim that Alfozan used a workplace productivity agent to search executive meeting rooms and schedules. Also, a chatbot account linked to his spouse was used to check for around-the-clock recording, access to Wi-Fi, as well as ability for live listening and SD card encryption.
OpenAI claimed that its models allowed security staff to understand the device and identify who planted it. But AI was only part of the investigation. Camera footage, chat records and physical evidence also helped in the investigation.
The company has found no evidence to suggest that model weights, source code of its models, or customer data were accessed or stolen without permission.
What a single insider can cost
If confidential data was compromised, the situation would have significantly worsened and become more expensive. IBM states that data breaches cost businesses an average of $4.99 million globally. Organizations that use security AI and automation tools have reported breach costs that are $1.93 million lower than companies that do not.
Insider attacks create more financial risks. The Ponemon Institute and DTEX estimate that the average cost of containing an insider breach incident is $247,587. For companies that took over 90 days to contain an incident, the average cost is $21.9 million. The figures in this report reflect the average costs in the industry, not the losses attributed to OpenAI.
Why budgets and AI oversight are climbing
PwC found 84% of surveyed security and finance leaders expect cyber budgets to rise, while 58% of security leaders prioritize AI spending.
Gartner projects AI governance-platform spending will rise from $492 million in 2026 to more than $1 billion by 2030. BCG found nearly half of companies already see value from AI, yet only 5% have complete controls for autonomous agents.
A separate fight over watching the models
Cryptopolitan reported that three former OpenAI researchers have separately questioned how the company monitors advanced models and called for independent safety reviews. That debate concerns model behavior, not the alleged bugging. Both show how quickly trust and oversight are becoming business issues for AI companies.
Don’t just read crypto news. Understand it. Subscribe to our newsletter. It's free.