According to federal investigators, the alleged scheme began in late September, when a chatbot account associated with Alfozan’s spouse was used to seek information about building, concealing and encrypting audio-recording equipment. Prosecutors also say Alfozan used an internal productivity tool to research sensitive meetings and office locations.¹

Investigators believe a device was planted around Sept. 28 in an executive conference room at OpenAI’s San Francisco office. Two days later, during a security sweep, OpenAI found a USB device behind a television, allegedly wrapped in toilet paper. The room was used for discussions of proprietary research, product plans, government engagements and commercial relationships.²

OpenAI’s account emphasizes containment as much as detection. The company said it used its models to analyze the device and trace its origin to “a specific employee” who had planted it days earlier, then referred the matter to the FBI.³ The company gradually restricted Alfozan’s access while agents investigated; prosecutors allege that on Oct. 5 he returned to look behind the television, while security found another similar device in a bag left elsewhere in the building.¹

On Oct. 9, the FBI arrested Alfozan, 35, and OpenAI fired him. He was charged with using a device to intercept oral communications, a felony carrying a maximum five-year prison sentence if he is convicted.⁴ Prosecutors framed the case in sweeping terms: U.S. Attorney Craig Missakian said, “For us, it is a matter of national security.”⁵

OpenAI says it has found no indication that model weights, source code or customer data were improperly accessed or taken.² Alfozan has not entered a plea, and his attorney did not immediately respond to a request for comment, leaving the government’s account unchallenged publicly for now.⁶