The case began, according to investigators, in late September, when Alfozan allegedly used workplace tools to locate executive meetings and a chatbot account associated with his spouse sought advice on building, concealing and encrypting recording equipment.¹

Prosecutors say a device was planted around Sept. 28 in a USB port behind a television in an executive conference room, wrapped in toilet paper. OpenAI’s security team found it during a Sept. 30 sweep. The company described a device built to evade detection, with encryption, audio-monitoring capability and a means of transferring data unnoticed.²

The government’s account intensified on Oct. 5. CCTV footage allegedly showed Alfozan looking behind the television, while security staff found a bag elsewhere in the office containing his identification and a second, similar device. OpenAI restricted his system and office access while coordinating with the FBI rather than immediately terminating him.¹

On Oct. 8, prosecutors sought to keep the case sealed, saying Alfozan, his wife and another family member had booked one-way tickets from San Francisco to Saudi Arabia via Istanbul. They argued he would have both the means and incentive to leave if warned of the investigation.³ The FBI arrested him Oct. 9; OpenAI fired him the same day. He faces a charge of intercepting oral communications, which carries a maximum five-year prison term.

For OpenAI and law enforcement, the alleged device belonged in a room where proprietary research, product plans and government engagements were discussed—making the episode a test of how aggressively frontier labs defend sensitive work. Yet OpenAI has said it found no indication that model weights, source code or customer data were improperly accessed or taken.²

Alfozan has not entered a plea. His lawyer, William Pernik, said the allegations “appear wholly out of character,” stressing that the charge is not trade-secret theft or acting as a foreign agent. “Where someone was born is not evidence of anything,” Pernik said.⁴