OpenAI bugging case highlights AI’s insider threat problem

An OpenAI employee’s alleged attempt to bug an executive conference room shows how much AI companies have to protect beyond their code, policy experts say, as developers contend with the reality that everyday workplace conversations can reveal sensitive details about their technology plans.

The Justice Department announced Tuesday that Abdulrahman Alfozan, a 35-year-old OpenAI engineer and Saudi national, had been arrested Oct. 9 on a charge of using or attempting to use a device to intercept oral communications.

OpenAI personnel discovered the recorder — concealed in toilet paper and plugged into the back of a television — on Sept. 30. The room hosted discussions about proprietary research, product plans and government engagements, according to the Justice Department.

“We tend to picture AI security as chips, weights, and code. This case is a reminder that the stack also includes the rooms where the roadmap gets discussed and the people who walk into them, and anyone who wants insight into frontier AI has every reason to look at all of it,” said Leah Siskind, director of impact and an AI research fellow at the Foundation for Defense of Democracies.

Prosecutors allege Alfozan had no authority to access the room but was seen near it repeatedly. The FBI complaint names the device as an off-the-shelf camera and audio recording chip which sells for $14 online. They also say security personnel found another similar recorder in a bag containing his identification.