OpenAI’s post is very very very carefully worded so here’s more information from the criminal complaint and DOJ statements. The individual that planted the device was Abdulrahman Alfozan, 35, a Saudi national and engineer on the product team who joined OpenAI in July 2025. Key allegations from the complaint (N.D. Cal.): • On or about Sept. 30, OpenAI’s technical surveillance team found a surreptitious audio recording device plugged into a USB port on the back of a TV in an executive conference room. It was concealed in toilet paper, installed around Sept. 28, and its contents were encrypted. • The room is used for highly confidential technical, commercial, and strategic discussions. Alfozan had no authority to access it or attend meetings there. CCTV showed him near the room on multiple dates beforehand. • On Oct. 5 he entered the room and appeared to look behind the TV. That same day he left an unattended bag in another room containing his wallet, ID, and a second similar recording device. • Before installation, he queried internal tools about building addresses, meeting rooms, room capacities, calendars, and locations of leadership and external partner meetings. • A chatbot account tied to his spouse (sharing multiple identifiers with his own) submitted prompts between Sept. 24–30 about building a continuous audio recorder, encrypting the SD card, concealing the device, adding Wi-Fi/remote access, and the specific device’s MAC address. He’s been charged with using or attempting to use a device to intercept oral communications (18 U.S.C. § 2511). If convicted: up to 5 years, $250,000 fine, and 3 years supervised release. Arrested Oct. 9, initial appearance Oct. 13, remains in custody. Detention hearing set for Oct. 19. OpenAI says it used its models to help identify him, coordinated the termination with the FBI (access was progressively restricted beforehand), and has no indications of model-weight, source-code, or customer-data exfiltration. U.S. Attorney described it as a national-security matter; FBI has flagged protection of American AI innovation as a high counterintelligence priority. Friendly reminder that physical + digital insider-threat controls matter even when the goal isn’t classic IP exfiltration. Wiretap charges don’t require successful data theft. Toilet-paper concealment and a second device left in a bag with ID are not sophisticated tradecraft. (Complaint details drawn from SF Standard reporting, DOJ/USAO Northern District of California statements, and OpenAI’s own post.)