FBI Says a $24 Hobbyist Chip Bugged OpenAI's Executive Conference Room; Engineer Alfozan Has Not Entered a Plea

Since the Justice Department unsealed its complaint on Oct. 13, the case against OpenAI engineer Abdulrahman Alfozan has been filled in with new detail. The most striking part is how cheap and ordinary the alleged hardware was.

The FBI complaint, filed Oct. 8, identifies the device as a Seeed Studio XIAO ESP32-S3 Sense. It is a postage-stamp-sized microcontroller with a built-in microphone and Bluetooth. It sells for $24 on Amazon and about $14 direct from Seeed, the Shenzhen-based manufacturer.

Seeed did not respond to requests for comment.

A hobbyist board, not spy gear

Hobbyists use the board for things like turning on lights when someone claps. The chip can also be programmed to record audio and save it to a memory card, like a basic digital voice recorder. It needs no internet connection to do that.

Prosecutors allege that is what happened here. OpenAI staff found the device on Sept. 30, wrapped in toilet paper and plugged into a port on the back of a television in an executive conference room at the company's San Francisco office. The Justice Department says its contents were encrypted.

Security personnel also found a second, similar recorder in a bag containing Alfozan's wallet and identification, according to the DOJ.

The chatbot queries

The complaint says a chatbot account associated with Alfozan's spouse shared multiple identifiers and attributes with his own account. Prosecutors say the linked account began making queries on Sept. 24 about building, customizing, installing, testing, obfuscating and remotely accessing an audio device.

Per Fortune's reporting, the prompts included requests on how to build "a continuous audio recorder," enable "live listening," and manage "downloading/deleting recordings." According to the FBI complaint, the optimizations covered speech-activated recording software and encryption meant to obscure what was captured.

Alfozan's wife has not been charged. Authorities have not said which AI model the account used.

OpenAI said it used its own AI models to help understand the device and identify the employee who planted it. The company fired him and said it has "no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data."

Who Alfozan is

Alfozan, 35, is a Saudi national. He was arrested Oct. 9 and made his first federal court appearance Oct. 13. He is charged with using or attempting to use a device to intercept oral communications. He has not entered a plea, and his attorney did not respond to a request for comment on Wednesday, Oct. 14.

He is also listed as a venture partner at Raed Ventures, a Riyadh-based firm. The firm announced his hiring Feb. 8, citing earlier work at Meta, Microsoft and SAP and a computer science degree from MIT. The Financial Times reported he hosted a roundtable at a Saudi-backed conference during Saudi IT minister Abdullah al-Swaha's San Francisco visit last month. Raed Ventures did not immediately respond to a request for comment.

A court filing shows he booked a one-way ticket to Saudi Arabia for Monday, Oct. 12. No filing or official statement in the case links him to the Saudi government or any organized group. FBI Director Kash Patel said Alfozan allegedly hid the device to capture sensitive communications about OpenAI's superintelligence technology.

The complaint says he had no authorization to enter the room, where executives discussed proprietary research, product plans and government engagements. Prosecutors say building footage showed him near it repeatedly. They also say he used a workplace productivity tool to query meeting rooms, capacities, calendars and where leadership and partners would be meeting.

How serious was it

Policy researchers disagree on how much the case should worry anyone. Jam Kraprayoon of the Institute for AI Policy and Strategy called it "a fairly crude operation" that, from what has been reported, "didn't reach the assets I'd be most concerned about," meaning model weights and core algorithmic insights.

Leah Siskind of the Foundation for Defense of Democracies took a wider view. "We tend to picture AI security as chips, weights, and code," she said. "This case is a reminder that the stack also includes the rooms where the roadmap gets discussed and the people who walk into them."

Both points can hold at once. The hardware cost less than a dinner for two, and the alleged target was a room where a frontier AI company's leadership talks strategy.

The charge is an allegation, and Alfozan is presumed innocent. What remains unanswered is why he allegedly did it, whether the encrypted recorder captured any conversation, and whether any recording ever left the building. The DOJ has not said.