OpenAI Bug Suspect Had 'Saudi Gov Docs' Folder and a One-Way Ticket Home
A US magistrate judge ruled Monday that Abdulrahman Alfozan, the former OpenAI engineer accused of planting covert recording devices inside the company's offices, will remain in custody while the government builds its case. The ruling came after prosecutors laid out a fairly damning portrait of someone who appeared to have one foot out of the door before he was even arrested.
Alfozan, a Saudi national and US permanent resident, joined OpenAI as an engineer in July 2025 on a base salary of $325,000, plus a $2.2 million equity grant. He'd been in the US since 2009, picked up degrees from MIT and UC Berkeley, and spent over a decade working in Silicon Valley. By the time he landed at OpenAI, he was also apparently chatting with a member of the Saudi Royal Family on WhatsApp and exploring a permanent return to Riyadh.
The FBI caught him roughly two weeks before he was due to board a one-way flight to Saudi Arabia with his wife and baby. That flight, prosecutors allege, was paid for by the Saudi government. After his arrest, his wife and son left without him on a business class ticket to Doha booked and paid for by a member of the Saudi military. So the Saudi state was apparently quite keen on getting the family home.
The conference room bug that triggered the investigation had been in place for at least several days, including during a meeting between senior OpenAI staff and US government officials. Prosecutors say they've since found evidence of at least one additional device. Photos on Alfozan's iPhone showed what appeared to be another hidden recorder alongside images of input/output panels on televisions and other equipment in various OpenAI locations, including a second conference room used for sensitive meetings.
On his iPhone, the FBI also found a folder labelled 'Saudi Gov Docs', accessed on October 4th. The government hasn't disclosed the contents but noted what Alfozan did immediately after opening it: he used OpenAI's own productivity agent to query who at the company would be suitable to attend 'a high level informal meeting with ministers in Saudi Arabia,' asking for ten names and justifications. That's a striking thing to type into your employer's internal tools.
His WhatsApp messages with the royal family contact, dating back to when he started at OpenAI, included one exchange where Alfozan replied '100' to a message telling him 'Saudi needs you more then [sic] the US.' The typo is theirs.
Prosecutors also allege he used his wife's personal ChatGPT account, on his own laptop, to research how to modify recording devices to auto-trigger on speech detection and allow remote access. His wife reportedly confirmed to the FBI that she'd seen her ChatGPT account open on his machine.
The current charges carry a maximum five-year sentence, though the government signalled that more serious charges may follow as the investigation progresses. Prosecutors argued that whether Alfozan was acting for personal gain, on Saudi Arabia's behalf, or both, the conduct amounts to criminal behaviour that threatens both commercial innovation and national security.
The flight risk argument was straightforward: his family is already in Saudi Arabia with no stated plans to return, he has at least two Saudi bank accounts, substantial savings from a decade of well-paid tech work, and a foreign government that has previously arranged last-minute flights for its citizens facing scrutiny in the US. The government pointed to the case of Ali Alzabarah, a former Twitter employee charged with spying for Saudi Arabia, who was helped onto a flight out of the country the day after Twitter confronted him. Charges against Alzabarah remain pending partly because he never came back.
Magistrate Judge Alex G. Tse agreed Alfozan should stay detained pending trial. Given that his wife and child are overseas, Saudi Arabia is mid-way through an enormous state-directed AI investment push, and someone apparently booked him a one-way ticket home before he was even fired, the judge's reasoning is not hard to follow.