OpenAI: Engineer Arrested, No Data Breach Detected

An OpenAI engineer has been arrested following the discovery of a hidden recording device in the company's office. OpenAI claims to have no indication of any leaks of models, code, or customer data and specifies that the FBI investigation is ongoing. The company states that it used its own models to trace the origin of the device and has terminated the engineer.

Ongoing Federal Investigation and Initial Charges

According to the San Francisco Standard, the employee was apprehended on Friday, detained, and presented for the first time in federal court on Tuesday. The charges relate to the use or attempted use of a device intended to capture oral communications. OpenAI confirms that it reported the matter to the FBI and states that the investigation is ongoing, with the company's continued cooperation.

OpenAI Terminates the Engineer and Claims Support from Its Models

OpenAI asserts that at this stage, there is no indication of inappropriate access or significant exfiltration of model weights, source code, or customer data. The company claims to have used its AI models to analyze the device and its origin, identifying that a specific employee had installed it a few days earlier, before terminating him. OpenAI emphasizes that it takes the protection of its technology, data, and employees very seriously, citing national importance, and describes a security program designed to protect against threats ranging from internal risks to cybercriminals and nation-states. It adds that this incident demonstrates how AI can help address sophisticated security threats.

The Device Described as a Hidden Recorder Connected to a Television

OpenAI reports having uncovered an advanced recording device concealed within one of its premises. According to the San Francisco Standard, this device was connected to the USB port of a television located in a conference room reserved for management and had been camouflaged using toilet paper. Its installation is said to date back to around September 28. The implicated employee is identified as Abdulrahman Alfozan, 35 years old.