noticias ia para empresas ai first ciberseguridad openai fbi secretos empresariales seguridad de la informacion

Flash edition. In this morning's Radar, we covered how to get your data out if your AI vendor shuts down. Since last night, there's the flip side: federal prosecutors say an OpenAI employee tried to secretly record its executives' conversations.

What happened

The FBI arrested Abdulrahman Alfozan, a 35-year-old Saudi national who had been an OpenAI engineer since July 2025, on October 9; he appeared in federal court on Tuesday. According to the complaint, on September 30, OpenAI found an audio recorder wrapped in toilet paper and plugged into the USB port of the television in the executive conference room. Security cameras showed him near that room, which he had no authority to enter. Before that, he had used a productivity tool to look up meeting rooms, calendars and where executives were located, and a chatbot account associated with his spouse asked for help to "build a continuous audio recorder" and "encrypt the SD card." He is accused of intercepting oral communications: up to five years in prison and a $250,000 fine (Source). OpenAI says it analyzed the device with its own models and sees no signs of access to model weights, source code, or customer data (Source).

Why it matters

It's a criminal complaint, not a conviction, and it doesn't say who he was recording for (Source). Still, it offers two lessons. First: one of the world's most valuable AI companies wasn't hit over the internet, but from the inside, with a gadget plugged into a USB port. Second: the evidence behind the charge (his searches, the chatbot prompts, the camera footage) is made of records that already existed before anything happened.

For your business

• Check the room where decisions get made. USB ports on screens and TVs, who can book it and who can see its calendar. If the whole company can see the leadership calendar, so can every employee's AI assistant, because it runs with that employee's permissions.
• Use AI through company accounts with logging. Whatever your team types into a chatbot is stored somewhere; better that it's in a dashboard you control. In Spain, before you can review it you need written usage rules, shared with your staff (Source).
• Document your measures. Spain's Trade Secrets Act only protects information its owner has kept secret through "reasonable steps" (Source): without restricted access or NDAs, you'll struggle to prove in court that there's any secret to protect.

On the AI First ladder, moving up to INTEGRATED means handing AI your calendars and documents: permissions and logs are part of the same package.

Frequently asked questions

Is this a case of corporate espionage?

The FBI is treating it as counterintelligence, but the charge is intercepting oral communications. The complaint does not say who he was recording for or whether he got anything out.

Did he access OpenAI's customer data?

OpenAI says there's no sign of it, nor of any access to model weights or source code.

Can I record my employees to prevent something like this?

In Spain, video cameras are allowed if you tell staff beforehand. Audio recording is only allowed when there are significant security risks, and never in locker rooms, restrooms or lunchrooms (Article 89 of Spain's data protection law, the LOPDGDD).