Internal security concerns surface at OpenAI following discovery of eavesdropping device

OpenAI discovered a hidden recording device in an executive meeting room in October of this year. This incident follows years of internal employee concerns regarding the company's security posture. Employees had raised security concerns to senior management and the board as early as before ChatGPT launched in late 2022, worrying that management prioritized rivals like Google and Anthropic over robust security. Past practices, including storing code in a large monorepo and keeping research documents on GitHub and Slack, fueled data exposure worries. In response, OpenAI has begun adjusting security protocols, led by senior executive Thibault Sotiro. Spokesperson Elana Widman stated the company invests heavily in defenses against internal actors, cybercriminals, and state actors. Additionally, the U.S. Department of Justice recently arrested Saudi national Abdullah Rahman Al-Fauzan, reportedly an OpenAI engineer, charged with planting the device. OpenAI countered internal tool concerns by noting that under Chief Information Security Officer Dane Stucky, who joined in October 2024, the company has implemented strong security measures and conducts regular reviews.