OpenAI employees raised concerns about the company’s security practices before ChatGPT launched in late 2022, sharing them with senior leaders and the board, Reuters reported, citing five people familiar with the matter. Some former employees said they were not surprised when OpenAI later disclosed finding a recording device in an executive conference room.
3
What employees reportedly warned about
Reuters’s account describes concerns that had surfaced inside OpenAI well before the device was found. Some employees reportedly came away from discussions with leaders believing that keeping pace with competitors was taking priority over protecting the company’s technology.
3
39
A separate summary of Reuters’s reporting describes employee concerns about broad access to company code and a lack of regular security reviews for internal tools.
14 The available reporting excerpts do not establish the full details of repository permissions or precisely how often particular systems were reviewed, so those points should not be treated as a complete account of OpenAI’s safeguards.
The broader issue is how to balance collaboration and speed with controls around sensitive systems. The sources describe employee concerns and management’s reported priorities; they do not, by themselves, establish that any particular security practice caused the recording-device incident.
The recording-device case
In October, U.S. authorities announced that OpenAI engineer Abdulrahman Alfozan, 35, had been arrested and charged with using or attempting to use a device to intercept oral communications.
1 Reuters reported that the case involved a hidden audio recorder allegedly installed in an executive conference room.
2 The charge is an allegation, not a finding of guilt.
The discovery prompted some former employees to recall the security warnings they had raised earlier, Reuters reported.
3 The available sources do not establish the full circumstances of the alleged placement or Alfozan’s detention status as of Nov. 3.
OpenAI’s reported security response
Reuters’s Spanish-language report said OpenAI had begun changing its approach to security and that Thibault Sottiaux, a senior product-development executive, had recently taken charge of an internal effort to protect the company’s systems.
46 A secondary account of the reporting says Sottiaux reassigned about a quarter of production engineers to security infrastructure in August; that specific figure is attributed to one source, rather than presented as a company-wide confirmation.
53
OpenAI also announced a new internal security sprint on Nov. 2. The company said it would work with outside researchers and security partner Cathedral to use its models to test and strengthen its systems.
52 The announcement describes a planned effort; it does not, on its own, demonstrate what vulnerabilities the sprint will find or how much risk it will reduce.
What the reporting establishes—and what it doesn’t
The central finding in Reuters’s report is that security concerns were raised internally before ChatGPT’s launch and brought to senior leaders and the board.
3 The reporting also points to a potential conflict between rapid development and tighter security controls.
39
The sources available here do not verify every allegation raised in broader accounts of OpenAI’s security practices, nor do they show that the new measures resolve the concerns employees described. The clearest picture is therefore one of longstanding warnings, a serious alleged incident, and a company response that includes a new security initiative—not proof that any single factor explains the incident or that the risks have been eliminated.