# OpenAI employees reportedly warned leaders about security risks for years

Digest AI · Business & Funding · published 2026-11-03T19:28:03Z

Canonical: https://digestai.news/story/openai-employees-reportedly-warned-leaders-about-security-risks-for-ye

## Summary

Reuters reported on November 3, 2026, that five people familiar with OpenAI’s practices said employees had warned leaders about operational-security weaknesses for years. Concerns included broad code access in a single repository, a lack of regular security reviews for internal tools, and insider threats. Some staffers raised these issues before ChatGPT launched in late 2022, believing management prioritized competing with Google and Anthropic over security. In 2023, researcher Leopold Aschenbrenner wrote an internal memo titled “OpenAI is China’s leading AI lab,” expressing concern about potential infiltration by China. He shared it with directors after an outsider hacked into OpenAI and obtained details about GPT-4, though OpenAI stated the hacker only accessed public Slack channels.

OpenAI has since taken steps to address these issues. The company stated that sensitive work is now held in separate repositories with strict access controls, and the main monorepo no longer contains critical model details like weights. Under Chief Information Security Officer Dane Stuckey, who joined in October 2024, OpenAI now conducts regular security reviews of internal tooling. Senior executive Thibault Sottiaux has also led an initiative to secure internal systems, reassigning a quarter of production engineers to security work in August 2026.

Additionally, OpenAI announced plans for another internal security sprint with Cathedral, where researchers will use OpenAI models to challenge defenses. The company is more than quadrupling rewards for critical findings in its bug-bounty program. This follows the October 2026 arrest of engineer Abdulrahman Alfozan, who was charged with using a recording device in an executive conference room. Alfozan has been charged, not convicted. The company faces the challenge of balancing its open research culture with the need for stricter security as AI systems become more capable.

## Key points

- Five sources say OpenAI employees warned leaders about security weaknesses for years.
- OpenAI is quadrupling bug-bounty rewards and partnering with Cathedral for security sprints.
- Engineer Abdulrahman Alfozan was charged in October 2026 with using a recording device.

## Why it matters

These reports highlight significant internal security vulnerabilities at a leading AI lab, raising concerns about data protection and the balance between open research culture and operational security in the AI industry.

## Sources

1. [OpenAI Employees Warned for Years About Internal Security Risks](https://unite.ai/openai-employees-warned-for-years-about-internal-security-risks) (Unite.AI, 2026-11-03)

Part of the developing story: [Former OpenAI Engineer Charged With Espionage](https://digestai.news/thread/openai-engineer-arrested-for-allegedly-planting-recording-device-in-office) (6 stories)

## Cite

Digest AI, "OpenAI employees reportedly warned leaders about security risks for years", 3 November 2026, https://digestai.news/story/openai-employees-reportedly-warned-leaders-about-security-risks-for-ye

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/openai-employees-reportedly-warned-leaders-about-security-risks-for-ye.json