A concealed recorder at OpenAI, MI5’s warning to British businesses, and a London reminder that phone theft can lead to further attempts to access information.

1. OpenAI: confidential conversations in the spotlight

On 13 October, the US Department of Justice announced charges against an OpenAI employee following the discovery of a concealed audio recording device in an executive conference room in San Francisco.

According to the criminal complaint, personnel discovered the device around 30 September. The room was used for sensitive technical, commercial and strategic discussions.

The defendant is presumed innocent. The reported discovery does not, by itself, establish what conversations were captured, whether information reached another party, or who any intended recipient might have been.

Why it matters: this is a publicly documented case of a concealed recording device being discovered in a business meeting environment. It gives UK boards a concrete reason to consider how spoken information is protected.

⁠Source: US Department of Justice — 13 October 2026

2. MI5: national security reaches the workplace

Speaking at Thames House in London on 13 October, MI5 Director General Sir Ken McCallum said hostile activity targets people, businesses and communities—not only government.

He described protective security as a core MI5 mission and highlighted joint NPSA and NCSC advice covering sabotage, hostile reconnaissance, insider risk, drones and cyber threats.

Why it matters: for business leaders, the practical question is whether physical, personnel and cyber security work together to protect valuable information and maintain operations.

⁠Source: MI5 annual threat update — 13 October 2026

3. London: a stolen phone can lead to a second attack

In an update published on 8 October, the Metropolitan Police warned that criminals are contacting phone-theft victims while posing as trusted organisations, seeking passwords and account details to unlock stolen devices.

The warning accompanied news of more than 700 arrests during September’s crackdown.

Why it matters: an organisation’s response to a stolen work phone should also prepare the affected person for follow-up deception and attempts to obtain account access.

⁠Source: Metropolitan Police — 8 October 2026

The Whiterock perspective

These are different stories, with different circumstances. Our practical observation is that information protection needs to follow the information: into conversations, meeting spaces, portable devices and the actions of people with access.

The question for this week:
When confidential information is spoken in your meeting room, what gives you confidence that it stays there?