If this shit happened to a site I owned you can bet I'd go after OpenAI for hacking. It's still their responsibility. This is the same as some Chinese/Russian/North Korean hacker trying to get into your website? is it not?