The breach happened in June but Open AI only became aware of it in August. It notified the government via an email, external to a general inbox on 10 September

This is just atrocious on every level. First of all, they're hacking everyone with impunity. Then, they're taking 2 months to find out about it, and a further month to report it. So not only can they not control their AI, as a company they clearly have no systems in place to report it either.