It's reported here https://www.nytimes.com/2026/09/25/technology/openai-hugging... so presumably accurate, and they have raw data viewable

Or, it's impressive that, amongst the millions of hacks it has copied from various chat sites, were some that worked in this case.

The scale of these things is impressive, but the mechanism is not much better than brute force.