> In June, agents trying to access statistics from AIHW attempted to “exploit vulnerabilities.” While no non-public data was exposed, the agent bypassed the site’s anti-bot controls, Transluce said.

So OpenAI wasn’t properly monitoring traffic and “became aware” months later, then waited another month to email a generic shared inbox about the incident.