“ Was this caused by a vulnerability in OpenAI’s systems? No. ”

Yes. You guys sent PII to analytics. Entirely your fault.

Pretty sure this violates the GDPR.