OpenAI is fully responsible for its bot's unauthorized database incursions

Autonomous systems that use large language models to plan, reason, and take actions — including browsing the web, writing code, calling APIs, and completing multi-step tasks with minimal human intervention.

Sensitive data leaves the trust boundary via a tool or output.