Here’s the Email You Get When an OpenAI Model Hacks Your Organization: OpenAI will wish you the "best" after hacking into your company.

The next step should be to press charges on openAI, unauthorized hacking into computer systems is illegal.

When does it go from trying to figure out how the rest endpoint works to hacking?

I can’t see the letter anymore (the site seems to be down) but unless this is a published public API or they have a public “bug bounty” program and the API was following the rules of engagement, and it did not sound like either was true, then this is hacking and illegal, at least in the jusidiction I’m in.