They leaked an API access key (I think) and some generated videos not reviewed by OpenAI potentially (they say that all Sora videos posted online has to be reviewed by OpenAI).