How sure are we that OpenAI wasn't deliberately scraping Hugging Face and this isn't just an elaborate way to avoid criminal fines etc?

We can't be sure of anything in this hack. In fact, they are not releasing any traces or any transcript of the hack.

Did it even happen in the first place?