OpenAI explicitly stated those were separate incidents: https://openai.com/index/third-party-cyber-evaluations-invol...