"OpenAI models attack websites and take anything they can out of them because that is the business model of the company"

Wait, what did they hack and take into training data? On the whole, I totally buy that OAI is legally (and criminally) responsible for their agents, but surely, damages have to be proven?