I can confirm that this is definitely happening, and people are talking about it in the OpenAI Discord server. I've also found other users' email addresses by finding them auto-populated into the email field on the payments page.