OpenAI has not been breached, the credentials were stolen from users infected PCs.

You’re jumping to conclusions. OpenAI would be doing these users a favour by resetting their passwords, but their computers could still be infected.