Maybe a dumb observation, but if a chain of people were working on the problem for a long time, it's not difficult to imagine that someone accidentally prompted a model with their personal or some other account without the privacy set correctly.

Then again, maybe this is my internal cope, hoping that they're not secretly training on private chats.