LLM companies set their bots loose on a task and failed to secure the environment. I haven't met anyone who suggests they are brilliant hackers that put Kevin Mitnick to shame. I have heard (and happen to agree with) arguments that they created conditions, either willfully or unwittingly, in which their systems breeched others. The argument is that they acted with gross negligence when using a dangerous tool, and may or may not be liable for such. If the US ever makes crime illegal again, the courts will decide.