OpenAI's Hugging Face breach report is out