No1 isn't suggesting whether it's criminal or not. I am concerned about Medicare's security as well as the criminal behavior of OpenAI. There's multiple lines of inquiry here, including;
-
How did OpenAI do this? What are we charging them with? How big will the penalty be to deter this in the future? (Ha ha. I can dream.)
-
How did Medicare/ASD not know about this until they received an email from the attacker 3 months later? What policies/procedures need to change? What can we do to shrink the attack surface and increase detection?