On the contrary, many (including myself) would argue that "the victim's amount of money/power" has absolutely no ethical relevance: "You shall do no injustice in judgment; you shall not be partial to the poor nor defer to the great, but you are to judge your neighbor fairly" (Leviticus 19:15).

Unfortunately my details (address, bank details, government IDs) have been leaked a handful of times now because companies that I do business with have been hacked. Each time the company involved has faced practically no real penalty aside from a minor hit to their reputation. Your moral obligation isn't to Sam Altman, it's to his customers, who are real people.

No, we have a moral obligation to make sure Sam Altman's trillion dollar business does ethical shit.

If that means taking chunks of it because he can't be a responsible steward, so be it. It would behoove him to get on board before that is necessary.