Unfortunately my details (address, bank details, government IDs) have been leaked a handful of times now because companies that I do business with have been hacked. Each time the company involved has faced practically no real penalty aside from a minor hit to their reputation. Your moral obligation isn't to Sam Altman, it's to his customers, who are real people.