Researchers used Claude to reach an OpenAI employee account and sensitive GitHub data.