OpenAI works to understand full scope of agent activity as user data leak emerges