It seems to me that this these are credentials harvested from malware on people's machines, not credentials stolen from OpenAI. The relevance to ChatGPT is only because people use the chats for personal/business info and the logs are retained.
so this is a collection of logins, passwords, etc. collected via some bit of malware on clients...not info gleaned from OpenAi server logs, which is what I got from the article initially