AI leaking private correspondence