Spear phishing risk after OpenAI API analytics exposure