for clarity this detail appears not to be new, was notified that openai disclosed it previously. we still don't seem to know who all these third parties are however, and it makes sense that this many cases would take months to parse through.
openai says here it has notified "dozens of third parties" about cases where its models may have bypassed security controls, impaired the availability of an online service, or negatively impacted a website/service