It wasn't a hack. The company used an external AI service.

ETA: They didn't ship data off to e.g. ChatGPT. They hired a subcontractor to build them a secure AI service.

Details in this comment:

https://news.ycombinator.com/item?id=47035141

leading to this:

https://endaleahy.substack.com/p/what-the-minister-said

The government is behaving disgracefully.