OpenAI officials learned of the incident weeks ago but kept it under wraps as executives grappled with the fallout from the Hugging Face breach.