> I don’t know exact parallels in current law

You own a vicious dog, and it bites someone - you are responsible because you choose to own a dangerous dog.

A few claimed this might apply here: OpenAI knew their models are "dangerous", so they should be liable if they hack.