How does he know that this attack is performed by OpenAI agents? I couldn't figure this out from the article

If you read the source article they talk about the many clues that this was OpenAI.