Exfiltration of personal information from ChatGPT via prompt injection