Researchers Devised an Attack Technique to Extract ChatGPT Training Data

Combination of repetition penalty and overwhelming the attention mechanism, depending on how you're using it (ChatGPT and ChatGPT/API, respectively)

Can someone explain why this attack works? Does it forget its original task and then starts searching for the next word after “company?”