This allegedly occurred on January 7, 2026, and included over 17 million records in JSON and TXT formats. Many of the sample entries in the dataset showed raw data such as usernames, email addresses, international phone numbers, and user IDs, which corroborates Malwarebytes’ findings.