444 counts events. 133 counts things somebody assessed as saleable and put on the market.
30 unsecured datasets, ~16 billion records. The thefts were old; the index is what makes them usable — and the number is contested.
Voice phishing into identity providers, then leak-site extortion. Active since 2020.