The mystery of an alleged data broker’s data breach