The breached data appears partly legitimate — if imperfect — but also widely available for sale by data brokers.
