I think they also have to prove that these sites actually had their information and did provide it. Otherwise they're just assuming that their information was accessible because their information was part of the dump.
Likely though, since there are three claimants and three sites, I'd wager they all incidentally discovered their details (or maybe were made aware by an unhappy spouse) and that's how they know their details are actually accessible.
Likely though, since there are three claimants and three sites, I'd wager they all incidentally discovered their details (or maybe were made aware by an unhappy spouse) and that's how they know their details are actually accessible.