How to verify a data breach

This TechCrunch piece outlines methods for verifying hacked and leaked datasets and presents three case studies—StockX (millions of customer records), 23andMe (millions of genetic/profile records scraped), and a U.S. military Elasticsearch cloud exposure (terabytes of emails)—describing how investigators confirmed authenticity, assessed scale and sensitivity, and engaged responsible disclosure.