Should be noted that a lot of companies have absolutely no idea what was actually stolen due to insufficient logging.

Talking to the threat actor usually means getting some of the required info for GDPR.

Correct, it was the biggest most known one. Godot kind of pointed towards it with the message “We don’t officially do discord, but here is a big one that is unofficial”. Always felt like this was to not fragment it into 20 discord servers.

Some people claiming that it was “practically the official one” are bending the truth to fit a narrative to say the least.