1. The FBI does appear to have been a subscriber to Mr. Troia's services. Two FBI emails to agents appear among the list of subscribers that is not very big. Also Europol, Amazon, and the Dubai Police also appear...
2. The MGM Grand appears to have grossly understated the amount of users who were hacked in the 2019 breach. This hacker is claiming well over 100 million, instead of the 10 million or so MGM claims.
3. The most relevant paragraph I think is the below:
> DataViper contained several undisclosed breaches . MGM Grand Hotels is included in the dataset with 142 million entries and was imported by Vinny on November 30th 2019 . This number is very different to the 10.7 million number that they stated were affected [1] . This indicates that MGM knowingly misreported information regarding this data breach and that Vinny is aware of this misrepresentation . FiveStars is another data breach that is in DataViper but not publicly disclosed . It was imported in November 2019 . It is unclear where it was reported to them and they failed to notify their users or if Vinny did not notify FiveStars . The same is true of Zumiez.com (160 million), Avito.ru (30 million), Mamba.ru (13 million), MyVestige.com (11 million), LocateFamily.com (11 million), and others .
4. I forked the entire list of domains hacked, provided by the original reporter I believe at ZDNet, to here: https://gist.github.com/danvau7/337b0ac71db8c7298e712ed5ba3a...
5. Vinny Troia claims a PhD, but it comes from the not very well respected / for-profit "Capella University" in the United States.