A credible threat actor is selling 400M Twitter users' data

"Discovered", more like publicly posted on a well-known forum

"Hudson Rock" is ran by 5 random people, none of which are reputable, and is also breaking Twitter TOS (their old account was suspended, and so was one of their 'employees')

I would not trust a single thing they say, until the things they say get verified

I'm not saying this can't be real, but there's nothing here that convinces me it's not a scam.