Twitter says no evidence that alleged sold user data exploited from its systems

> 400 million instances of user data in the second alleged breach could not be correlated with the previously reported incident, nor with any new incident.

Genuinely curious – What does this mean? It seems like they're saying this data is not from/overlapping with the old/known leak of 5.4 million accounts, but also not that it's a new incident. So where is this data coming from?

> The data is likely a collection of data already publicly available online through different sources.

How would another source have collected 400 million twitter handle + email + phone number combos, without leveraging twitter's own data to make that pairing?

Considering how often Musk lies to save face and the limited knowledge they have of their own services after purging most people with institutional knowledge, they have very little credibility here.