> 400 million instances of user data in the second alleged breach could not be correlated with the previously reported incident, nor with any new incident.

Genuinely curious – What does this mean? It seems like they're saying this data is not from/overlapping with the old/known leak of 5.4 million accounts, but also not that it's a new incident. So where is this data coming from?

> The data is likely a collection of data already publicly available online through different sources.

How would another source have collected 400 million twitter handle + email + phone number combos, without leveraging twitter's own data to make that pairing?