This confirms that vx-underground is aware of the claim, and that it likely leaked from them, but they are very explicitly not verifying the claim. It doesn't seem particularly verifiable at the moment.