So it turns out the numbers are all valid. With or without AI they just misinterpreted the data. But indeed 2.9 billion records were stolen, whoever wrote this just clearly misunderstood that an individual could have more than 1 record associated to their person.