Yeah, very likely, the actor had a history of successful breaches and data distribution. https://darkwebinformer.com/alleged-data-breach-of-multiple-cryptocurrency-platforms/

Seems fake, or he is BSing about having phone numbers for Nunchuk since they don’t use phone numbers. Email and password is all you need. They don’t log passwords, so mot sure how they allegedly got those too.