I don't think so. There really are not 3 million jobs in cybersecurity.

There is not much demand for people who can run a scanner or set up a firewall. Not to mention that a setup is a single day of work, it's not even close to a full time job.

Maybe they are counting every guy who ever plugged a broadband modem as a security specialist.