Our team has cross-checked several names from the sample list provided. Many are genuine. It's a six-year-old list, email IDs and even phone numbers might change. Hilton, like many companies, has a record of denying breaches until it hits on the face. They were fined $700K for an earlier breach mentioned in the report. Under GDPR, the fine would have been $420M