The first entry is always the pin's source. Overall confidence is a weighted average of how firmly each reference supports the start and end times used above; a reference counts half as much for every 180 days older than the newest.
BleepingComputer[2][3] (21 March 2025) says rose87168 'released multiple text files yesterday', and its 3 April follow-up says the 6 million records went on sale on BreachForums 'on March 20'.
Citing Bloomberg, BleepingComputer[1][3] reports Oracle privately told some customers that attackers stole old client credentials from a legacy environment, with CrowdStrike and the FBI investigating; it dates the sale to March 20.
BleepingComputer[1][2] says the leak listed 140,621 company and government domains and that several companies confirmed the sample data about them was genuine, despite Oracle's denial.
Something missing or wrong? Say it in your own words: a link that backs this pin up, a different start or end date and why, or a fact it lacks or gets wrong. The AI checks it against this pin's sources, searches for better ones, and adds any page that backs you up. The pin's own sources still count most.