Researchers cannot yet confirm how many records are duplicates or how many unique people were affected. The database is no longer publicly exposed, but reused passwords may still put accounts at risk.