So many people will believe anything a "hacker" says as long as it's bad for them. In general, these 100 million password dumps are almost always complete garb

So many people will believe anything a "hacker" says as long as it's bad for them. In general, these 100 million password dumps are almost always complete garbage, but everyone along the way says "better to be safe than sorry" and ignores all the warning signs (in this case, that the file obviously wasn't Dropbox credentials).