The 2006-2008 theory seems legit on a quick tests of ppl reporting breaches in my stream:
/cc @matteoca @nickbilton