MGM Hotel’s 2019 data leak might have affected 142M people, not 10.6M