Disclaimer: I heave read /seen / heard nothing but this thread here.

Ge0rge: ... I don't want to call anyone a liar, but I'm struggling to see how they can both be telling the truth...

Maybe; maybe not. That one single dealer could have passed the information on to one or more interested parties who in turn send this on to multiple people.

Oblivian:

... Our investigations have shown only one dealer login has accessed the system since the update. ...

 

... The security breach indicated that a single dealer user had accessed information not intended to its user profile. ...