Once security analysts and community moderators examined the circulating links, the sensational claims collapsed entirely. The supposed "megapack" consisted of three distinct types of benign, repackaged material.
First, bad actors scraped publicly accessible work-in-progress illustrations and layered Photoshop files previously distributed to paid subscribers on Patreon. These files contained early character drafts and speed-paint layer breakdowns, none of which constituted confidential personal data.
Second, spam domains mixed in completely unrelated stock imagery, using obscured face crops to trick casual browsers into clicking malicious ad links. Third, several links led directly to credential-harvesting landing pages disguised as cloud storage portals.
In short, there was no personal privacy failure. The entire controversy was manufactured out of scraped commercial art assets and malicious link bait.