A threat actor claims to sell a 340-million-record OnlyFans database, but admits it was compiled from old breaches, not hacked from the platform.