The Fog of Leaks: How Fake Breach Claims and Copycat Actors Confuse Attribution