Yeah my math sucks -- off by one (order of magnitude) error.

Also the 2 million number was what I had heard in the news, seems the number is actually 3.8 million records having a document number, according to this screenshot[1]

[1] https://www.abc.net.au/news/2022-09-27/optus-data-breach-cyb...