It's real. A few people I know are in the dataset. The SSN is problematic, but personally to me, the more troubling data is a seemingly complete, or at least complete enough, address history for the people I checked for. It doesn't have dates, but just having the addresses could cause major problems for spear phishing attempts.

I was able to get a hand on it, and I was able to confirm that some records of loved ones are indeed present (although mine was not.)

BreachForums I believe.