They might be taking about Google Fi.

As long as at least one user from California was affected the Attorney General can take legal action against reddit.

The data can also by aggregated if a 3rd company buys your data from the companies that collect it, like LexisNexis, WorkNumber, etc. This is actually very common…