The threat actor claims to be selling an alleged Vinted user database containing more than 101 million records, including user account information, contact details, and profile data.