The threat actor claims to possess and offer an alleged database containing over 1 million Indonesian KYC records, including personal identification information and selfie verification images.