A threat actor claims to be selling a U.S. payday loan leads database containing approximately 3.7 million records dated September 2022. The advertised dataset allegedly includes personally identifiable information (PII) and financial-related data such as names, email addresses, phone numbers, physical addresses, SSNs, dates of birth, bank details, employment information, loan details, and driver's license information.