The group claims to have obtained 40 GB of the organization's data. The compromised data reportedly includes employee and customer personal information, project-related files, financial documents, internal business records, and contractual agreements.