The threat actor claims to be selling a CRM database allegedly belonging to NovaHotel.kz. The compromised data reportedly includes approximately 38,000 customer records containing names, phone numbers, identification numbers (IIN), email addresses, city information, company details, loyalty information, and approximately 20,000 identity document scans covering the period from 2017 to 2025.