The threat actor claims to be selling a database containing 300000 Malaysia-based customer records allegedly collected from advertising campaigns. The compromised data includes names, phone numbers, email addresses, account and card details, dates of birth, nationality, NRIC/passport information, and transaction-related details.