The threat actor claims to be selling data allegedly belonging to Haraki.onpay.my, a Malaysia-based online learning platform. The compromised data reportedly includes customer names, email addresses, phone numbers, postal addresses, invoice numbers, payment amounts, bank names, payment and sale dates, invoice PDF links, payment proof files, shipping courier information, tracking codes, order status URLs, and related transaction metadata