The threat actor claims to be selling data from Hastings & Hastings, an Arizona-based law firm. The compromised data includes personal information, legal case documents, driver's license scans, Social Security numbers , and email data.