The threat actor claims to be selling data from City Security Systems. The compromised data reportedly includes customer IDs, store IDs, first and last names, email addresses, telephone numbers, password hashes, billing and shipping addresses, customer group IDs, IP addresses, account status, approval status, tokens, order information, timestamps, and related customer account metadata.