The threat actor claims to be selling database allegedly associated with BON.ua, containing 2.5 million user records and admin access. The data reportedly includes names, phone numbers, email addresses, account status, and account creation dates.