The threat actor claims to be selling an DLH.NET database containing 4.7 million records, including email addresses, password hashes, and other data. The claims 4.4 million password hashes have been cracked into plaintext passwords.