The threat actor claims to be sellinga 650,000 record database from Telekom Serbia. The compromised data includes names, addresses, dates of birth, phone numbers, and ID numbers from an internal scheduling portal.