The threat actor claims to have breached the employee portal of eTeam and exfiltrated a database containing full employee records. The allegedly compromised data includes names, gender, marital status, date of birth, phone numbers, addresses, driver's license numbers, manager email addresses, employee IDs, company names, payroll IDs, and other HR and payroll-related information.