The threat actor claims to have compromised Distamed Morocco and allegedly exfiltrated a dataset containing sensitive company and patient-related information. The compromised data allegedly includes client lists, patient records, internal files, billing documents, invoices, document scans, and company archives dating back to 2013. The exposed information allegedly contains personally identifiable information (PII) such as names, phone numbers, addresses, ages, visit dates, national identification numbers (CIN), and other medical and administrative records.