The threat actor claims to be selling 1,230 U.S. payment card records. The compromised data reportedly includes card numbers, expiration months, expiration years, CVV2 values, full names, phone numbers, addresses etc.