The threat actor claims to have breached the official local government website of GAD Parroquial Rural de Pacto , Ecuador. The leaked database allegedly includes administrative and user credentials usernames and password hashes for WordPress, Joomla, and custom systems, personally identifiable information (PII) of citizens full names, emails, physical addresses, phone numbers, e-commerce transactional records, system configurations, and active API keys and service tokens , Elementor, ElementsKit, Google Sheets, Facebook Messenger, and Mailchimp.