The threat actor claims to be selling an alleged Obsidian user database containing information related to more than 1.5 million users. According to the post, the dataset includes user IDs, email addresses, password hashes, usernames, account details, subscription information, IP addresses, registration data, and login timestamps.