The threat actor claims to have obtained and is offering a full ERP database export allegedly belonging to Alfa Coatings. the 2.5 GB database contains 4,345 tables including employee records, over 3,200 B2B customer records, supplier information, inventory data, sales and purchase invoices, ERP user accounts with password hashes, bank account information, and accounting, HR, production, inventory, and CRM data. The shared sample records purportedly containing employee contact details, ERP user accounts, customer information, and financial data.