The threat actor claims to be selling 100 fresh U.S./Canadian payment-card records, including card and billing details, name, bin, address, phone, city.