The threat actor claims to be selling an SQL injection vulnerability on a Honduran company’s website, including around 70,000 payment card records, including card numbers, CVVs, expiration dates, and cardholder names.