The threat actor claims to be selling unauthorized access to ENI admin panel using phishing, then leaked PDF files from the system. They also claim more databases and data may be leaked later.