The threat actor claims to be selling unauthorized U.S. admin-panel access to a background-check service containing SSNs, dates of birth, names, and addresses, with around 8–10K records reportedly available per week.