The threat actor claims to have breached data from CARMA.The compromised data includes personal information, including names, email addresses, phone numbers, and physical addresses, as well as organization-related information such as company names, countries, industries, API tokens, project details, documents, newsletter preferences, and other internal metadata.