Threat actor claims to have breached the database of Etsy, containing approximately 2.5 million customer records. The exposed dataset reportedly includes buyer IDs, first names, last names, email addresses, phone numbers, street addresses, cities, states, ZIP codes, countries, currency codes, account creation dates, last order dates, last receipt IDs, last listing IDs, shop IDs, total orders, total amount spent, average order value, distinct shops, top categories, last payment methods, marketing preferences, account status, and data export dates.