The threat actor claims to have obtained databases from GURI (Gestión Unificada de Registros e Información) containing historical student and citizen records. The allegedly compromised data includes national ID (Cédula) numbers, full names, dates of birth, addresses, phone numbers, email addresses, family ID numbers, school information, enrollment records, academic history, class details, socio-cultural data.