The threat actor claims to be selling a U.S. tour booking database containing 115,000 email addresses. The listing also claims a SQL injection vulnerability that allegedly provides access to hashed passwords and other database data.