The threat actor claims to be selling 12 million records McDonald's customer records containing personally identifiable information (PII), including names, email addresses, phone numbers, home addresses, and social media handles.