Threat actor claims to have breached ACRE Africa, exposing approximately 14,300 unique user records and allegedly stealing the organization's source code. The compromised data reportedly includes user PII, source code, configuration files, access tokens, private keys, hardcoded credentials, and additional internal information. The data fields such as county, sub-county, ward, unique code, names, mobile numbers, phone numbers, subsidy amounts, and agent codes.