The threat actor claims to be selling Unidentified US based Automated retail SaaS Company. The compromised data including Pokémon Center, CVS, Best Buy, Disney, and Google. The alleged data includes 206,092 email addresses, 70,546 payment card hashes, 59,797 masked card records, 8,545 sales transactions, 217 machine locations, inventory and operational data, employee/admin PII, customer receipts, source code from three applications, and live API credentials. The claim also states that 66 Pokémon Center vending machines were affected.