The group claims to have obtained data from Merge. The compromised data reportedly includes internal documents, financial and legal documents, customer profiles, confidential documents, non-disclosure agreements (NDAs), database backups, audit documents, customer data, financial records, and personal information.