The threat actor claims to have unauthorized access to the organization's admin panel, allegedly providing the ability to manage website content, access SMTP mailbox credentials, and obtain other personal data.