The threat actor claims to have breached data from Universidad Tecnológica del Uruguay (UTU) and Universidad de la República (UDELAR). The compromised data reportedly includes 267,000 student records containing student names, document numbers, dates of birth, graduation dates, pending-course information, student center locations, course names, course types, educational institutions, and study programs. The records reportedly relate to students who graduated between 2017 and 2025.