The threat actor claims to have breached Zéro Logement Vacant, exposing property-owner and user data including names, dates of birth, addresses, emails, phone numbers, fiscal identifiers, password hashes, and authentication tokens. It claims 148.9 million raw records, with 47.9 million unique people by person ID and 71.1 million by name and date of birth.