The threat actor claims to have breached data from the Ministry of Commerce. The compromised data reportedly includes Name, Mailbox Type, Email Address, Exchange ActiveSync Policy, Alias, Archive Database, Archive State, Company, Country/Region, Database, Department, Email Addresses, Email Address Policy Enabled, Version, First Name, Hidden From Address List, Last Name, Litigation Hold Enabled, Office, Organizational Unit, Outlook Web App Policy, Phone, Postal Code, Recipient Type, Retention Policy, Sharing Policy, State/Province, Title, UM Enabled, UM Policy, Last Modified Time, and Custom Attributes 1 through 15.