A threat actor claims to have unauthorized access to an Active Directory-joined host at a small U.S. MSP or IT company. They also claim that domain administrator credentials may be recoverable from the compromised system.