The threat actor claims to have breached 16 GB of data from Geolite. The compromised data reportedly includes IP geolocation and network intelligence details, such as visitor origin countries, geographic distribution, location-based access patterns, VPN/proxy testing results, user connection behavior, city-level location data, ASN information, datacenter and residential traffic classification, infrastructure mapping details, automated traffic analysis data, and geographic correlation information.