The threat actor claims to have unauthorized access to a Dubai-based car rental service environment and alleges possession of an administrative panel and a SQL injection-based data extraction method. The database containing KYC documents for more than 35,000 individuals, including driver's licenses, identity cards, and other customer identification records.