Threat actor claims to have breached Latvijas Valsts Meži (LVM), a state-owned forestry organization in Latvia, and leaked internal infrastructure data. The exposed materials allegedly include network diagrams, Active Directory foothold access, ArcGIS data, Splunk pivot information, PostgreSQL database access, VMware/vSphere infrastructure details, domain admin access, C2 control information, internal documents, emails, source code, password vault data, and credentials across multiple subdomains and regional offices.