The threat actor claims to have breached a Meducar database containing 3.2 million user records. The compromised data includes PII such as names, email addresses, phone numbers, addresses, birth dates, health insurance details, and religion.