The threat actor claims to have compromised databases associated with 18 preschools in Coahuila, Mexico. According to the post, the alleged dataset contains extensive personally identifiable information (PII) relating to students and their guardians, including CURP, full names, student IDs, dates of birth, nationality, school identifiers, special education status, addresses, contact information, guardian details, academic records, certificates, and other educational information.