The threat actor claims to possess an alleged database of employees from the Guanajuato State Judiciary and states that the data will be released via their Telegram channel. A sample record containing employee and personal information was shared as proof.