since the site down after the attack, we didn't get much OSINT about it, sandox.info, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.
Groups publish these on their own leak sites. A claim is not a confirmed breach — treat every entry as an assertion, not a fact.