A threat actor named 'hensi' has reportedly claimed unauthorized access to Scania Financial Services’ insurance.scania.com subdomain and is allegedly selling around 34,000 files on cybercriminal marketplaces. The incident highlights ongoing vulnerabilities in corporate digital infrastructure and the persistent threat posed by data exfiltration operations targeting financial services organizations. The alleged breach encompasses approximately 34,000 files allegedly extracted from Scania's insurance subdomain infrastructure, potentially containing sensitive customer information, policy details, financial records, and personally identifiable information (PII).