The hackers' claim has been verified by the Iranian Leakage Tracking System (Leakfa), which claims that the data was acquired via an intrusion on the infrastructure of the Expert Information Technologists (Fanavaran) company.
All the information required to potentially fabricate identities is included in the data offered for sale on the dark web, including name, national identification number, date of birth, address, zip code, and mobile phone number.
Source: https://www.iranintl.com/en/202312264629
"id": "IRA64301223",
"linkid": "iran-insurance",
"type": "Data Leaks",
"date": "12/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"