settra
First seen June 28, 2026Active64 claimed victims
The claims below are reproduced as posted by settra on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| hatch.group | August 27, 2026 | ransomware_live | — |
| buroboot.nl | August 25, 2026 | ransomware_live | — |
| int.diasorin.com | August 25, 2026 | ransomware_live | — |
| howardlumber.com | August 24, 2026 | ransomware_live | — |
| hansler.com | August 21, 2026 | ransomware_live | — |
| ialegre.com | August 20, 2026 | ransomware_live | — |
| zayo.com | August 20, 2026 | ransomware_live | — |
| neolife.com | August 18, 2026 | ransomware_live | — |
| teletekstructures.com | August 18, 2026 | ransomware_live | — |
| cfsnow.com | August 18, 2026 | ransomware_live | — |
| verveportraits.com.au | August 13, 2026 | ransomware_live | — |
| manhattanloft.co.uk | August 13, 2026 | ransomware_live | — |
| diversifiedbodyandpaint.com | August 12, 2026 | ransomware_live | — |
| medevolve.com | August 11, 2026 | ransomware_live | — |
| makfreight.com | August 11, 2026 | ransomware_live | — |
| gt-tele.com | August 11, 2026 | ransomware_live | — |
| avkvalves.com | August 7, 2026 | ransomware_live | — |
| am-bition.jp | August 5, 2026 | ransomware_live | — |
| zonarsystems.com | August 4, 2026 | ransomware_live | — |
| alphanumeric.com | August 4, 2026 | ransomware_live | — |
| transcar.com | July 31, 2026 | ransomware_live | — |
| tiltstudio.com | July 27, 2026 | ransomware_live | — |
| wcmanagement.info | July 27, 2026 | ransomware_live | — |
| hvlawfirm.com | July 22, 2026 | ransomware_live | — |
| profinrg.nl | July 21, 2026 | ransomware_live | — |
| airoyal.biz | July 21, 2026 | ransomware_live | — |
| galmack.com.ec | July 21, 2026 | ransomware_live | — |
| oligo.de | July 20, 2026 | ransomware_live | — |
| advancedtaxsolutions.com | July 16, 2026 | ransomware_live | — |
| menlosystems.com | July 13, 2026 | ransomware_live | — |
| powdr.com | July 13, 2026 | ransomware_live | — |
| royalchain.com | July 9, 2026 | ransomware_live | — |
| grecosteel.com | July 9, 2026 | ransomware_live | — |
| firstdigital.com | July 7, 2026 | ransomware_live | — |
| samuelkoon.com | July 3, 2026 | ransomware_live | — |
| downies.com | July 3, 2026 | ransomware_live | — |
| gvfsinc.com | July 1, 2026 | ransomware_live | — |
| wtlawllp.co.uk | July 1, 2026 | ransomware_live | — |
| flowco-inc.com | June 30, 2026 | ransomware_live | — |
| torsiongroup.co.uk | June 29, 2026 | ransomware_live | — |
| clc-tn.com | June 26, 2026 | ransomware_live | — |
| orion4value.com | June 25, 2026 | ransomware_live | — |
| bergdemo.com | June 25, 2026 | ransomware_live | — |
| wilfley.com | June 24, 2026 | ransomware_live | — |
| joyconstructionnyc.com | June 24, 2026 | ransomware_live | — |
| petradiamonds.com | June 24, 2026 | ransomware_live | — |
| acilab.com | June 24, 2026 | ransomware_live | — |
| rcfassoc.com | June 23, 2026 | ransomware_live | — |
| ilex-paysages.com | June 22, 2026 | ransomware_live | — |
| owensborograin.com | June 19, 2026 | ransomware_live | — |
| turbodata.com | June 17, 2026 | ransomware_live | — |
| infinedi.net | June 16, 2026 | ransomware_live | — |
| qdi.com | June 11, 2026 | ransomware_live | — |
| dystar.com | June 11, 2026 | ransomware_live | — |
| pchome.com.tw | June 10, 2026 | ransomware_live | — |
| va-glass.com | June 9, 2026 | ransomware_live | — |
| tmscentral.com | June 9, 2026 | ransomware_live | — |
| doosan.com | June 8, 2026 | ransomware_live | — |
| lifevantage.com | June 4, 2026 | ransomware_live | — |
| hmcfarms.com | June 4, 2026 | ransomware_live | — |
| conduril.pt | June 2, 2026 | ransomware_live | — |
| canopybrands.us | June 2, 2026 | ransomware_live | — |
| vcnyhome.com | June 2, 2026 | ransomware_live | — |
| touredge.com | June 2, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).