Settra Claims to Have Data From DFI Retail Group

Summary
Ransomware group settra claims it has 27 years of DFI Retail Group email archives, records on 397 stores, and 40,000 medical files. The monitoring post says the claims are unverified.
Key points
- The claim names dfiretailgroup[.]com in the US as the alleged victim.
- The post attributes the claim to ransomware actor settra.
- The group allegedly has 27 years of email archives, information on 397 stores, and 40,000 medical files.
- The post also claims more than 160 mailboxes were compromised.
- The monitoring source says it cannot confirm the claims.
Article Details
- Victim
- DFI RETAIL GROUP
- Victim Domain
- dfiretailgroup.com
- Claim Date
- 2026-09-08
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by settra; not independently confirmed
- Exfiltrated Data
- The post claims 27 years of email archives, 397 illegal stores, 40,000 medical files, and over 160 compromised mailboxes. The claims are unverified.
- Ransom Demand
- Unknown
- Leak Status
- A claim was posted on settra's leak site; the post does not establish that data was published or authenticate any data.
