Downies Confirms Data Was Accessed and Removed in Ransomware Incident
Summary
Downies says data was accessed and removed without authorization in a ransomware incident. The company is investigating with forensic experts and Australian agencies, while Settra continues to disclose data on its leak site.
Key points
- Downies says it identified suspicious activity in its IT network on July 6, 2026, and began an investigation.
- The company says its investigation indicates data was accessed and removed without authorization.
- Ransomware group Settra listed Downies as a victim and has continued selectively disclosing data, according to the article.
- Downies is working with forensic experts, cybersecurity advisers, the Australian Signals Directorate, the Australian Federal Police, and Victoria Police.
- The incident was reported to the Office of the Australian Information Commissioner; Downies says it will notify affected individuals directly.
- The article says Settra had listed 36 victims on its leak site, with Downies its only Australian victim to date.
Article Details
- Victim Organization
- Downies
- Incident Type
- Ransomware incident involving unauthorized access to and removal of data, followed by an extortion attempt and selective data disclosure.
- Operational Impact
- Downies said it was investigating and responding to the incident. The source does not report operational disruption.
- Ransom Or Extortion
- Settra listed Downies on a leak site and selectively disclosed data to pressure the company. The source does not report a ransom demand or payment.
- Claim Status
- confirmed