Downies Hit by Settra Ransomware Attack, Data Leaked in Extortion Attempt
Australia’s leading numismatics and collectibles retailer, Downies, is responding to a ransomware attack and extortion campaign by the cybercriminal group Settra, which first listed the company as a victim in a July 2026 dark web leak post.
On July 6, 2026, Downies detected suspicious activity in its IT network and launched an investigation, confirming unauthorized access and data theft. The company later discovered references to stolen information on Settra’s leak site, though it urged the public to avoid engaging with illegally disclosed data to prevent further harm.
Downies’ CEO, Luke Templeton, condemned Settra’s tactics, including the use of AI-generated claims to pressure the company by falsely alleging business irregularities. The group, active since late June 2026, has already listed 36 victims on its darknet site, with Downies as its only confirmed Australian target.
The company is working with forensic experts, cybersecurity advisors, and government agencies, including the Australian Signals Directorate (ASD), Australian Federal Police (AFP), Victoria Police, and the Office of the Australian Information Commissioner (OAIC). Downies has also begun notifying affected individuals.
Settra’s selective data disclosures suggest an ongoing effort to escalate pressure on the retailer as the investigation continues.
Downies Collectables Pty Ltd cybersecurity rating report: https://www.rankiteo.com/company/downie's
"id": "DOW1785831928",
"linkid": "downie's",
"type": "Ransomware",
"date": "7/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Yes',
'industry': 'Numismatics and Collectibles',
'location': 'Australia',
'name': 'Downies',
'type': 'Retailer'}],
'customer_advisories': 'Notifications to affected individuals, public '
'advisories to avoid engaging with leaked data',
'data_breach': {'data_exfiltration': 'Yes'},
'date_detected': '2026-07-06',
'date_publicly_disclosed': '2026-07',
'description': 'Australia’s leading numismatics and collectibles retailer, '
'Downies, is responding to a ransomware attack and extortion '
'campaign by the cybercriminal group Settra, which first '
'listed the company as a victim in a July 2026 dark web leak '
'post. The attack involved unauthorized access, data theft, '
'and selective data disclosures to pressure the company. '
'Settra used AI-generated claims to falsely allege business '
'irregularities as part of their extortion tactics.',
'impact': {'brand_reputation_impact': 'Yes', 'data_compromised': 'Yes'},
'investigation_status': 'Ongoing',
'motivation': 'Extortion',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Settra'},
'references': [{'source': 'Dark web leak post'}],
'regulatory_compliance': {'regulatory_notifications': 'Office of the '
'Australian Information '
'Commissioner (OAIC)'},
'response': {'communication_strategy': 'Public advisories, notifications to '
'affected individuals',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes',
'third_party_assistance': 'Forensic experts, cybersecurity '
'advisors'},
'stakeholder_advisories': 'Government agencies (ASD, AFP, Victoria Police, '
'OAIC)',
'threat_actor': 'Settra',
'title': 'Downies Hit by Settra Ransomware Attack, Data Leaked in Extortion '
'Attempt',
'type': 'Ransomware'}