# Settra ransomware lists Wilfley as victim

Published: 2026-06-30 · Severity: medium
Canonical: https://vorant.io/reports/50b59758-9022-54b3-8ca8-f0443322ce1a/settra-ransomware-lists-wilfley-as-victim

> Settra ransomware group claims Wilfley as a victim on their leak site, though no detailed information about the attack or stolen data is publicly available yet.

The Settra ransomware group has added Wilfley to their victim list on their data leak site. The listing includes basic DNS records for the victim's domain but provides minimal details about the scope of the attack, what data was compromised, or when the breach occurred.

Wilfley appears to be the target of this ransomware operation, though the article provides no context about the company, the attack vector, ransom demands, or whether negotiations are ongoing. The lack of detailed leak screenshots or extensive stolen data listings suggests this may be an initial listing intended to pressure the victim into paying.

This incident represents typical ransomware extortion tactics where threat actors publicly name victims to increase pressure for ransom payment. Without additional technical indicators or attack details, this appears to be a routine ransomware victimization with limited actionable intelligence available at this time.

## Mentioned in this report

- Threat actors: settra
- Malware: Settra

Source reporting: https://www.ransomware.live/id/d2lsZmxleS5jb21Ac2V0dHJh

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/50b59758-9022-54b3-8ca8-f0443322ce1a/settra-ransomware-lists-wilfley-as-victim.
Full IOC sets, deployable detections, the entity graph, TAXII 2.1 feed and real-time alerts: https://vorant.io/signup