Skip to content
Ransomware

Settra claims data breach involving lakebeverage.com

The group known as Settra has listed 165 GB of data on its leak site, allegedly belonging to the Rochester, New York-based beer distributor lakebeverage.com.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Settra
  • Country: United States
  • Sector: Retail & E-Commerce
  • Announcement date: September 22, 2026

Settra claims to have stolen data from lakebeverage.com

The ransomware group known as Settra has officially listed lakebeverage.com on its leak site. According to the group's announcement, they claim to have successfully exfiltrated a significant volume of data from the organization's internal systems. This development follows a timeline suggesting the alleged attack occurred on September 7, 2026, with the public announcement appearing on the group's platform on September 22, 2026.

The group's announcement follows a common pattern observed in modern cyber extortion campaigns. In these scenarios, threat actors often employ a double extortion tactic. This method involves not only encrypting an organization's data to disrupt operations but also stealing sensitive information to use as leverage. By threatening to publish stolen data on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential information.

Details of the alleged data theft

The Settra group claims to be in possession of 165 GB of data allegedly obtained from the systems of lakebeverage.com. However, despite the significant size of the claimed data, the group has not provided specific details regarding the exact nature or categories of the information contained within the files.

The visibility of the stolen data remains limited due to technical barriers. The provided screenshot associated with the announcement shows a blocked access page to the leak site. This restriction means that there is currently no visual evidence or specific documentation available to confirm the actual content of the files. Furthermore, public information regarding the Settra group remains limited, making it difficult to ascertain their specific motivations or the exact methods used to infiltrate the target's network.

The listing names no specific data types.

About lakebeverage.com

Lake Beverage is a beer and beverage distribution company that operates within the Rochester, New York area. The organization serves as a vital link in the regional supply chain, providing comprehensive supply and distribution services for various beverage products to a wide range of retailers throughout the region.

Risk assessment and industry implications

The claims made by the Settra group pose potential risks to the operational continuity and data privacy of lakebeverage.com. If the alleged 165 GB of data contains sensitive information, such as employee records or commercial customer data, it could have significant implications for the organization's compliance with New York state regulations regarding data protection and breach notification.

The potential publication of such data can lead to secondary risks that extend beyond the initial victim. For the customers and business partners of the organization, the exposure of sensitive information can increase the likelihood of identity theft or the execution of highly targeted phishing attacks. These secondary attacks often leverage the specific details found in leaked datasets to gain trust and further compromise the victims.

For organizations operating in the retail and distribution sectors, these types of threats highlight the necessity of robust data governance and incident response planning. Organizations often need to evaluate their legal obligations concerning data breach notifications to ensure they inform affected parties in accordance with local laws. Maintaining strong defensive postures, such as implementing multi-factor authentication, conducting regular network monitoring, and ensuring comprehensive data encryption, are standard industry practices used to mitigate the impact of such unauthorized access attempts.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories