Skip to content
Ransomware

Settra lists alleged data from advancedtaxsolutions.com on leak site

The threat actor known as Settra has listed data allegedly belonging to advancedtaxsolutions.com on its leak site.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Settra
  • Country: United States
  • Sector: Professional Services
  • Announcement date: August 11, 2026

Settra claims to have stolen data from advancedtaxsolutions.com

The threat actor known as Settra has listed data allegedly belonging to advancedtaxsolutions.com on its leak site. This announcement, made on August 11, 2026, suggests that the organization may be the victim of a significant data breach. While the group has made these claims, the incident remains an allegation from the threat actor's side.

The Settra group announced the availability of data allegedly belonging to advancedtaxsolutions.com. According to the group, the stolen information includes archive records related to tax consulting practices. The announcement suggests that sensitive financial and personal information belonging to the firm's clients may be at risk of exposure. The group's claim implies that the breach occurred around July 16, 2026.

Details of the alleged data exposure

Based on the information provided by the threat actor, the data set is highly sensitive. Screenshots associated with the leak indicate the presence of detailed financial and personal data. This information appears to touch upon various aspects of client lives, ranging from tax filings to health insurance documentation. The breadth of the data suggests a deep intrusion into the firm's digital archives.

The specific types of data allegedly contained in the leak include:

  • Social Security Numbers (SSN)
  • Tax returns
  • Bank account details
  • Health insurance records
  • Client contact information

The presence of such specific documents, such as IRS correspondence and client meeting notes, highlights the potential severity of the exposure. No information was provided regarding the total size of the data or the specific file count involved in this alleged breach. Additionally, no ransom demand has been publicly specified in the announcement.

About advancedtaxsolutions.com

Advanced Tax Solutions is a professional consulting firm specializing in tax issues and tax debt resolution. Operating under the Frank Rim & Associates brand, it provides services for tax cases and financial resolution processes. Given its focus on tax and financial matters, the firm handles highly sensitive documentation for its clientele.

Implications and defensive considerations

This alleged leak may pose a high risk of identity theft and financial fraud for the firm's clients. The tax and health data contained in the set could be classified as sensitive information under US regulations, potentially leading to legal consequences for the firm. The exposure of personal data may facilitate targeted phishing attacks, where attackers use the stolen information to gain trust during fraudulent communications.

Public information regarding the Settra group is limited; however, such leaks are often observed as part of double extortion tactics. In a double extortion scenario, threat actors not only encrypt an organization's data but also steal it, threatening to publish it on a leak site to increase pressure for ransom payment. This tactic is increasingly common in modern ransomware campaigns.

For organizations in the professional services sector, such incidents underscore the importance of robust cybersecurity frameworks. It may be advisable for the firm and affected individuals to initiate a forensic investigation to determine the scope of the breach and to notify relevant regulatory authorities. Implementing strong access controls, encryption for data at rest and in transit, and continuous monitoring are standard defensive steps to mitigate the impact of such threats.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories