Settra lists clc-tn.com data on leak site

• Ransomware group: Settra
• Country: United States
• Announcement date: June 30, 2026

Settra claims data breach at clc-tn.com

The threat actor group known as Settra has listed data allegedly belonging to clc-tn.com on their leak site. The announcement, made on June 30, 2026, follows a claimed attack date of June 26, 2026. The group's posting suggests a significant breach of the organization's internal systems, though the specific ransom demand remains unknown.

According to the claims made by the Settra group, the breach involves a wide array of sensitive information. The threat actor alleges that they have obtained internal correspondence, employee personal data, and medical records. To support the claim that the organization was subjected to a cyberattack in June 2026, the announcement includes detailed document samples. These samples are intended to demonstrate the legitimacy of the stolen data to the public and the victim.

Alleged data types and contents

The data allegedly leaked by the Settra group is extensive and covers multiple areas of the organization's operations, including human resources, finance, and medical information. The contents of the breach, as claimed by the threat actor, include the following categories of sensitive information:

• Employee HR data
• Social Security Numbers (SSN)
• Medical records
• Payroll records
• Supplier contracts
• Customer lists

In addition to these categories, the threat actor claims to have accessed corporate network infrastructure details, which could provide further insights into the organization's internal environment. The presence of such technical details alongside personal identifiers represents a significant escalation in the severity of the leak.

About City Lumber Company

City Lumber Company is a building materials supplier based in Tennessee. The company specializes in the sale of various construction materials and lumber products. As a supplier in the construction sector, the company manages a variety of sensitive relationships involving customers, suppliers, and employees.

Impact and assessment of the leak

This leak may pose risks such as identity theft and targeted phishing attacks for the organization's employees and customers. The presence of medical records in the leaked data could lead to legal proceedings for the organization under HIPAA regulations in the United States. Furthermore, the disclosure of trade secrets and supplier information may weaken competitive advantage and increase third-party risks for the business.

The Settra group's methods suggest they follow a double-extortion strategy. In such attacks, threat actors not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to share this data with the public, they aim to exert maximum pressure on the victim to meet their demands. While information about the Settra group remains limited, their tactics are consistent with modern ransomware trends aimed at causing maximum reputational and operational damage.

For organizations facing similar threats, maintaining operational continuity and protecting reputation is critical. General defensive steps often include implementing robust multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to prevent phishing. In sectors involving sensitive personal or medical information, strict adherence to regulatory frameworks is essential to mitigate the legal risks associated with data exposure. The potential for negative impacts on an organization's operational continuity and reputation cannot be overlooked when sensitive data is released to the public.