settra ransomware group lists dystar.com on its leak site

• Ransomware group: settra
• Country: Singapore
• Sector: Manufacturing
• Announcement date: June 28, 2026

Settra claims to have compromised DyStar data

The threat actor group known as settra has officially listed the organization dystar.com on its leak site. According to the announcement made by the group, they claim to have successfully compromised data belonging to the organization. The listing was posted on June 28, 2026, and the group asserts that the initial attack or compromise occurred on June 11, 2026.

In many modern cyberattacks, particularly those involving ransomware, threat actors utilize leak sites to apply pressure on their targets. This tactic is often part of a double extortion strategy, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information to threaten its public release. By listing a victim on a dedicated site, the group aims to damage the target's reputation and force compliance with their demands.

Details of the alleged data theft

The announcement made by settra provides specific claims regarding the volume of information they have allegedly obtained. The group claims to be in possession of 1.3 terabytes of data, which they have described as the complete digital archive of the organization. This suggests a significant breach of the company's internal repositories.

Despite the large volume of data mentioned, the listing is notably lacking in specific details regarding the contents of the files. The group has not provided a breakdown of the file types or the specific nature of the information contained within the 1.3 terabytes. Furthermore, no screenshots were provided in the announcement to verify the contents of the stolen archive.

• No specific data types were named in the listing.

About DyStar

DyStar is a global chemical company that operates within the manufacturing sector. The organization provides a wide range of dyes, chemicals, and performance products specifically designed for the textile and leather industries. A core focus of the company involves the development of innovative technologies and sustainable solutions intended for textile processing.

Potential risks and organizational implications

This incident may pose significant risks to the organization's operational continuity and data privacy. Depending on the nature of the alleged data, employees and business partners could be exposed to identity theft or targeted phishing campaigns. When massive amounts of digital archives are compromised, the potential for secondary attacks increases, as stolen information can be used to craft highly convincing social engineering attempts against stakeholders.

As the organization is based in Singapore, legal obligations and administrative penalties under the PDPA (Personal Data Protection Act) may be applicable. Organizations facing such threats are often advised to review their data security protocols and notify relevant authorities in the event of a confirmed data breach. Maintaining robust incident response plans and ensuring compliance with regional data protection regulations are critical steps for companies operating in highly regulated environments.

In the manufacturing sector, such breaches can disrupt supply chains and damage long-term business relationships. Organizations in this sector typically focus on securing their intellectual property and ensuring that digital transformations do not introduce new vulnerabilities into their production and chemical development processes.