settra ransomware group lists naturesplus.com on its leak site

• Ransomware group: settra
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: September 17, 2026

The threat actor known as settra has listed data allegedly belonging to naturesplus.com on its leak site. This announcement, which appeared on September 17, 2026, marks a potential data breach involving the health and supplement company.

The claims made by settra

The settra group published an announcement on September 17, 2026, listing naturesplus.com on their leak site. According to the threat actor, the group claims to possess various documents belonging to the organization. The documents mentioned in the listing are reportedly dated between 2015 and 2019. While the group has made these claims, information regarding this specific group remains limited.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's systems but also exfiltrate sensitive data, threatening to publish it publicly if a ransom is not paid. This method aims to maximize leverage by threatening the victim's reputation and compliance standing.

Details of the alleged data leak

The listing provided by the threat actor mentions documents that are allegedly linked to specific entities within the organization. Specifically, the claims involve documents belonging to Natural Organics, Inc. and NaturesPlus CEO Jim Gibbons, covering the period between 2015 and 2019. It is important to note that the screenshot provided by the group was not suitable for content verification, meaning the authenticity of the files cannot be independently confirmed at this time.

The listing does not specify the total size of the data or the exact number of files involved. Furthermore, no information was provided regarding a specific ransom demand. In many such incidents, the lack of immediate transparency from the attacker makes it difficult for incident responders to determine the full scope of the exposure during the initial stages of an investigation.

About naturesplus.com

NaturesPlus, operating under Natural Organics, Inc., is a health company that manufactures and markets vitamins, minerals, and natural dietary supplements. Founded in 1972, the company offers a wide range of natural nutritional supplement products. As a player in the retail and e-commerce sector, the company maintains a long-standing presence in the health industry.

Potential impact and organizational risks

These claims suggest that the organization's historical corporate and administrative data may be at risk. Such a leak could negatively impact the organization's commercial reputation and lead to a loss of trust among customers and business partners. When historical data is targeted, it can expose long-term business strategies, internal communications, or administrative records that were thought to be archived.

As the organization is based in the United States, notification obligations under state laws and federal regulations may arise depending on the nature of the leaked data. Organizations facing such threats must often navigate complex legal landscapes to ensure compliance with privacy regulations. Furthermore, the possibility that this data could be utilized in secondary attacks or targeted phishing campaigns should be taken into consideration.

To defend against such threats, organizations in the retail and e-commerce sectors typically focus on robust data encryption, strict access controls, and continuous monitoring of their networks. Implementing multi-factor authentication and maintaining rigorous backup protocols are also common defensive steps used to mitigate the impact of ransomware and unauthorized data exfiltration.