Settra ransomware group lists torsiongroup.co.uk on its leak site

• Ransomware group: Settra
• Country: United Kingdom
• Sector: Professional Services
• Announcement date: July 16, 2026

The threat actor group known as Settra has officially claimed responsibility for a cyberattack targeting torsiongroup.co.uk. In an announcement posted to their leak site on July 16, 2026, the group asserted that they have successfully breached the organization's networks and exfiltrated data belonging to the company.

The details of the claim

According to the announcement made by Settra, the group gained unauthorized access to the internal networks of torsiongroup.co.uk. The threat actor's post, dated July 16, 2026, includes specific allegations regarding the inadequacy of the security measures implemented by the organization. The group claims that their intrusion occurred around June 29, 2026.

Publicly available information regarding the Settra group remains limited, making it difficult to establish a comprehensive profile of their operations or typical tactics. Ransomware groups often utilize a tactic known as double extortion, where they not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to publish stolen data on a public leak site, these actors aim to exert maximum pressure on the victim organization to fulfill ransom demands.

Data involved in the alleged breach

Despite the claims made by the Settra group, the announcement lacks specific technical details regarding the scope of the incident. No details or sample files regarding the content of the leaked data have been provided by the threat actor. Furthermore, there is no screenshot available to verify the contents of the exfiltrated information. The listing names no specific data types.

In many such incidents, the lack of immediate transparency from the attacker can be a strategic move to maintain uncertainty and increase psychological pressure on the target. Without verified samples, it remains impossible to determine the exact volume or nature of the information allegedly taken from the organization's systems.

About torsion group

Torsion Group is a company based in the United Kingdom operating within the professional services sector. The organization specializes in construction and property development. Their project portfolio focuses on several key areas, including student accommodation, care homes, and various residential housing projects.

Potential implications and organizational risks

If the claims made by the Settra group are verified, the organization may face significant legal and operational challenges. Since the company operates in the United Kingdom, a successful data breach could trigger mandatory data breach notification obligations under the UK GDPR. Compliance with these regulations is essential for maintaining legal standing and protecting the rights of data subjects.

Beyond legal compliance, several secondary risks may emerge for both the organization and its stakeholders. These include the potential for identity theft or highly targeted phishing attacks directed at the company's employees and customers. Such attacks often leverage the sensitive information stolen during the initial breach to gain further access or to defraud individuals.

The consequences of such an event can also manifest as damage to corporate reputation and significant disruption to operational processes. To mitigate these risks, organizations in the construction and property development sectors often implement defensive measures such as multi-factor authentication, regular network monitoring, and robust encryption protocols to protect sensitive project and personal data.

Summary of risks

• Legal obligations under UK GDPR
• Identity theft risks for employees and customers
• Targeted phishing campaigns
• Reputational damage
• Operational disruption