Downies Hit by Settra Ransomware Attack, Data Leaked in Extortion Attempt Australia’s leading numismatics and collectibles retailer, Downies, is responding to a ransomware attack and extortion campaign by the cybercriminal group Settra, which first listed the company as a victim in a July 2026 dark web leak post. On July 6, 2026, Downies detected suspicious activity in its IT network and launched an investigation, confirming unauthorized access and data theft. The company later discovered references to stolen information on Settra’s leak site, though it urged the public to avoid engaging with illegally disclosed data to prevent further harm. Downies’ CEO, Luke Templeton, condemned Settra’s tactics, including the use of AI-generated claims to pressure the company by falsely alleging business irregularities. The group, active since late June 2026, has already listed 36 victims on its darknet site, with Downies as its only confirmed Australian target. The company is working with forensic experts, cybersecurity advisors, and government agencies, including the Australian Signals Directorate (ASD), Australian Federal Police (AFP), Victoria Police, and the Office of the Australian Information Commissioner (OAIC). Downies has also begun notifying affected individuals. Settra’s selective data disclosures suggest an ongoing effort to escalate pressure on the retailer as the investigation continues.