Ransomware needs a way in. Stolen credentials are the cheapest one.

DFI Retail Group Ransomware Attack

dfiretailgroup.comRansomed

settraGroup

United StatesCountry

Sep 30, 2026Discovered

Overview

View group profile

Domain

dfiretailgroup.com

Industry

Retail & E-Commerce

Country

United States

Discovered

about 16 hours ago

Attack date

Sep 8, 2026

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

settra

Total victims

101

First seen

Jun 2026

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

Threat level

2.4/10

Aggressiveness6/10

Lethality0.2/10

Criticality0.8/10

Status breakdown

Data Leaked4.0%4

Negotiating2.0%2

Claimed

this victim

94.1%95

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Retail & E-Commerce

Known target sector

Country

United States

Frequently targeted country

Other victims

View all (101)

Same group · settra

Group activity

Monthly attacks · settra

101

total · avg 25.3/mo