The Settra ransomware operation has listed Australian numismatics specialist Downies Collectables as a victim on its darknet leak site, triggering an investigation at the almost 100-year-old firm.
“Downies Collectables is aware of a breach listing on a cyber criminal’s ‘dark-web’ leak site that allegedly contains certain information associated with our business. We are taking this event very seriously,” a Downies spokesperson told Cyber Daily.
“We are investigating these allegations with our forensics experts and cybersecurity advisors with the utmost urgency.
“Relevant Australian Government and law enforcement agencies have been notified, and we are cooperating and working with officials to respond to this criminal activity.”
Downies was listed by the hackers in a July 21 leak post, with Settra sharing what it alleged was sensitive financial information and employee salary data. Settra claims to have found several irregularities in Downies’ business operations; however, it appears the summary of the group’s findings is AI-generated, likely with an eye to cast the company in a poor light. Settra claims to have exfiltrated more than 500 gigabytes of data.
For its part, Downies said it had identified “suspicious activity” on its network on July 6, which it believes may be linked to the ransomware actor’s claims.
“While our advisors continue their investigation, we suspect these two events are correlated, but it cannot be confirmed with certainty at this preliminary stage,” Downies said.
“Our investigations are ongoing and we are working to understand the nature and extent of the incident as soon as possible.”
“We implore people not to look for data illegally leaked on the dark web, as doing so only encourages further such criminal activity and may further the potential harm to Australians possibly impacted.”
Who is Settra?
Settra has only been active since June 2026 but has already listed 26 victims on its darknet leak site, targeting business and consumer services in the United States and the United Kingdom.
There is little hard data on the group, given how new it is, however Settra describes itself as being purely financially motivated:
“Not for an idea. Not for revenge. Not for ‘justice’. For money. We do not destroy companies for pleasure. We do not publish data on principle. We do not hunt specific industries or countries. If there is access – there is a target. If there is a target – there is a deal. If there is no deal – there is publication. It's that simple.”
The group says it does not target military or government organisations, nor critical infrastructure entities.
Who is Downies Collectables?
Downies Collectables is one of Australia’s leading suppliers of collectable and historic coins, militaria, model cars, and other ephemera.
The company has operated in Australia in one form or another since 1933, and also operates Downies Australian Coin Auctions.
In 2005, the Reserve Bank of Australia appointed Downies to auction off its entire rare gold coin collection.
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
David Hollingworth
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.