doosan.com Listed by settra Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 28, 2026, the ransomware group settra listed doosan.com on its leak site. The entry states that internal files were exfiltrated in a ransomware attack, with the group claiming a total of 3.27 terabytes of material. No information has been released on the number of individuals affected or on any ransom demand. The exact timing of the intrusion, the method of initial access, and whether data was encrypted remain undisclosed.

Breaking down the breach

The only confirmed detail is the listing itself. Settra posted doosan.com with a reference to exfiltrated internal files and a stated volume of 3.27 terabytes. No independent verification of the data volume or its contents has been made public. The number of people whose information may be involved is listed as unknown.

Inside settra

Settra is a ransomware operator that maintains a leak site to publish names of claimed victims. Groups of this type commonly exfiltrate files before or during encryption and then post samples or volume claims to pressure targets. The listing of doosan.com constitutes the group’s claim; no confirmation from the company or from law-enforcement sources has been reported.

Who is doosan.com?

Doosan.com is the online presence of Doosan Group, a South Korean industrial conglomerate whose subsidiaries manufacture construction equipment, power-generation systems, and related machinery under brands that include Bobcat and Geith. Organisations in this sector routinely store engineering specifications, supplier contracts, quality-control records, and employee or customer data. A compromise at such a firm can therefore touch both corporate operations and individuals whose records are held in those systems.

What data was at risk

The listing names only “internal files exfiltrated in ransomware attack.” No further breakdown of file categories or record counts has been released. Companies of this type typically hold technical drawings, financial documents, personnel files, and communications with partners; whether any of those categories are present in the claimed 3.27 terabytes is unconfirmed.

What's at stake

Exposed internal files can reveal proprietary processes or contractual terms that competitors or other actors might exploit. For individuals whose records appear in the material, the main concerns are identity misuse or targeted fraud. The organisation faces potential regulatory scrutiny and operational disruption while it assesses the scope of the exfiltration.

If your data was in this claimed breach

Monitor bank and credit accounts for unusual activity and place fraud alerts if statements show unexpected changes. Review any recent password resets or login notifications from services that may share data with Doosan entities. Individuals can also run a free exposure scan of their email address against known breach data sets to check whether their information appears in publicly referenced leaks.

AICompiled with AI assistance from public sources and published under our editorial standards.