pchome.com.tw Listed by settra Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Pchome.com.tw was listed by the Settra ransomware group on June 28, 2026, after internal files were exfiltrated in a ransomware attack. An undisclosed number of people may have been affected; check your account activity and consider changing passwords or enabling additional security measures if you have used the site.
Inside the incident
The only confirmed information is the listing itself and the assertion that files were taken. No date of intrusion, volume of data, or encryption status has been made public. The organization has not issued a statement confirming or denying the claims at the time of reporting.
Inside settra
Settra is a ransomware operator that maintains a public leak site to post names of organizations from which it claims to have stolen data. Groups of this type typically combine file encryption on victim systems with the threat of releasing stolen material if a ransom demand is not met. The listing of pchome.com.tw constitutes the group’s claim; independent verification of the data’s authenticity or scope has not been reported.
pchome.com.tw and its sector
Pchome.com.tw operates as a major Taiwanese online retail and payment platform serving consumers and merchants. Organizations in this sector routinely process order records, payment details, account credentials, and internal operational documents. A successful intrusion at such a company can expose both customer transaction histories and backend systems that support those services.
What data was at risk
The listing refers only to “internal files exfiltrated.” No inventory of specific data categories has been published. Companies of this type commonly store customer names, addresses, payment card information, order histories, and login credentials, yet the exact contents of the claimed exfiltration remain unconfirmed.
What's at stake
Exposed internal files can contain information that enables targeted fraud or account takeover if the material later appears on criminal forums. For the organization, the incident may trigger regulatory scrutiny, remediation costs, and loss of customer confidence. Individuals cannot yet assess personal exposure because the scale and nature of the data have not been disclosed.
If your data was in this claimed breach
Monitor bank and payment accounts for unusual activity and enable transaction alerts where available. Use unique passwords and multi-factor authentication on any accounts linked to the service. Readers can run a free exposure scan of their email address against known breach data to check for prior appearances of their information.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
vcnyhome.com Listed by settra Ransomware Groupcanopybrands.us Listed by settra Ransomware Grouplifevantage.com Listed by settra Ransomware Groupdownies.com Listed by settra Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the pchome.com.tw Listed by settra Ransomware Group →
Publicly posted by settra — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.