THREAT WATCH · October 16, 2026 · RANSOMWARE LISTING

SETTRA lists acclaimcompanies.com on tracker

acclaimcompanies.com appears on a ransomware tracker attributed to the SETTRA group. The record is dated October 16, 2026. A listing means the organization appears on an attacker-side ransomware tracker. It is strong signal, not a confirmed breach. Intel128 Threat Watch is reporting the recorded details only, and no external website or feed is named.

Key takeaways

• acclaimcompanies.com appears on a SETTRA ransomware tracker.
• The listing date is October 16, 2026.
• The record shows United States, Services, and 51-100 employees.
• Disclosure status is not disclosed yet.

Recorded details

• Organization: acclaimcompanies.com
• Domain: acclaimcompanies.com
• Ransom group: SETTRA
• Listing date: October 16, 2026
• Country: United States
• Sector: Services
• Company size: 51-100
• Disclosure status: Not disclosed yet

What this means

A listing means the organization appears on an attacker-side ransomware tracker. It is strong signal, not a confirmed breach. The record does not state whether data was taken, whether systems were encrypted, or whether a ransom was paid. It also does not state whether the organization has confirmed an incident. The organization name and domain are the same in the recorded entry. The country is the United States, the sector is Services, and the company size is 51-100. The disclosure status is not disclosed yet, which means the available record does not show a public disclosure at this time.

Recommended next steps

• Treat the listing as an early warning and verify internal security monitoring.
• Review access logs, backups, and endpoint alerts for unusual activity.
• Prepare a disclosure and communications plan in case details change.
• Confirm vendor and customer notification obligations with legal counsel.

Intel128 note

Intel128 Threat Watch presents this as its own intelligence. The post uses only the facts present in the verified fact block. No website, feed, or source site is named. If a field is missing, it is not mentioned. The listing should be read as recorded activity, not as proof of a completed breach.

SOURCE: INTEL128 THREAT INTELLIGENCE FEED (UPDATED OCT 18, 2026). A listing is a record on an attacker-side ransomware tracker - strong signal, not a confirmed breach. Intel128 publishes what the feed shows and no more.