samuelkoon.com Listed by settra Ransomware Group

On July 16, 2026, the website samuelkoon.com appeared on the leak site operated by the settra Ransomware Group. The listing states that Samuel D. Koon & Associates, a financial advisory firm, suffered a ransomware attack in which internal files were allegedly exfiltrated. The disclosure does not quantify how many individuals are affected, nor does it list the exact types of records taken beyond claiming that sensitive internal documents were stolen.

Reported Details from the Listing

The settra leak site entry, accessible via the .onion link indexed by ransomware.live, explicitly names Samuel D. Koon & Associates and references control of a $25 million portfolio and 350+ bank accounts. It claims the firm’s internal files were taken during a ransomware incident but provides no additional technical details about the initial access vector, exfiltration method, or volume of data. The listing follows the group’s standard format of publishing proof-of-compromise samples while threatening further release if demands are not met. No client list or specific record count is published in the current disclosure.

Why This Matters for You and Your Family

When a financial advisory firm that manages substantial assets and hundreds of bank accounts is breached, the people whose money, accounts, and personal details sit behind those records face direct risk. Even if your name is not yet visible on the leak site, the exposure of internal files can include client statements, tax documents, account numbers, Social Security numbers, addresses, and contact information. Any single record linking your identity to financial holdings becomes permanent ammunition for identity thieves, loan fraud, and targeted phishing. Families who used the firm for retirement planning, trusts, or everyday banking may not even know their data was housed there until fraudulent activity appears on statements months later.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one company’s files. Stolen internal documents often contain spreadsheets that cross-reference client names, emails, phone numbers, and sometimes dates of birth or driver’s license data. These fragments allow attackers to build identity chains that connect your professional adviser’s records to your email provider, social media handles, and even your children’s gaming accounts. Once those links exist, a single leaked password or account number can cascade into full account takeovers across banks, brokerages, and online services. The exposure of advisory firm data therefore amplifies long-term doxxing potential far beyond the initial breach.

Settra Ransomware Group’s Known Track Record

Public reporting attributes the emergence of Settra to mid-2025. The group has since claimed responsibility for attacks on small-to-medium professional services firms, including legal practices and financial consultancies. Their typical playbook begins with phishing or compromised remote desktop credentials, followed by deployment of ransomware, exfiltration of documents, and dual extortion: demanding payment to prevent file encryption and a second ransom to stop data publication. Leak sites are used as both proof and pressure, with samples of stolen spreadsheets and client-related PDFs frequently posted. The Samuel D. Koon & Associates listing fits this established pattern.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any references that may now exist from this advisory firm breach.
• Rotate every password you ever reused at samuelkoon.com or with the firm, then enable 2FA through an authenticator app on all financial accounts.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure tied to your identity or your family is caught and acted on quickly.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that can be chained back to the same leaked address or parent details.
• Let remediation specialists handle data-broker takedown requests and ongoing monitoring tied to this incident so you do not have to chase every appearance manually.

The breach of Samuel D. Koon & Associates illustrates how one compromised financial advisory relationship can quietly expose your family’s financial footprint for years. Starting proactive defense now limits how far attackers can travel down the identity chain created by this leak. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts vulnerable to credential-stuffing attacks that often follow such incidents.