va-glass.com
Attack Intelligence
va-glass.com was compromised in a ransomware attack attributed to settra in June 2026. The organization, operating in the Manufacturing sector in VA, was added to the group's data leak site as part of an extortion campaign.
settra operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
We have an archive of data from Virginia Glass & Mirror Holdings LLC — a group of companies manufacturing glass and mirrors in Virginia (USA), owned since December 2022 by private equity fund Gemini Investors. The scale of the archive: 671,653 files totaling 443 gigabytes. Inside — emails, spreadsheets, contracts, receipts, medical records, regulatory reports, tax forms, photographs. The company's complete operational memory spanning more than a decade of operations. Inside — full Social Security Numbers of rank-and-file workers, the full SSN of the company's CEO in an unencrypted bank form. The SSN and personal address of the chief controller and his wife — on a tax form embedded in the corporate archive. Employee bank account details — routing numbers, account numbers — from an ACH payroll file. A sales department employee's passport details with home address. Medical records from workplace injuries. Data on environmental violations. Lead emissions up 80% year-over-year. Illegal discharge — two photos in the archive with no captions. And on top of all this — documents about the transaction by which Gemini Investors acquired control of the company with 94.79% ownership for $5 million in investment. This article presents only a portion of the data selected for publication. The full archive is planned for release for download and independent review at a later date.