PChome Taiwan Hit by Settra Ransomware via Infostealer

Taiwanese e-commerce giant PChome suffered a ransomware attack that exposed credentials and personal data belonging to more than 35,000 users and employees. The Settra ransomware group claimed responsibility for the breach, which public reporting indicates began around June 10, 2026, after infostealer malware first compromised employee and customer accounts.

Initial Access and Data Stolen

According to reporting on Ransomware.live, the attackers gained initial access through infostealer activity that harvested login details. The incident ultimately led to the theft of employee data, user data, and a large volume of credentials. The claim was publicly posted on June 28, confirming that thousands of accounts were affected. Available reporting describes the breach as involving both internal company records and customer information tied to PChome’s online shopping and payment services.

Risks of Credential Reuse

this claimed breach matters because the exposed credentials can be used to access your accounts on other sites where you reuse the same email address, password, or security questions. For you and your family, that single leak can open the door to identity theft, unauthorized charges, or even strangers showing up at your doorstep if addresses or phone numbers are linked to the stolen data. Children’s accounts tied to family email addresses are especially vulnerable because gaming platforms and parental controls often share the same login details.

How Doxxing Chains Form

The doxxing and identity-chain implications are serious. Once credentials appear on criminal forums, attackers can correlate your email with usernames on social media, gaming services, and shopping sites. This creates a chain that quickly reveals your full name, home address, phone number, and family relationships. A credential leak like this one frequently cascades into account takeovers on gaming platforms, where children’s profiles can be hijacked to extract even more personal information or to harass the household.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity so you can break the chains before criminals exploit them.
• Rotate the password you used on PChome anywhere else it is reused, then enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak that touches your family is caught and addressed within hours instead of months.
• Cover the entire household with DoxxScan family protection, which includes dependents and children’s gaming accounts that often chain back to the same addresses and credentials.
• Let DoxxScan remediation specialists handle the takedown requests across data brokers and exposed profiles on your behalf while you focus on securing your daily life.

The speed with which stolen credentials move from ransomware leaks into active fraud shows why waiting for notification is no longer enough. Start your DoxxScan trial today and put continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation specialists to work for your family—including protection for gaming accounts that can otherwise become entry points for doxxing. DoxxScan by GalaxyWarden gives ordinary families the same level of early warning and cleanup that used to be available only to large organizations.