BRIEFRansomwarelowP45
Eclipse ransomware lists French wholesaler Rosello et Fils
Rosello et Fils
Detected14 September 2026 · 16:12 UTC
The Eclipse ransomware group published Rosello & Fils, a French fruit and vegetable wholesaler in the agriculture and food sector, on its leak site. As a freshly-listed victim outside LATAM it is mainly context for regional defenders but confirms the group's ongoing activity. No compromise details pointing to the region are indicated.
CategoryRansomware
Severitylow
Priority score45
Detected14 September 2026 · 16:12 UTC
Ransomware● 45
Ransomware Eclipse publica al distrito escolar Dublin City SchoolsThe Eclipse ransomware group has listed Dublin City Schools, a Georgia (US) school district, on its leak site as a fresh victim. Education victims typically face operational downtime plus exposure of student and staff data, but this instance is outside Latin America, so it mainly serves to track the group's targeting.Ransomware● 35
LockBit5 publica a la firma finlandesa HTT OyLockBit5 has listed Finnish accounting firm HTT Oy as a ransomware victim on its leak site. Accounting firms hold sensitive financial records of many client companies, making them attractive extortion targets. A breach here can cascade into data-exposure and fraud risks across the firm's entire client base.Ransomware● 40
LockBit5 publica a la empresa taiwanesa tpi.twLockBit5 has listed the Taiwanese technology company tpi.tw as a ransomware victim on its leak site. The intrusion targets a tech firm, and stolen data may be published if no ransom is paid. Even a smaller victim can expose supply-chain partners and customers to follow-on phishing and fraud.Ransomware● 55
LockBit5 publica al municipio italiano Robecco sul NaviglioLockBit5 ransomware has published Comune di Robecco sul Naviglio, a municipality in the Metropolitan City of Milan, under the Government & Defense sector. Local-government systems typically hold citizen records, tax and registry data, and municipal service platforms. A confirmed public-sector victim raises the risk of sensitive data exposure and service disruption for residents.Ransomware● 80
Ransomware Qilin publica a la argentina Vitar GroupThe Qilin ransomware group has listed Vitar Group, an Argentine organization, on its leak site. The sector is listed as 'Other', but a fresh regional victim signals an active intrusion with data-theft and extortion risk. Defenders in Argentina should watch for related TTPs and possible publication of stolen data.Ransomware● 42
Ransomware 'booba project' publica a la naviera Atlas Ocean VoyagesThe 'booba project' ransomware group published Atlas Ocean Voyages, a US travel and hospitality company, claiming 37 GB of stolen data. A fresh victim listing points to an active intrusion with data theft and likely extortion pressure. It matters mainly as ransomware-ecosystem context, as it falls outside the Argentina/LATAM scope.