DIPECARR listed on Eclipse ransomware leak site

• Ransomware group: Eclipse
• Country: Brazil
• Announcement date: October 8, 2026

Eclipse claims data exfiltration at DIPECARR

The threat actor group known as Eclipse has officially listed the Brazilian organization DIPECARR on its dedicated leak site. According to an announcement posted by the group on October 8, 2026, the attackers claim to have successfully exfiltrated data belonging to the company. This type of announcement is a common tactic used by ransomware groups to pressure victims into paying ransoms, a method often referred to as double extortion, where stolen data is threatened with public release.

The announcement was made on the group's leak site, which serves as a platform for showcasing victims and the data they have allegedly compromised. While the listing confirms the claim of a breach, the specific details regarding the mechanics of the intrusion or the method of exfiltration remain undisclosed by the threat actors. At this stage, the incident remains a claim made by the Eclipse group.

Details regarding the alleged data breach

Despite the public listing, there is currently no information available regarding the specific nature or volume of the allegedly leaked data. The threat actor group has not provided details concerning the total size of the data stolen or the specific file count involved in the incident. Furthermore, no ransom demand has been publicly specified in the current announcement.

The evidence provided by the attackers is extremely limited. The screenshot released by the group does not contain any evidence regarding the nature of the data, as it only displays a browser verification page. This lack of transparency means that the listing names no data types at this time, and no data samples have been provided to verify the authenticity of the claim.

About DIPECARR

DIPECARR is a prominent entity within the Brazilian logistics and automotive aftermarket industry. Founded in 1994, the company has established itself as one of Brazil's leading truck spare parts distributors. The organization serves a wide-reaching customer base across the country, providing a comprehensive and diverse range of products to meet the needs of the trucking and transport sectors.

Risk assessment and organizational implications

This incident suggests that operational data or customer information within DIPECARR may be at risk. Because the company operates within Brazil, a potential data breach could lead to legal sanctions under the LGPD (General Data Protection Law), which governs how personal data must be protected and handled within the country.

The implications of such a breach extend beyond the immediate organization. The company's supply chain partners and customers may face secondary risks, including the possibility of identity theft or targeted phishing attacks if sensitive contact or transactional information is compromised. In modern cyberattacks, once data is exfiltrated, it is often used to target the victim's ecosystem through social engineering.

Regarding the threat actor, information available about the Eclipse group is limited. For organizations facing similar threats, it is generally advisable to conduct a detailed security audit to investigate potential breaches and to notify the relevant authorities. Defensive strategies typically involve strengthening network segmentation, implementing robust endpoint protection, and maintaining rigorous backup protocols to mitigate the impact of such intrusions.