Rosello et Fils listed on Eclipse ransomware leak site

• Ransomware group: Eclipse
• Country: France
• Sector: Agriculture and Food Production
• Announcement date: September 14, 2026

Eclipse claims data compromise at Rosello et Fils

The threat actor known as Eclipse has listed the French institution Rosello et Fils on its dedicated leak platform. This announcement, which appeared on September 14, 2026, involves a claim that data belonging to the organization has been compromised by the group. Such listings are a common tactic used by ransomware groups as part of a double extortion strategy, where attackers not only encrypt an organization's systems but also threaten to release sensitive information on public leak sites to pressure the victim into paying a ransom.

The event was officially announced on the group's leak site on September 14, 2026, which coincides with the date the attack was claimed to have occurred. While the presence of an organization on a leak site is a significant indicator of a potential security incident, it is important to note that these claims are made by the threat actors themselves. The provided evidence currently consists of a screenshot displaying a verification page from the platform, which serves to validate the listing but does not provide granular details regarding the specific nature of the breach or the contents of the alleged stolen data.

Details regarding the alleged data breach

At this stage of the investigation, there is no specific information available regarding the nature or the volume of the leaked data. The evidence provided by the threat actor is limited to a verification page on their platform. Consequently, the listing names no specific data types or file counts.

Potential implications of the breach

The compromise of an organization's data can lead to several critical consequences. For an entity like Rosello et Fils, the exposure of sensitive information could result in the leak of personal data belonging to employees and various business partners. Beyond the immediate privacy concerns, such a breach can have broader organizational impacts.

Because the organization operates within France, a confirmed data breach could lead to significant legal sanctions and administrative fines under the General Data Protection Regulation (GDPR). Furthermore, the organization may face a loss of credibility within its supply chain. Once a company's security is publicly questioned, it may become a target for secondary attacks, where threat actors attempt to leverage the initial breach to move laterally into the networks of the company's partners or clients.

About Rosello et Fils

Rosello et Fils is a prominent fruit and vegetable wholesaler with a long history in the industry, boasting over 100 years of experience. The company is based in the Hauts-de-France region of France and plays a vital role in the regional food supply chain. Their operations serve a diverse range of clients, including professional clients, local shops, and various retail chains.

Security considerations for the food production sector

While public information regarding the Eclipse group remains limited, the incident highlights the ongoing risks faced by the agriculture and food production sector. Organizations in this sector often rely on complex supply chains and digital logistics, making them attractive targets for cybercriminals. When an institution is targeted, it may need to initiate a comprehensive investigation within its internal networks to verify the validity of the leakage claims and to determine the full scope of the intrusion.

In general, organizations facing such threats often focus on several defensive and reactive measures. These include strengthening network monitoring to detect unauthorized access, implementing strict access controls to protect sensitive data, and conducting regular audits of internal systems. Furthermore, maintaining robust incident response plans is essential for managing the legal, operational, and reputational fallout that follows a public claim of a data breach.