Royal Plaza On Scotts listed on Eclipse ransomware leak site

• Ransomware group: Eclipse
• Country: Singapore
• Sector: Hospitality
• Announcement date: September 2, 2026

Eclipse claims data exfiltration at Royal Plaza On Scotts

The threat actor known as Eclipse has listed the Singapore-based hotel, Royal Plaza On Scotts, on its dedicated leak site. According to the announcement made on September 2, 2026, the group claims that data belonging to the institution has been exfiltrated. This type of announcement is a common tactic used by ransomware groups in double extortion schemes, where attackers not only encrypt an organization's systems but also threaten to release sensitive information on public platforms to pressure the victim into paying a ransom.

The listing appeared on the group's leak site on the same day the attack was allegedly carried out. However, the information provided by the threat actor remains highly limited. The evidence provided by the group consists of a screenshot that displays a verification page for the leak site. Because the screenshot only shows this verification interface, it does not offer any detailed information regarding the specific content of the alleged leak or the nature of the stolen files.

Details regarding the alleged leak

At this stage, there is no information available regarding the nature of the leaked data. The group has not provided specifics concerning the volume of the data or the total number of files involved in the incident. Furthermore, no ransom demand has been publicly stated by the group in relation to this specific target. The current evidence is limited strictly to the verification page of the leak site, which prevents a detailed assessment of what has actually been compromised.

Affected data types

• The listing names no specific data types.

About Royal Plaza On Scotts

Royal Plaza On Scotts is a five-star independent hotel situated in the Orchard Road district of Singapore. With a history spanning over 50 years, the establishment provides various accommodation services. The hotel is also known for its award-winning Carousel restaurant, which is recognized for providing halal-certified dining options to its guests.

Risk assessment and industry implications

Information regarding the Eclipse group remains limited, making it difficult to determine their full scope of operations. However, the potential impact of such an incident on an organization in the hospitality sector is significant. Given the nature of the industry, a data breach of this type may pose a risk of exposing customer personal information and payment details.

Such incidents can lead to several secondary risks and legal complications. For instance, the exposure of sensitive information may trigger legal processes under Singapore's Personal Data Protection Act (PDPA). Additionally, victims of such breaches may face secondary threats, such as identity theft or targeted phishing attacks directed specifically at hotel guests. Beyond the immediate data concerns, the institution may face negative impacts regarding its operational continuity and its overall brand reputation.

In general, organizations in the hospitality sector can mitigate these risks by implementing robust defensive measures. These include maintaining strict access controls, ensuring regular backups of critical data, and implementing comprehensive monitoring to detect unauthorized exfiltration. As ransomware groups continue to use leak sites to increase pressure on victims, maintaining a clear incident response plan is essential for managing both the technical and the reputational fallout of a potential breach.