LowBreach / campaignMonitoring

Eclipse ransomware group claims attack on Comercial en Fletes México

The eclipse ransomware group lists Comercial en Fletes México on its leak site, an unverified claim, so partners should watch for official notices.

Published
Exploitation
Not confirmed, the only evidence is a leak-site listing reported by a claim tracker

What happened

According to the claim tracker RansomLook, the eclipse ransomware group listed Comercial en Fletes México, S.A. de C.V. on its leak site. RansomLook recorded the listing on 2026-11-06.

A leak-site listing is the group’s own claim and does not prove that an attack happened. This advisory is based only on the RansomLook headline because the full entry could not be reviewed. The following are not confirmed:

  • Whether the company has confirmed any incident.
  • Whether anyone has independently verified the claim.
  • How the group says it got in.
  • What data, if any, was taken, and how much.
  • Whether systems were encrypted.

Am I affected?

Not confirmed. The sources give no detail about affected systems, data or people. If you are a customer, partner or employee of Comercial en Fletes México, watch for direct communication from the company.

What to do now

  1. Treat the listing as an unverified claim until Comercial en Fletes México or another credible party confirms it.
  2. If you have a business relationship with the company, use your existing contacts to ask it directly for a status update.
  3. Be careful with unexpected messages that mention this incident or ask for payment or credential changes. Confirm them through a known channel.

Sources