Ransomware group aurora hits CP Manufacturing, Inc.
CP Manufacturing, Inc. — a manufacturing target operating in US has been listed by the aurora ransomware group on 2026-10-30. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | CP Manufacturing, Inc. |
|---|---|
| Threat Group | aurora |
| Summary | CP Manufacturing, Inc., a manufacturing organization in the United States, was listed by the aurora ransomware group on its leak site on 2026-10-30. |
| Date of Breach | 2026-10-30 |
| Discovery Date | 2026-10-30 |
| Region | US |
| Target Domain | CP Manufacturing, Inc. |
| Business Sector | Manufacturing |
| Severity | MEDIUM |
Claim by aurora
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services, Material Sales, HMM, and UK partner Recycleye. The dataset includes complete server mirrors from HR, finance, engineering, legal, operations, and sales infrastructure, capturing the company's entire digital footprint: Sage/Epicor ERP accounting system for 8 entities (CPM, MSS, HMM, IMSR, IMSRE, MSIRE, CPGH, CP Global) with consolidated P&L showing $109.1M revenue, $10.2M net income, and $12.1M EBITDA for FY2024, plus multi-year budgets (2021–2024), daily cash reports, and AR/AP data ~340 Social Security Numbers with full identity packages (name, DOB, health coverage status, premium amounts, tax withholdings) across 4 entities via ACA 1095-C filings (2016–2022), biweekly payroll registers, 401(k) participant records, 10-year salary histories (2013–2023), and benefits administration across 5 carriers (Anthem, Blue Shield, SIMNSA, UNUM, Western Dental) <redacted> <redacted> Truist bank account details — routing number 053101121 and account number 1180009812409 for CP Manufacturing LLC, plus ACH payment batch files spanning August 2025 through August 2026 277+ GB of proprietary engineering IP — 22G of AutoCAD Electrical MRF designs with proprietary component catalogs (1.2G), 195G of Artec 3D scanner data for manufactured equipment, 38G of CNC laser fabrication data (Amada LCG3015 AJ / FabriWin), PCB board designs (5 boards), SolidWorks Electrical templates, and Epicor ERP Bill of Materials with proprietary part numbers 60+ customer contracts and 30+ NDAs with Republic Services, Waste Management, Recycleye/Nestlé, Cal-Waste, Balcones, Wasatch, and international partners, plus Declaration Partners acquisition due diligence documents, competitor proposals (BHS, Machinex, MISTRAL), and a complete project green list Privileged legal materials — active litigation subpoena (Hans Ouellet), Coastal Resources MWS settlement agreement with UCC1 financing statements, separation/termination documents for named employees, restrictive covenant cease-and-desist letters, PIIAAs (invention assignment agreements), wage garnishment orders, and corporate equity documents 200+ named job applicant resumes, 51 employee headshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Posted by the aurora threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
CP Manufacturing, Inc.
Leak post (onion / Tor)
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/cp-manufacturing-inc-6c04ae39
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

