HackerFeeds
All ransomware incidents
R

Ransomware group aurora hits Rapid Manufacturing

MEDIUM
·Manufacturing·2026-10-30

Rapid Manufacturing — a manufacturing target has been listed by the aurora ransomware group on 2026-10-30. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.

Incident Report

Target OrganizationRapid Manufacturing
Threat Group
aurora
SummaryRapid Manufacturing, a manufacturing organization, was listed by the aurora ransomware group on its leak site on 2026-10-30.
Date of Breach2026-10-30
Discovery Date2026-10-30
Region—
Target DomainRapid Manufacturing
Business SectorManufacturing
Severity
MEDIUM

Claim by aurora

[manufacturer] Rapid Manufacturing — a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico. Rapid Manufacturing is not a household name. But it is a critical Tier-1 supplier to SpaceX (Falcon & Starship programs), Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace (RTX), and Millennium Space (Boeing). It builds the wire harnesses, electro-mechanical assemblies, and box builds that go inside rockets, missiles, and satellites. The exposed material includes: <redacted>> ITAR-controlled engineering drawings and manufacturing processes for Falcon 9/Heavy, Starship, and Draco propulsion systems — RTD soldering acceptance criteria, visual inspection standards, cable thermocouple assemblies, and production master plans. 26 ITAR customer quoting accounts including SpaceX, Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace, and Millennium Space — the complete defense/space revenue architecture. <redacted> <redacted> 600–1,200 employee records spanning US (SSN, bank accounts, payroll, I-9/immigration) and Mexico (RFC, CURP, IMSS, bank accounts, nóminas) with data from 2019 through August 2026. <redacted> Attorney-client privileged materials — settlement agreements, severance terms, internal investigation files, and a recorded termination meeting (audio).

Posted by the aurora threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.

Sources

Victim website

Rapid Manufacturing

Leak post (onion / Tor)

tor

http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/rapid-manufacturing-4d8f9e4b

Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.

Disclaimer

HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.