Ransomware group aurora hits Rapid Manufacturing
Rapid Manufacturing — a manufacturing target has been listed by the aurora ransomware group on 2026-10-30. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Rapid Manufacturing |
|---|---|
| Threat Group | aurora |
| Summary | Rapid Manufacturing, a manufacturing organization, was listed by the aurora ransomware group on its leak site on 2026-10-30. |
| Date of Breach | 2026-10-30 |
| Discovery Date | 2026-10-30 |
| Region | — |
| Target Domain | Rapid Manufacturing |
| Business Sector | Manufacturing |
| Severity | MEDIUM |
Claim by aurora
[manufacturer] Rapid Manufacturing — a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico. Rapid Manufacturing is not a household name. But it is a critical Tier-1 supplier to SpaceX (Falcon & Starship programs), Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace (RTX), and Millennium Space (Boeing). It builds the wire harnesses, electro-mechanical assemblies, and box builds that go inside rockets, missiles, and satellites. The exposed material includes: <redacted>> ITAR-controlled engineering drawings and manufacturing processes for Falcon 9/Heavy, Starship, and Draco propulsion systems — RTD soldering acceptance criteria, visual inspection standards, cable thermocouple assemblies, and production master plans. 26 ITAR customer quoting accounts including SpaceX, Anduril, Northrop Grumman, Rocket Lab, L3Harris, Collins Aerospace, and Millennium Space — the complete defense/space revenue architecture. <redacted> <redacted> 600–1,200 employee records spanning US (SSN, bank accounts, payroll, I-9/immigration) and Mexico (RFC, CURP, IMSS, bank accounts, nóminas) with data from 2019 through August 2026. <redacted> Attorney-client privileged materials — settlement agreements, severance terms, internal investigation files, and a recorded termination meeting (audio).
Posted by the aurora threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
Rapid Manufacturing
Leak post (onion / Tor)
http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion/blog/rapid-manufacturing-4d8f9e4b
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

