Skip to content
Leak-site post naming Rapid Manufacturing, captured by ThreatCluster

Rapid Manufacturing

aurora

Ransomware leak-site victim intelligence

Data size
15.89 MB
Files
7
Views
6,208
Posted
Oct 30, 2026
Countdown
1 days : 11 hours : 35 min : 05 sec
Industry
electronics contract manufacturer

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

Aurora group claims Rapid Manufacturing—a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico—had about 15.89 MB of data taken across 7 files, including ITAR-controlled engineering drawings and manufacturing processes, employee records, attorney-client privileged materials, settlement agreements, severance terms, internal investigation files, and an audio recording of a termination meeting. The leak page states Rapid Manufacturing employs roughly 600–1,200 people and names Claudia Zermeno, while referencing Falcon 9/Heavy, Starship, and Draco propulsion systems. The leak post is in countdown status.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
0
Platforms
Falcon 9/Heavy Starship Draco propulsion systems
People named
Claudia Zermeno

What was taken

Rapid Manufacturing — a 50-year-old electronics contract manufacturer in Anaheim, California with operations in Ensenada, Mexico.

Data categories
ITAR-controlled engineering drawings and manufacturing processes for Falcon 9/Heavy, Starship, and Draco propulsion syst600–1,200 employee records spanning US (SSN, bank accounts, payroll, I-9/immigration) and Mexico (RFC, CURP, IMSS, bank Attorney-client privileged materials — settlement agreements, severance terms, internal investigation files, and a recor
File types seen
key × 1pdf × 5xlsx × 1
Sample files (7)
Confidential_Settlement_Claudia_Zermeno.pdf
e-inv-rapman-b.key
Export_License_SpaceX_11-22-2023.pdf
MASTER_PLAN_FALCON.xlsx
Q505843drE.pdf
RM95912StandarWorkDelta.pdf
RTD_IN-PROCESS_ACCEPTANCE_CRITERIA.pdf

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Phone
+1 (714) 974-2432
Address
8080 Crystal Dr. Anaheim, CA 92807

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation