INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Aurora Publishes New Victim CP Manufacturing Inc
|
2026-10-30 13:08
HIGH
LOW
RANSOMWARE & EXTORTION
Executive Summary
AI-generated
On October 30, 2026, CP Manufacturing, Inc., a San Diego-based industrial manufacturer of waste sorting and recycling equipment operating since the 1970s under the CP Group / CPG Sorting Technologies brand, was targeted in a cyberattack. The attackers gained access to the company's entire digital footprint, including server mirrors from HR, finance, engineering, legal, operations, and sales infrastructure, capturing complete data on Sage/Epicor ERP accounting system for 8 entities with consolidated P&L showing $109.1M revenue, $10.2M net income, and $12.1M EBITDA for FY2024. The attackers also obtained sensitive information including Social Security Numbers of approximately 340 individuals across 4 entities via ACA 1095-C filings (2016–2022), biweekly payroll registers, 401(k) participant records, and benefits administration data.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
HydraqHydraq
Target & Sectors
FIVE_EYES
FIVE_EYES
manufacturingmanufacturing
logisticslogistics
Incident Timeline
August 2025
Threat actors exfiltrated sensitive data, including adshot photographs and vendor records with Tax IDs, from CP Manufacturing, Inc.
Click on any entity below to view its context and source!
tactic
Exfiltration
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
CPM
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
MSS
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
MSIRE
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
CPGH
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
P&L
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
AR/AP
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Social Security Numbers
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
DOB
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
UNUM
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Western Dental
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
LLC
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
ACH
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
IP
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Amada LCG3015 AJ /
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
FabriWin
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
PCB
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
SolidWorks Electrical
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Epicor
ERP Bill
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Republic Services, Waste Management
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
BHS
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Coastal Resources MWS
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Microsoft
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
tactic
T1584.004 - Server
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
8 entities
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
financial
$12.1 EBITDA
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
4 entities
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
5 carriers
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
277 August
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
22 G
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
1.2 G
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
195 G
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
38 G
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
200 equity documents
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
400 vendor
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
3 individual contractors
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
infrastructure
7.8 G Microsoft SQL Server
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
August 2026
Threat actors exfiltrated sensitive data from CP Manufacturing, Inc., including adshot photographs and vendor records with Tax IDs.
Click on any entity below to view its context and source!
tactic
Exfiltration
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
CPM
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
MSS
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
MSIRE
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
CPGH
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
P&L
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
AR/AP
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Social Security Numbers
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
DOB
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
UNUM
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Western Dental
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
LLC
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
ACH
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
IP
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Amada LCG3015 AJ /
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
FabriWin
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
PCB
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
SolidWorks Electrical
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Epicor
ERP Bill
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Republic Services, Waste Management
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
BHS
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Coastal Resources MWS
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation
Microsoft
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
tactic
T1584.004 - Server
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
8 entities
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
financial
$12.1 EBITDA
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
4 entities
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
5 carriers
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
277 August
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
22 G
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
1.2 G
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
195 G
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
38 G
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
200 equity documents
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
400 vendor
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
general_metric
3 individual contractors
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
infrastructure
7.8 G Microsoft SQL Server
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
2026/10/30
Aurora has published a new victim, CP Manufacturing, Inc., indicating the company was targeted by Aurora.
Click on any entity below to view its context and source!
organisation
CP Manufacturing, Inc.
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
organisation
MRF
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
organisation
the CP Group / CPG Sorting Technologies
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
organisation
MSS Inc.
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
organisation
IMS Electronics Recycling
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
organisation
IMS Logistics
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
organisation
IMS Recycling Services
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
organisation
Material Sales
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
organisation
HMM
[manufacturer] CP Manufacturing, Inc. — a San Diego-based industrial manufacturer of waste sorting and recycling equipment (MRF systems) operating since the 1970s under
the CP Group / CPG Sorting Technologies brand, with subsidiaries MSS Inc. (Nashville, TN), IMS Electronics Recycling, IMS Logistics, IMS Recycling Services,
Material Sales, HMM, and UK partner Recycleye.
Tactical Metrics
Metrics
financial
12,100,000
Ebitda
Click for context!
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Metrics
infrastructure
8
G Microsoft Sql Server
…adshot photographs, 400+ vendor records with Tax IDs (including 3+ individual contractors with potential SSNs), and
a 7.8G Microsoft SQL Server backup (IMSROM) of undetermined contents
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Intelligence Sources
Ransomware Live
2026-10-30
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Incident Version History
CURRENT VERSION
Last Updated: 2026-10-31T07:30
Comprehensive Tactical Telemetry
Highly Correlated Entities
31x
organisation
Identified Entity
CP Manufacturing, Inc.
entity
5x
timeline
Temporal Reference
the 1970s
date
4x
general metric
G
22
g
2x
industry
Targeted Sector
Manufacturing
sector
2x
tactic
Cyber Operation Type
Exfiltration
tactic
2x
general metric
Entities
8
entities
Contextual Telemetry
Context Block
10 METRICS
target region
Target Country
United Kingdom
country
tactic
MITRE ATT&CK Technique
T1584.004 - Server
technique
financial
Ebitda
12,100,000
ebitda
general metric
Carriers
5
carriers
general metric
August
277
august
general metric
Equity Documents
200
equity documents
general metric
Vendor
400
vendor
general metric
Individual Contractors
3
individual contractors
infrastructure
G Microsoft Sql Server
8
g microsoft sql server
malware
Malware Payload
Hydraq
tool
Click on any entity below to view its context in the main text!
Selective Unpublish
Select the networks you want to remove this post from. The system will try to delete the real post through the API and clean the database so you can publish it again.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies. Read our Privacy Policy.