Cooper Steel Fabricators, a prominent U.S.-based structural steel fabricator serving high-profile clients like Amazon, suffered a significant data breach. A threat actor claimed to have exfiltrated a complete mirror of the company’s FTP server (330 GB), including proprietary 3D models, engineering drawings, and structural specifications for critical projects. Among the compromised data were hyperscale data center designs for Amazon’s Ohio facility, structural details for Publix Greensboro Refrigerated Distribution Center, and blueprints for Walmart distribution centers, cold storage facilities, and a Massachusetts-based Amazon sorting hub.The attacker demanded $28,500 in cryptocurrency for the stolen data, which includes sensitive intellectual property (IP) vital to Cooper Steel’s operations and client trust. The breach exposes not only the company’s internal project documentation but also confidential client infrastructure details, risking competitive disadvantage, reputational harm, and potential legal liabilities. As of now, Cooper Steel has not publicly acknowledged the breach, leaving the extent of operational or financial fallout uncertain. The incident underscores vulnerabilities in supply chain security, particularly for firms handling critical infrastructure designs for tech and logistics giants.

Cooper Steel Fabricators, a prominent U.S.-based structural steel fabricator serving high-profile clients like Amazon, suffered a significant data breach. A threat actor claimed responsibility, exfiltrating a complete mirror (330 GB) of the company’s FTP server—likely containing proprietary designs, contracts, financial records, or operational data. The attacker demanded $28,500 in cryptocurrency for the stolen data, posing risks of intellectual property theft, competitive disadvantage, or further exploitation if the data is leaked or sold. The breach exposes the company to financial loss (ransom payment or recovery costs), reputational damage among clients (e.g., Amazon), and potential legal liabilities if sensitive third-party data was compromised. The scale of the exfiltrated data suggests a targeted attack aimed at crippling operations or extracting maximum value, with long-term consequences for trust and business continuity.