{
	"id": "fec30fa1-242c-43fd-ab96-d5e57d1d15d8",
	"created_at": "2026-04-06T00:11:51.006542Z",
	"updated_at": "2026-04-10T03:20:44.922456Z",
	"deleted_at": null,
	"sha1_hash": "24ae281f95f31149291a9ebb969090e056483cc4",
	"title": "A parts manufacturer for SpaceX and Tesla says it was hacked",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 45226,
	"plain_text": "A parts manufacturer for SpaceX and Tesla says it was hacked\r\nBy Zack Whittaker, Kirsten Korosec\r\nPublished: 2020-03-02 · Archived: 2026-04-05 17:57:13 UTC\r\nA precision parts maker for space and defense contractors has confirmed a “cybersecurity incident,” which\r\nTechCrunch has learned was likely caused by ransomware.\r\nVisser Precision, a Denver, Colorado-based manufacturer, makes custom parts for a number of industries,\r\nincluding automotive and aeronautics. In a brief statement, the company confirmed it was “the recent target of a\r\ncriminal cybersecurity incident, including access to or theft of data.”\r\nThe company said it “continues its comprehensive investigation of the attack, and business is operating normally,”\r\na spokesperson told TechCrunch.\r\nSecurity researchers say the attack was caused by the DoppelPaymer ransomware, a new kind of file-encrypting\r\nmalware which first exfiltrates the company’s data. The ransomware threatens to publish the stolen files if the\r\nransom is not paid.\r\nDoppelPaymer is the latest in an emerging list of data-stealing ransomware. In December, security staffing firm\r\nAllied Universal was one of the first companies that had sensitive employee and business data published after the\r\ncompany declined to pay a $2.3 million ransom for the data.\r\nBrett Callow, a threat analyst at security firm Emsisoft, first alerted TechCrunch to the website that was publishing\r\nfiles stolen by the DoppelPaymer ransomware.\r\nThe website contains a list of files stolen from Visser, including folders with customer names — including Tesla,\r\nSpaceX, and aircraft maker Boeing, and defense contractor Lockheed Martin. A portion of the files were made\r\navailable for download. (We are not linking to the ransomware’s website.) The documents included non-disclosure\r\nagreements between Visser and both Tesla and SpaceX. Another file appeared to be a partial schematic for a\r\nmissile antenna was marked as containing “Lockheed Martin proprietary information.”\r\nTechcrunch event\r\nSan Francisco, CA | October 13-15, 2026\r\nSpokespeople for Tesla, SpaceX, and Boeing and did not immediately comment outside business hours.\r\nA Lockheed Martin spokesperson said the company is “aware of the situation with Visser Precision and are\r\nfollowing our standard response process for potential cyber incidents related to our supply chain.”\r\nThe DoppelPaymer ransomware has been active since mid-last year, and its victims have included the Chilean\r\ngovernment and Pemex, Mexico’s state-owned petroleum company. But unlike the Maze ransomware, from which\r\nhttps://techcrunch.com/2020/03/01/visser-breach/\r\nPage 1 of 2\n\nDoppelPaymer derives much of its data-stealing inspiration, the ransom note does not say that data has been\r\nstolen. Instead, it’s only disclosed if the company goes to the ransomware’s website to pay.\r\n“Some companies may not even realize that their data has been exfiltrated prior to it being published,” said\r\nCallow.\r\nThe website hosting the stolen files said there was a “lot” more files to be published.\r\n“Data theft is a strategy that multiple groups have now adopted and, consequently, ransomware incidents should\r\nbe treated as data breaches until it can be established they are not,” said Callow.\r\nUpdated with Lockheed comment.\r\nZack Whittaker is the security editor at TechCrunch. He also authors the weekly cybersecurity newsletter, this\r\nweek in security.\r\nHe can be reached via encrypted message at zackwhittaker.1337 on Signal. You can also contact him by email, or\r\nto verify outreach, at zack.whittaker@techcrunch.com.\r\nView Bio\r\nKirsten Korosec is a reporter and editor who has covered the future of transportation from EVs and autonomous\r\nvehicles to urban air mobility and in-car tech for more than a decade. She is currently the transportation editor at\r\nTechCrunch and co-host of TechCrunch’s Equity podcast. She is also co-founder and co-host of the podcast, “The\r\nAutonocast.” She previously wrote for Fortune, The Verge, Bloomberg, MIT Technology Review and CBS\r\nInteractive.\r\nYou can contact or verify outreach from Kirsten by emailing kirsten.korosec@techcrunch.com or via encrypted\r\nmessage at kkorosec.07 on Signal.\r\nView Bio\r\nSource: https://techcrunch.com/2020/03/01/visser-breach/\r\nhttps://techcrunch.com/2020/03/01/visser-breach/\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://techcrunch.com/2020/03/01/visser-breach/"
	],
	"report_names": [
		"visser-breach"
	],
	"threat_actors": [],
	"ts_created_at": 1775434311,
	"ts_updated_at": 1775791244,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/24ae281f95f31149291a9ebb969090e056483cc4.pdf",
		"text": "https://archive.orkl.eu/24ae281f95f31149291a9ebb969090e056483cc4.txt",
		"img": "https://archive.orkl.eu/24ae281f95f31149291a9ebb969090e056483cc4.jpg"
	}
}