Aero Fabrications
Attack Intelligence
Aero Fabrications was compromised in a ransomware attack attributed to interlock in January 2026. The organization, operating in the Manufacturing sector in United States, was added to the group's data leak site as part of an extortion campaign.
interlock operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Aero Fabrications Ltd specializes in the manufacture of aerospace components, with over 30 years of experience. They partner with leading aerospace companies such as Airbus and BAE Systems. However, due to poor security and employee negligence, all data and databases were compromised and leaked publicly. This included customer, employee, and company data, as well as contracts and, most importantly, confidential drawings.
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-20131, which may have been leveraged as initial access vectors or for lateral movement.