A threat actor is claiming to have breached Cooper Steel Fabricators, a major Tier 1 structural steel fabricator based in the US, and has listed a "complete mirror" of the company's FTP server for sale on the dark web.
Proprietary Data for Sale
The compromised data allegedly includes highly detailed technical documents and proprietary project information. The threat actor is offering the entire trove, described as a "complete mirror" of Cooper Steel’s FTP server, for $28,500 in cryptocurrency.
The data allegedly comprises 330 GB "with no deletions or extraneous files." This includes various models, frames, and detailed drawings of the company’s past and present projects.
Examples of the compromised project data include:
- Complete coordinated sets of architectural, structural, mechanical, and refrigeration piping drawings for the Publix Greensboro Refrigerated Distribution Center.
- Information detailing Cooper Steel’s role in building an Amazon data center in Ohio. The threat actor claims the project details potentially include structural specifications for hyperscale data center operations, a fact sensitive given Amazon’s secrecy regarding its infrastructure.
- Data on another contracted Amazon sorting facility project in Massachusetts.
- Drawings, 3D models, and data related to Walmart distribution centers, cold storage facilities, and other supporting structures.
Cooper Steel, which boasts an annual revenue of $593 million, is a highly regarded AISC certified direct contractor for major corporate entities, underscoring the severity of the leaked project information.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.

