Ransomware: cmdorganization claims Port Angeles Composite (US) — Manufacturing

A new ransomware incident has been published on the ransomware.live leak site, involving a US-based manufacturing company, Port Angeles Composite. The breach was posted on June 30, 2026, under the BREACH framework, indicating that the threat actor, cmdorganization, has claimed responsibility and likely exfiltrated data. No specific details on the type or volume of compromised data have been released, but the publication confirms a confirmed security incident affecting the manufacturing sector.

This event directly impacts Port Angeles Composite and its stakeholders, including employees, customers, and business partners. More broadly, it serves as a warning for all US manufacturing firms, which are increasingly targeted by ransomware groups. Compliance teams in similar sectors should review their own incident response and data protection protocols, particularly regarding third-party risk and supply chain exposure.

For compliance teams, the immediate next step is to verify whether your organization has any connection to Port Angeles Composite or its supply chain. If so, assess potential data exposure and notify relevant data protection authorities if required under applicable breach notification laws. Additionally, reinforce employee training on phishing and ransomware vectors, and ensure that backup and recovery procedures are tested and up to date. Finally, monitor ransomware.live and similar threat intelligence sources for any further disclosures that may affect your organization.