Cabin equipment manufacturer Stelia Aerospace confirmed a cyber attack on its North American systems after ransomware group Rhysida listed the company on its data leak site.
Rhysida added Stelia Aerospace North America Inc. to the site on April 27, 2026, demanding 27 bitcoin, equivalent to $2.07 million, for 10 terabytes of stolen data. The group set a seven-day deadline before releasing the information.
In a statement to Comparitech, Stelia acknowledged detecting the attack on its U.S.-based operations. Stelia North America, located in South Carolina, designs, develops, and produces advanced composite structures for aircraft and aerospace applications.
The incident aligns with a broader trend of ransomware targeting Canadian organizations, where Rhysida has claimed 22 attacks since its emergence, six confirmed. Across all ransomware groups, 133 claims hit Canadian entities this year, with five verified.