Communications & Power Industries

Communications & Power Industries, also known as CPI, is a defense contractor headquartered in the United States of America. The company specializes in the design and manufacture of military electronics. Its core products and services are directed toward defense and government customers. CPI operates within the defense industrial base, providing equipment that supports various military applications. The organisation’s focus on military electronics positions it as a supplier of critical components for defense systems. As a U.S.-based entity, it is subject to federal regulations governing defense contractors.

In January 2020, CPI experienced a ransomware attack that began on 15 January when a privileged user clicked a malicious link. The malware rapidly propagated across the company's unsegmented network, encrypting files including on-site backups. To regain access to data, the organisation paid approximately five hundred thousand dollars for a decryption key. Although some systems containing sensitive military data were recovered, the company remained largely non-operational for weeks afterward, with only a fraction of computers restored. Recovery efforts required reinstalling operating systems on affected devices, a process hampered by outdated infrastructure such as unsupported Windows XP machines. The incident highlighted vulnerabilities in the supply chain and underscored the risks posed to critical defense-related data.