wilfley.com

Revenue: 26,300,000 Size: 410GB | SEAL FAILURE A company that builds pumps for chemical and defense production — and undertakes to contain aggressive media under pressure — could not contain its own documentation. --- PROLOGUE We have the archive of A.R. Wilfley and Sons, Inc. — a privately held American manufacturer of centrifugal pumps for the mining, chemical, metallurgical, and defense industries, founded in 1919 and still operating today. Inside — commercial invoices and customs declarations, internal correspondence and technical specifications, HR documents with employees' medical data and Social Security numbers, banking details for international transfers, quality inspection records, environmental discharge permits, defense contracts, and export declarations. Banking details for international transfers , printed on every proforma invoice: ANB BANK, ABA 107001232, SWIFT AMNTUS51, Account 2000016785. Alongside them — the names of contact persons and payment amounts. This data set is sufficient for a Business Email Compromise attack. A letter from the Director of Engineering and Quality, Greg S. Highfill, PE , in which he states in writing that in-process inspection " does not work " — during a period when the company was supplying pumps for explosives manufacturing, defense facilities, and aggressive chemical media. TSA SENSITIVE SECURITY INFORMATION documents , stored in the same body of files as HR forms and commercial invoices. And credentials for the closed ThyssenKrupp / CF Industries procurement portal — transmitted in plain text by email and left sitting in the documentation. An invoice marked "DON'T SEND," whose END USER field reads: CONOCO PHILLIPS — ANZAC, AB . Alongside it — documents for pumps for CNOOC Petroleum (China's state oil company, an oil-sands site in Alberta), Nutrien (the world's largest potash producer), Glencore , and BAE Systems . Forms with employees' Social Security numbers , medical diagnoses including HIV status, addictions, and mental-health disorders, routing numbers and personal bank account numbers — in the same archive as defense documentation and export declarations. This article presents only a portion of the data selected for publication. The full archive is planned to be made available for download and independent review at a later date. --- Part I. Who A.R. Wilfley and Sons Are A.R. Wilfley and Sons, Inc. — a privately held, fifth-generation family company. Founded in 1919, run by the Wilfley family since its founding. It manufactures centrifugal pumps with mechanical seals for the mining, chemical, metallurgical, and defense industries — shipping to more than a hundred countries. | Field | Value | |----------|----------| | Legal address | 5870 E. 56th Avenue, Commerce City, CO 80022 | | EIN | 84-0353820 | | Phone | +1 (303) 779-1777 | | Fax | +1 (303) 779-1277 | | Website | wilfley.com | | Metallurgical subsidiary | Western Foundries, Longmont CO | | International manufacturing | A.R. Wilfley India Pvt. Ltd. | Business Owner: Mike Wilfley, +1 (303) 889-7210. Personnel | Name | Title | Email | Phone | |-----|-----------|-------|---------| | Mike Wilfley | Business Owner | — | 303-889-7210 | | Greg S. Highfill, PE | Director, Engineering & QA | ghighfill@arwilfley.com | 303-889-7135 | | Kati Torres | Customer Service / Trade Compliance | ktorres@wilfley.com | 303-779-1777 | | Sherry Arthur | Export Coordinator | sarthur@wilfley.com | ext. 7232 | | Cesar Murillo | Global Sales Manager | cmurillo@wilfley.com | +1-720-360-5882 | | Paola Rosas | Sales / Export LatAm | PRosas@wilfley.com | 303-889-7248 | | Douglas Segovia Diaz | Gerente de Ventas LatAm | dsegovia@wilfley.com | 303-929-0468 | | Mark Gibbons | Sales | MGibbons@wilfley.com | 303-889-7269 | | Ryan Gaffney | Applications Engineer | rgaffney@wilfley.com | 303-889-7227 | | Scott Terhune | Director of Sales | — | (2022 documentation) | | Sol Decker | Export / Operations | sdecker@wilfley.com | — | | Chuck Hopley | Safety Coordinator | chopley@wilfley.com / c.hopley@att.net | 303-889-7107 | | Martha Gonzalez-B. | International Sales Support | — | 303-889-7248 | | Daniel Lozano | Customer Service — Export | — | (USMCA 2022–2023) | | Ben Hellwarth | Order Entry / Regional Sales Mgr | — | — | | Richard Yates | Project Manager | — | (Koch Fertilizer) | | Joy Heemsoth | Quality / Customer Service | jheemsoth@wilfley.com | — | | Robert Ramirez | Operations | RRamirez@wilfley.com | — | Dual domain: employees use @wilfley.com and @arwilfley.com simultaneously. Greg Highfill — ghighfill@arwilfley.com and ghighfill@wilfley.com. Different domains for a single employee — a classic spoofing vector in a BEC attack. --- Part II. The most recent data: the Wilfley → Thurston → oil-sands chain Thirteen documented shipments from Commerce City, CO to Saskatoon, Canada — from February to June 2026. Carrier: MANITOULIN TRANSPORT. Customs broker: Near North Customs Brokers, Inc. , 55 Patterson Rd., 2nd Floor, Barrie, Ontario L4N 3V9; 705-739-0024. A blanket USMCA certification was signed by Kati Torres for all of 2026. | Ship date | Thurston PO | Contents | |---------------|-------------|-----------| | 02/10/2026 | PO31566 | 804 lbs, 40+ USMCA line items | | 05/05/2026 | PO31347–31681 (9 invoices) | Spare parts ~$30,000+ | | 05/07/2026 | PO31615 | Pump 1A7 Glencore, S/N A704080, $24,668.70 | | 05/12/2026 | PO31562–31704 (20+ invoices) | Spare parts + 8Kpro Bearing Unit $15,019.50 | | 05/19, 05/21, 05/26, 05/28/2026 | (scanned PDF) | Four spare-parts shipments | | 05/20/2026 | PO31505, PO31635 | Nutrien pump S/N AF19731 $22,248.90 + CNOOC pump S/N A704081 $14,229.60 | | 06/02/2026 | PO31593 | 98 lbs, 19 USMCA line items | | 06/09/2026 | PO31529 | 490 lbs, 30 USMCA line items | | 06/16/2026 | PO31658 | 758 lbs, 120 USMCA line items | | 06/19/2026 | PO31458 | Pump 1A7 ConocoPhillips, S/N A704073, $12,890.50 | The PRO numbers for the June shipments are reserved as a block: 1072082400–1072082403. Shipments will continue — the USMCA certification covers all of 2026. End user Invoice 202308001-001 dated June 19, 2026 . Payment terms in the Wilfley system: "N30-DON'T SEND" — a status meaning "do not send to the customer." The END USER field: > CONOCO PHILLIPS — ANZAC, AB The invoice ended up in the same package as the shipping and customs documents — where it had no business being. Technical parameters of the ConocoPhillips pump: | Parameter | Value | |----------|---------| | Model | 1A7 3"×1.5", material MX5, Solidlock | | Pumped medium | Lime Slurry , 55°C, SG 1.030 | | Flow / head | 22.00 m³/h / 30.30 m, 3550 rpm | | Serial number | A704073 | | Cost | $12,890.50 (due date: 19 Jul 2026) | | Quote number | TMI2500911 | Six disclosed end users via Thurston Thurston Machine Inc. (Saskatoon, SK) is a distributor, not the end user. CCI status: "items are for re-sale." The actual end users do not appear in the shipping documents that clear customs. Their names appear only in the internal invoices marked "DON'T SEND." Six end users are documented: | End user | Medium / site | Document | Amount | |---------------------|---------------|---------|-------| | Agrium Fort Saskatchewan | Fertilizer | PO27990, A9 4X3-8 316L | $18,300.70 | | Teck Metals Ltd. | H₂SiF₆, SG 1.610 | PO29382, TMI2200301 | — | | Nutrien Redwater Ops | SG 1.60, 180°F | PO31505, 3AF S/N AF19731 | $22,248.90 | | Glencore Noranda, SDV QC | SG 1.50, 68°F | PO31615, 1A7 S/N A704080 | $24,668.70 | | CNOOC Petroleum N.A. | Lime Slurry, 40°C | PO31635, 1A7 S/N A704081 | $14,229.60 | | ConocoPhillips, Anzac AB | Lime Slurry, 55°C | PO31458, 1A7 S/N A704073 | $12,890.50 | CNOOC: China's state oil company CNOOC Petroleum North America — a subsidiary of the China National Offshore Oil Corporation (CNOOC), the state oil company of the People's Republic of China. Site: ULC Oil Sands, Long Lake Operating Plant Site, LSD 7-31-85-6W4 , Hwy 881, 1 km South of Anzac, AB T0P 1J0. We have: the coordinates of the oilfield site, the pump model (1A7), the serial number (A704081), the characteristics of the pumped medium (lime slurry, 40°C), the cost ($14,229.60), the invoice date (May 20, 2026). Nutrien — the world's largest producer of potash fertilizer. Glencore — one of the world's largest diversified mining and trading conglomerates. Thirteen shipments — hundreds of spare-part line items (CD4H, A20, MX5A seals, bearing units, casings, seats) for an active equipment fleet at no fewer than five oil and mining sites in Canada. The serial numbers, alloys, and operating parameters of each pump — we have them. --- Part III. The money Banking details in customer invoices On every proforma invoice for the Philippine Associated Smelting and Refining Corporation (PASAR) , dated June 25, 2024 : > SEND PAYMENT BY WIRE TRANSFER TO THE FOLLOWING BANK: > ANB BANK , 3033 E. 1st Ave, Denver, CO 80206 > BANK ABA NO.: 107001232 > SWIFT BIC: AMNTUS51 > FOR THE ACCOUNT OF: A.R WILFLEY AND SONS, INC. > ACCOUNT NO.: 2000016785 Amount on the PASAR invoices: $51,030.07 (11 line items, PO 4500439080–4500494723). Terms: N30 upon pickup, Exworks. We have all at once: the names of the Wilfley and PASAR contacts, the payment amounts for specific POs, and the complete banking details for international transfers. One forged "updated wire transfer notice" with a real order number — and the next payment from PASAR or Thurston Machine goes to the wrong place. That is Business Email Compromise. Documented deal amounts | Customer | Application | Amount | |--------|-----------|-------| | BAE Systems (13 pumps, DPAS DO-A5) | Ordnance plant, Kingsport TN | $499,912.00 | | Apache Nitrogen Products (4 pumps) | Ammonium nitrate ~85%, 260°F | $193,421.00 | | EW Process / BAE Systems (2023 quote) | 2 pump ends | $69,826.00 | | PASAR (11 spare-part line items) | Copper/nickel, Philippines | $51,030.07 | | Glencore Noranda (2026 pump) | SDV QC, Canada | $24,668.70 | | Nutrien Redwater (2026 pump) | SG 1.60/180°F | $22,248.90 | | Zinpro Corporation | Pump/Skid Assembly | $28,021.00 | | CODELCO División Ventanas | Sulfuric acid, Chile | $21,935.00 | | Agrium Fort Saskatchewan | Fertilizer | $18,300.70 | | Domtar Paper | Paper manufacturing | $13,686.00 | | CNOOC Petroleum N.A. (2026 pump) | Lime Slurry, 40°C | $14,229.60 | | ConocoPhillips Anzac (2026 pump) | Lime Slurry, 55°C | $12,890.50 | | Zurich Insurance (Chennai) | AF pump spares | $32,208.00 | Internal operating metrics Q1 2025 From the internal document "1st TRIMEST 2025 OPERATION METRIC" — data a private company does not publish: | Metric | Q1 2024 | Q1 2025 | |-----------|---------|---------| | Backlog (contracted, not shipped) | $8,974,611 | $5,125,701 | | Shipments "ins and outs" | $1,039,423 | $1,089,945 | | Pumps shipped | 105 units | 101 units | | Parts shipped | 3,216 units | 2,683 units | | Orders from India (A.R. Wilfley India) | 942 units | 1,801 units (+91.2%) | | Scrap | baseline | +6% | The +91.2% Indian increase in Q1 2025 is not a forecast but an active arrangement. JIFCO invoices from September and October 2025 confirm it: parts for the customer in Jordan arrive simultaneously from the United States and India — the documents disclose the country-of-origin breakdown for each line item in the order. --- Part IV. Hazardous production in the customer base The full technical parameters of pumps for the following media are documented: | Customer | Pumped medium | Parameters | |--------|---------------------|----------| | Apache Nitrogen (St. David, AZ) | Ammonium nitrate ~85% | 260°F, SG 1.320 | | Trademark Nitrogen Corp. (Tampa, FL) | Ammonium nitrate 83% | 260°F, SG 1.379 | | Trademark Nitrogen Corp. | Ammonium nitrate 29% | 260°F, SG 1.290 | | Koch Fertilizer (Beatrice, NE) | Ammonium nitrite / nitric acid | Tags 670-312A/B | | Teck Metals / Thurston | Fluosilicic acid H₂SiF₆ | SG 1.610, 86°F | | BAE Systems | Cyclohexanone, acetone, n-octane | G3 ordnance plant | | CODELCO División Ventanas | Sulfuric acid | Chile | Apache Nitrogen Products (ARW 175507/175561, PO 052482) — 4 model A7 pumps for ammonium nitrate ~85%/260°F with steam-jacketed casings and seals. The quote went through 7 revisions — every version is preserved with the full correspondence and the pump tags TK-2102 A/B and 120P502 A/B . A pump tag is its position in the process flow diagram of a production site. Whoever knows the tags knows which pump sits where at an explosives manufacturing plant. Koch Fertilizer — before shipment, Wilfley required a signed liability release . The document was signed by Project Manager Richard Yates . This means: Wilfley knew about the particular risk of the application and shifted responsibility for the consequences to the buyer in writing before the pump left Commerce City. What is produced at the Wilfley plant in Commerce City Stormwater permit COR900000 lists the substances at the production site: | Group | Substances | |--------|---------| | Metals | Chromium, hexavalent chromium (Cr VI) , nickel, zinc | | Solvents | Toluene, methyl ethyl ketone (MEK) | | Acids | Sulfuric acid (pickling solution) | | Other | Cyanide , WAD cyanide, lubricating oil | Cr VI is a Class A carcinogen under EPA classification. Cyanide is an acute neurotoxin. Operations at the site: grinding, cutting, degreasing, soldering, pickling. The residents of Commerce City and adjacent areas of Denver have the right to know the composition of industrial discharges from this production site under the Community Right-to-Know program (EPCRA, 42 U.S.C. §11001). --- Part V. An admission that was never meant to leave the company Companies rarely document systemic failures in writing. We have such a document. An internal letter from Greg S. Highfill, PE , Director, Engineering & Quality Assurance: > "When it rains, it pours….this probably never went thru inspection and shipped directly from inventory. Our desire for personnel to perform in-process inspection does not work." This is not a customer complaint or an external audit. The head of quality control himself, in writing, states: in-process inspection does not work . The letter was written during a period in which three incidents with three different failure mechanisms are recorded simultaneously. Complaint 0410-003D — a part with out-of-tolerance OD/ID/height deviations made it to finished-goods inventory and was shipped to a customer. Mechanism: quality control physically not performed. Complaint 0419-004DS — conversion of seal housing A2438-01 → A2438-05. Work order No. 159614 was issued against the wrong part number (A2438-03), corrected — but the third operation (drip-lip removal) was dropped. The part passed hydrotest with two of three operations. Mechanism: an error in the production work order not caught by inspection. Complaint 0424-001PR — order ARW 140199 for customer Tripoliven (Venezuela) shipped without line item Ln 110. Mechanism: a picking error not caught at the outbound stage. Three different processes — production inspection, the work-order system, outbound control — failed simultaneously. A formal CAPA procedure ( QAP-100, Rev 1.0 ) appeared only in July 2021 . Until that point, Wilfley supplied pumps for ammonium nitrate production (Apache Nitrogen, Trademark Nitrogen), aggressive acid media (CODELCO, Koch Fertilizer), and defense facilities (BAE Systems) — without a documented corrective-action procedure. In Q1 2025, recorded scrap was +6%. May 2026: four new incidents — in the documents The May 2026 invoices record active incidents with the key distributor Thurston Machine: NCS6703001 (05/12/2026) — order 202794 shipped with part 22-508 CD4 instead of the ordered CD4H . The replacement was sent free of charge. CD4H contains significantly more chromium than standard CD4 and is used in media with high corrosive and abrasive loads. In the oil-sands slurries pumped by the CNOOC and ConocoPhillips pumps, the difference in alloy composition is the difference in seal service life. NCS260020001 (05/12/2026) — order 202481 arrived at Thurston with damaged threads on the draw bolts . Replacement free of charge. Authorized: "Per Ray C." 203063A001 (05/12/2026) — order 203063 shipped with the wrong part (K1154-04 instead of K1154-01). Thurston kept the wrong part, and Wilfley issued a separate invoice for the correct one. RWK6700002 (05/07/2026) — assembly RGT 6700 returned to Wilfley for rework: part S1E was incorrect, S1H needs replacement. Reassembly and return to Thurston — at no charge. Four incidents in a single month. Three of them on the same date (May 12), in the same weekly cycle in which, on May 20, pumps were shipping for Nutrien Redwater (SG 1.60/180°F) and CNOOC Long Lake (lime slurry, 40°C). Wilfley does not separate the "incident" and "routine" flows: they go in a single shipment, via a single carrier, to a single recipient — Thurston Machine. The customer learns of a defect when the part is already installed on site. Open safety findings A separate internal document records open safety findings in the plant's R&D area: > "Hand rails need to be re-installed on the cat walk. Toe plates need to be installed along cat walk. Confined space training for employee working in the area. Install door between test plant and weld shop. Install flashing beacon at entrance to notify employees that testing is in progress." The document is a "Pending corrective action." The status of each item is not documented. --- Part VI. ThyssenKrupp credentials Among the Wilfley documents — credentials for the closed procurement portal of ThyssenKrupp / Uhde Corporation of America : | Project | Portal | Login | Password | |--------|--------|-------|--------| | CF Industries, Donaldsonville, LA | procurement.uhde-web.de | 11-3165 | son78ist45 | | CF Industries, Port Neal, IA | procurement.uhde-web.de | 11-3177 | son78ist45 | The credentials were sent in plain text by email by ThyssenKrupp employees — Michael Fischer (michael.fischer4@thyssenkrupp.com), Mike Brinker , Alison Clutter — and ended up in Wilfley's documentation. The emails carried a standard disclaimer: "the content of this e-mail may be confidential." CF Industries — one of the largest producers of nitrogen fertilizer in North America. Access to the Uhde procurement portal means access to the volumes, prices, and suppliers of two major production sites. Both correspondence threads are preserved. --- Part VII. Employee data HR provider: OnePoint. Disability insurer: Symetra Life Insurance / Custom Disability Solutions, PO Box 9461, Portland, ME 04104. HSA Deduction Authorization Form — a deduction authorization form for a Health Savings Account: employee SSN [masked], bank routing number [masked], account number [masked]. A form with personal banking details was stored in the same body of files as commercial invoices. Disability Claim Form LB-1065 (Symetra): SSN [masked], date of birth [masked], home address [masked], base salary, W-2, bonuses, medical diagnosis, treatment history, spouse's SSN and details [masked]. The form covers questions about HIV status, mental-health disorders, and addictions. The medical-data disclosure authorization runs for 24 months . Workers' Compensation (Pinnacol Assurance, case No. 3472006): injured worker Kraig Lindsay , employer — Western Foundries Inc. (Longmont, CO), policy No. 3216624. Injury: a metal shaving in the eye during grinding. Treating physician: Michael Ladwig, Aviation & Occupational Medicine, 6900 E 47th Avenue Dr Ste 100, Denver CO 80216. HIPAA prohibits the storage of protected health information (PHI) in undifferentiated access. Form LB-1065, with information on HIV status, mental-health disorders, and addictions, was stored next to commercial invoices and export declarations. --- Part VIII. TSA: Sensitive Security Information Fifteen documents bearing the SENSITIVE SECURITY INFORMATION marking. Each carries the warning: > "WARNING: THIS RECORD CONTAINS SENSITIVE SECURITY INFORMATION THAT IS CONTROLLED UNDER 49 CFR PARTS 15 AND 1520. NO PART OF THIS RECORD MAY BE DISCLOSED TO PERSONS WITHOUT A "NEED TO KNOW", AS SET FORTH IN 49 CFR PARTS 15 AND 1520, EXCEPT WITH THE WRITTEN PERMISSION OF THE ADMINISTRATOR OF THE TRANSPORTATION SECURITY ADMINISTRATION." These are Consent to Search/Screen Cargo forms — authorizations to screen Wilfley air cargo without additional controls. The term of each: indefinite ("until revoked in writing"): | Forwarder | Wilfley signatory | |------------|---------------------| | IJS Global, Inc. | Sol B. Decker | | YRC Logistics Global | Sol B. Decker | | FedEx Trade Networks | Sherry Arthur | | Dachser Transport | Sherry Arthur | | Bertling Logistics | Sherry Arthur | | C.H. Powell / Tandem Global | Martha Gonzalez-B. | | Logistics Plus | Martha Gonzalez-B. | | FedEx Trade Networks (revised) | Martha Gonzalez-B. | | MIQ Global, LLC | Martha Gonzalez-B. | | Panalpina, Inc. | Sherry Arthur | | Agility Logistics Corp. | Sherry Arthur | | Dachser (revised) | Sherry Arthur | | OIA Global | Sherry Arthur | | DelEx, Inc. | Sherry Arthur | | Globalcare Logistics (2021) | Martha Gonzalez-B. | No written revocation is recorded for any of the consents — all 15 remain in effect to this day. This means: anyone who presents these documents to the right forwarder is, formally, authorized to access Wilfley air cargo without additional screening. The unauthorized disclosure of SSI documents carries civil penalties under 49 CFR Parts 15 and 1520 . Fifteen documents bearing a federal marking were stored in the same body of files as HR forms and commercial invoices. --- Part IX. BAE Systems and the defense contract BAE Systems is an active customer. In 2023, through the intermediary EW Process (Fort Mill, SC; Jeff McConaghy: jmcconaghy@ewprocess.com), Wilfley quoted A9 1.5X1-8 = $24,805 and A7 3X1.5-13 = $45,021 — a total of $69,826 . A previously documented order — PO MHM-031119-01-G3 : | Parameter | Value | |---------|---------| | Amount | $499,912.00 (13 pumps) | | DPAS rating | DO-A5 (national defense priority, 15 CFR 700) | | Prime contract | DAAA09-98-E-0006 (Department of the Army) | | Application | Cyclohexanone, acetone, n-octane — G3 ordnance plant, Kingsport TN | | Payment terms | Net 45, FOB Destination | | FAR clauses | FAR 52.209-6; FAR 52.204-8 | A DPAS DO-A5 rating means the supplier is required to accept the defense order and complete it on time at the demand of the U.S. Army — refusal is not possible. The documentation for this contract — the application (explosive solvents), the delivery volumes, the contact details — was stored next to HR forms and employees' personal data. --- Part X. Exports: Israel, Iraq, Jordan SED declarations: EMCOL Limited, Israel Four Shipper's Export Declarations for shipments to Israel — EIN 84-0353820 on each: | SED number | Goods | HTS code | Value | |-----------|------|---------|-----------| | 141316 | Centrifugal pump parts | 8413.91.9520 | $6,371 | | 148971 | Centrifugal pump parts | 8413.91.9520 | $2,739 | | 149365 | Parts + seals + gaskets + springs | 8413/8484/3926/7320 | $3,840 | | 153135 | Centrifugal pump parts | 8413.91.9520 | — | Consignee: EMCOL Limited , 17 Hayahalomin Street, Industrial Area, Ashdod 77611, Israel. Contact: Erez Kantor . Classification: EAR99 , no license required. Carrier: UPS, air, from Englewood CO. SED declarations are protected from public disclosure under 13 U.S.C. §301(g) . The text on the form itself: "Confidential – Shipper's Export Declarations wherever located, shall be exempt from public disclosure unless the Secretary determines that such exemption would be contrary to the national interest." EIN 84-0353820 appears on every declaration. Power of Attorney: TNT USA LLC Wilfley granted TNT USA LLC (Melville, NY) the right to file Electronic Export Information through AES. The document contains EIN 84-0353820 and an acknowledgment of criminal liability for false statements (22 U.S.C. §401, 18 U.S.C. §1001). TNT's liability limit under this document: zero . If the EEI contains an error or false information is entered — the liability lies with Wilfley, not the forwarder. Iraq: Al Najaf Alashref Cement Plant Invoice 164689 001 (PO 180-1M) — pump K4" 6"×4" Slurry , 16" Closed Impeller, material MX5A; net weight 741 kg. Buyer: Al-Watam for General Trading and General Contracting Co. Ltd. , Baghdad. Authorized director: Mohammed Zchayir; +964-7808507475 / +964-7902324717. Delivery route: CFR ERBIL International Airport . Payment terms: in advance. JIFCO (Jordan India Fertilizer Company) — September and October 2025 | Invoice | Date | PO | Line items | Origin | |--------|------|-----|---------|--------------| | 200961 001 | 10/08/2025 | 05250017 PM | Impeller 8x6-15, Shaft 4A7, Seal Gland | USA + India | | 201395 001 | 09/08/2025 | 07250072 PM | Cake Wash Pump Spares | USA + India | | 174527 001 | 07/29/2022 | 12210071 PM | Effluent Pump, Casing 3x2-13 CD4H | USA | Site: Eshidiya Free Zone, Jordan. JIFCO Tax ID: 11889721 . Parts from India and the USA travel in a single order — the documents disclose the country-of-origin breakdown for each line item. --- Part XI. The customer base | Customer | Country | Documented | |--------|--------|------------------| | CNOOC Petroleum N.A. / Thurston | Canada | Long Lake Oil Sands, Anzac AB; LSD 7-31-85-6W4; 1A7 S/N A704081, $14,229.60 | | Nutrien Redwater Ops / Thurston | Canada | 3AF S/N AF19731, SG 1.60/180°F, $22,248.90 | | Glencore Noranda / Thurston | Canada | SDV QC; 1A7 S/N A704080, SG 1.50, $24,668.70 | | ConocoPhillips / Thurston | Canada | 13 shipments 2026; S/N A704073, $12,890.50; END USER field disclosed | | PASAR | Philippines | Invoices $51,030.07; complete ANB BANK details | | CODELCO El Teniente | Chile | PO $21,935; pump for H₂SO₄; contact jzavala@stgo.codelco.cl | | JIFCO | Jordan | Invoices September/October 2025; USA + India; Tax ID 11889721 | | BAE Systems | USA | PO MHM-031119-01-G3; $499,912; DPAS DO-A5; G3 ordnance plant | | Apache Nitrogen Products | USA (AZ) | 4 pumps AN ~85%/260°F; $193,421; tags TK-2102 A/B; 7 quote revisions | | Koch Fertilizer | USA (NE) | Ammonium nitrite / HNO₃; liability release signed by Richard Yates | | Trademark Nitrogen Corp. | USA (FL) | Pumps AN 83% and 29%, 260°F; TANK 645 | | Teck Metals / Thurston | Canada | H₂SiF₆ SG 1.61; A7 WCD4; quote TMI2200301 | | Agrium Fort Saskatchewan | Canada | A9 4X3-8 316L; $18,300.70; PO27990 | | EMCOL Limited | Israel | 4 SEDs; $13,000+; Erez Kantor, Ashdod | | Al-Watam / Al Najaf Cement | Iraq | Invoice 164689 001; K4" pump; CFR Erbil; payment in advance | | Zinpro Corporation | USA | Pump/Skid Assembly; $28,021 | | Domtar Paper | USA | A7 1.5X1-8; $13,686 | | Abonos Colombianos S.A. | Colombia | DHL cargo claim; PO 70041607 | | Agroindustrias del Balsas | Mexico | USMCA; rbernal@fertinal.com; Tax ABA930301AZ5 | | Emirates Steel / APC Int. | UAE | 2 pumps A7; 100hp/380V | | Reliance Industries (RIL) | India | RFQ; technical comments | | CF Industries / ThyssenKrupp | USA | RFQ + procurement portal credentials | | Carpenter Technology Corp. | USA (PA) | Specialty steels; PO via EW Process June 2023; ESandor@cartech.com | --- Part XII. The suppression mechanism The documents contain not only operational data — they reveal every instrument with which Wilfley controlled information about itself. Each left a trace. "FOR INTERNAL USE ONLY" — the standard header on internal order specifications (Pump Order Specification Sheet). The marking did not stop these documents from ending up in our archive. "N30-DON'T SEND" — a status in Wilfley's accounting system that appears on every invoice in the Thurston–ConocoPhillips–CNOOC–Nutrien–Glencore chain. It means "do not send to the customer." We have all the invoices bearing this marking. TSA SENSITIVE SECURITY INFORMATION — a federal marking on fifteen documents. Each carries a warning prohibiting disclosure without the permission of the TSA Administrator. All fifteen were in the same body of files as HR forms and commercial invoices. 13 U.S.C. §301(g) — the SED export declarations carry direct legal protection on the form itself: "Confidential – Shipper's Export Declarations wherever located, shall be exempt from public disclosure unless the Secretary determines that such exemption would be contrary to the national interest." EIN 84-0353820 appears on each of them. Corporate disclaimers in correspondence — the ThyssenKrupp/Uhde emails carried: "the content of this e-mail may be confidential." The EW Process emails: "This message contains confidential information intended only for use by the intended recipient. Any unauthorized use, disclosure, distribution, dissemination or copying of this message or information contained herein is strictly prohibited." Both correspondence threads are preserved. FAR 52.209-6 / FAR 52.204-8 — federal clauses in the BAE Systems defense order. The supplier's obligations to the Department of the Army are not a tool for suppressing publication. Koch Fertilizer liability release — a written transfer of liability to the customer before shipment. Richard Yates's signature was obtained before the pump left Commerce City. Wilfley shifted the risk of consequences onto the buyer. Each of these instruments was directed against customers, competitors, external auditors. None was designed for the case in which the data has already left the perimeter. The suppression mechanism works when there is a single point of pressure. When there are four recipients at once — the government, employees, customers, and the reader — "N30-DON'T SEND" ceases to mean anything. --- Conclusion For the government and regulators. Fifteen federal SSI documents (49 CFR Parts 15 and 1520) — indefinite, never revoked, with no access segregation. HIPAA data with employees' medical diagnoses in the same archive as customs declarations. Stormwater permit COR900000: Cr VI (a Class A carcinogen under the EPA), cyanide, toluene at the site at 5870 E. 56th Avenue, Commerce City CO. Defense contract DPAS DO-A5 ($499,912, Army DAAA09-98-E-0006): the technical parameters of pumps for explosive solvents were stored next to HR forms. Four SEDs with EIN 84-0353820, protected by 13 U.S.C. §301(g); shipments to Iraq, Israel, Jordan. For employees. Your SSNs, the routing numbers of your personal accounts, your medical diagnoses, treatment history, and spouses' data — are in our archive. This was not your choice: you handed this data to your employer, and the employer did not segregate access to it from operational documentation. The Symetra disability insurance form, with answers to questions about HIV status, mental-health disorders, and addictions, lay in the same package as the invoice for CNOOC. For customers. CNOOC, ConocoPhillips, Nutrien, Glencore, BAE Systems, Apache Nitrogen, PASAR, CODELCO, JIFCO: your serial numbers, site coordinates, operating-medium parameters, and contract amounts are before us. The quality director of your supplier stated in writing that in-process inspection "does not work." May 12, 2026 — three quality incidents on a single date; May 20, 2026 — pumps for Nutrien and CNOOC already in transit. You have the right to know. For banks and financial partners. ANB BANK, ABA 107001232, SWIFT AMNTUS51, Account 2000016785 — printed on every page of every proforma invoice, next to the contact person's name and the amount. The next email requesting a change of details warrants a direct phone call: +1 (303) 779-1777. A.R. Wilfley and Sons manufactures pumps with mechanical seals — devices whose entire reason for existing is one thing: to hold under pressure that which must not get out. Acids. Slurries. Explosives. Solvents. Media that kill on contact. The documentation did not hold. Inside — a $499,912 defense contract with a DPAS DO-A5 rating , next to a form about a metal shaving in the eye of a foundry worker. Fifteen indefinite SSI documents bearing a federal TSA marking — next to proforma invoices. A login and password for the ThyssenKrupp / CF Industries procurement portal — transmitted in plain text and left sitting in the archive. Medical data with answers about HIV status — in the same package as export declarations. And an invoice marked "N30-DON'T SEND," whose END USER field reads: CONOCO PHILLIPS — ANZAC, AB . The seal does not hold. The contents have gotten out. This is exactly what happens when a company that knows how to contain aggressive media under pressure does not apply the same principles to its own data. ---