orion4value.com

THE CERTIFICATE AS A VULNERABILITY: Documents of Orion Registrar Inc.

PROLOGUE

Financial reports and weekly cash flow statements. Company bank account details at First Citizens Bank. Payroll records and employee timesheets with names and hours worked. Audit reports with detailed vulnerability data from hundreds of clients. The complete contract with General Dynamics Mission Systems — one of the largest contractors of the U.S. Department of Defense — describing all 24 facilities and their headcounts. ISO certification requests from U.S. Army facilities. Internal correspondence with names, phone numbers, and corporate emails of all employees. Complaints about clients caught in fraud schemes who continued to carry the Orion stamp.

All of this comprises the documents of Orion Registrar Inc. , a U.S.-based ISO accreditation body headquartered in Arvada, Colorado. The company is accredited by ANAB (American National Accreditation Board) and issues certificates of conformity to ISO 9001, AS9100, ISO 14001, ISO 45001, ISO 13485, and other standards — to enterprises throughout the United States and abroad.

The nature of Orion's business makes this leak particularly dangerous: an auditor by definition gains access to the internal processes, vulnerabilities, and organizational structure of each client. Data from manufacturing companies, defense sector suppliers, Army facilities, and critical infrastructure sites.

In this article, you will be able to review only a portion of the data we have decided to disclose. Everything else will be available for download and independent review following the publication of the full archive.

Part I. Who Is Orion Registrar Inc.

Orion Registrar, Inc. — a certification body (Registrar / Certification Body) accredited by ANAB. Physical office address: 7502 W. 80th Ave., Ste. 225, Arvada, CO 80003 . Mailing address: PO Box 745070, Arvada, Colorado 80006-5070 . Website: [Link entfernt] . Corporate email domain: @orion4value.com . Main telephone: 303-645-4006 .

Business model: Orion conducts audits of enterprises for compliance with international quality standards and issues certificates. For each audit, the company gains full access to the client's internal processes — documentation, production procedures, personnel data, nonconformities (NCRs). This is an aggregated snapshot of vulnerabilities from hundreds of companies that placed their trust in them.

Part II. Money: Cash Flow

Bank: First Citizens Bank, Account x9177

Some of Orion's operating cash flows pass through a First Citizens Bank Checking Account: x9177 (designated "Orion" in the QB system).

Weekly Cash Flow Statements

November

Sales Receipts Employee Payroll Auditor Payroll Supplier Payments Closing Balance $310,965.80 $46,786.27 $102,513.98 — $468,321.80 $149,081.34 $0 $93,370.61 $49,841.61 $760,660.36 $109,460.92 $0 — $12,508.50 $882,629.78

January

Sales Receipts Employee Payroll Auditor Payroll Supplier Payments $276,638.03 $1,540.01 $39,174.59 $28,927.46 $175,470.82 $62,095.73 $45,214.75 $12,287.84 $168,678.51 — $47,326.69 $37,156.60

Opening balance as of January 1: $1,101,106.58 . Closing balance as of January 16: $1,246,369.10 .

Regular Supplier Payments

Supplier Type Amount Global Wind Organisation Membership Fee $36,319.59 (ACH) IAAR Payment $4,750.00 Wright Point Payment $2,295.00 United Health Care Insurance $8,395.91 Delta Dental Insurance Insurance $684.33 Liberty Mutual Insurance $489.51 Canvas Credit Union / Rent Rent $7,902.75 Mutual of Omaha Insurance $240.19 First Citizens Credit Card Credit Card $4,232.86

The line item "Out-Interest": $194,040.00. This is not a table error — it is an actual interest payment that is four times the weekly auditor compensation pool. The nature of this debt is not disclosed in the available documents.

Part III. Military and Defense Clients

General Dynamics Mission Systems (GDMS)

A complete Statement of Work (SOW) for a three-year contract with General Dynamics Mission Systems, Inc. for certification and surveillance audit services.

GDMS is an operating unit of General Dynamics Corporation , one of the largest contractors of the U.S. Department of Defense. Headquarters — Fairfax, VA.

Orion serves as the Registrar (Seller) to maintain the following GDMS certifications:

Standard Scope ISO 9001 All facilities AS9100 Aviation, space, and defense ISO 14001 Environmental management ISO 45001 Occupational health and safety

Complete list of certified GDMS facilities — 24 sites in the United States and Canada with headcount and scope of activities:

Facility State/Province Headcount Activity Scottsdale (HQ) AZ 2,532 Command and telecom systems, air defense, information networks Pittsfield MA 1,341 Systems engineering, integration and testing of hardware and software Bloomington MN 788 Development, integration, testing, supplier quality management Taunton MA 714 Command systems, information networks, receiving warehouse Marion VA 501 Composites, engineered materials, radomes, aerospace and military products Fairfax VA 495 Program management, development, integration and testing Ottawa, Ontario Canada 900 Development, production and management of subsystems for global defense programs Calgary, Alberta Canada 350 Development, production, maintenance for governments and defense contractors Dedham MA 322 Information security, information networks for defense and government customers McLeansville NC 373 Program management, development, testing Quincy MA 99 Autonomous underwater vehicles (AUV) for defense and science GPS Source, Colorado Springs CO 73 GNSS systems manufacturing for military, aerospace, and commercial applications Cullman AL 194 Ultra-precision machining of beryllium and exotic materials, optical components

The document includes a requirement: all auditors must be citizens of the country where the facility is located. Auditors must have access to unclassified products, QA documents, and GDMS corporate records.

The mere fact that this SOW — with a list of all facilities, headcounts, and scopes of activity — is stored in an unprotected corporate archive raises questions about due diligence on the part of GDMS in selecting the registrar.

Red River Army Depot (RRAD), USA

Performance Work Statement for ISO 14001:2015 certification services for Red River Army Depot , located near Texarkana, TX.

Parameter Data Facility Red River Army Depot Address 100 James Carlow Drive, Texarkana, TX 75507 Area 18,316 acres, 35 production buildings Headcount (within EMS) 3,451–4,350 employees SIC Code 9711 (National Security) CB Accreditation at time of contract IAS (International Accreditation Service)

RRAD is a U.S. Army industrial complex engaged in the reset, repair, and certification of military combat and tactical vehicles.

DEVCOM Chemical Biological Center — Rock Island (CBC RI)

Performance Work Statement for ISO 9001:2015 certification audit for the Combat Capabilities Development Command (DEVCOM) Chemical Biological Center-Rock Island — a U.S. Army unit responsible for developing chemical and biological defense capabilities.

Parameter Data Facility DEVCOM CBC Rock Island Headcount ~120 employees Standard ISO 9001:2015 (recertification) Operating Hours 0600–1700, Mon–Fri, at Rock Island Arsenal Remote Audit Only during pandemic or force majeure

Requirement: auditors must be accredited by ANAB or an equivalent body; each auditor must be certified by Exemplar Global, IRCA, or BEAC for ISO 9001:2015. Both documents with detailed access requirements for a military facility are in our archive.

DEVCOM Aviation and Missile Center (AvMC)

Documents contain correspondence related to DEVCOM Aviation and Missile Center (AvMC) — the Army's aviation and missile systems center.

Parameter Data Facility DEVCOM Aviation and Missile Center Contact Person LaQuinta Andrews, CIV USARMY Title Mission Assurance Manager Email [Link entfernt]@army.mil Telephone (256) 975-6396 Headcount (EMS scope) 126–175 employees Standard AS9100 (aerospace and defense) Status Recertification

DEVCOM AvMC is a U.S. Army unit responsible for aviation and missile technology development. Correspondence with Army civilian personnel — including Mission Assurance functions and facility headcount data.

Part IV. Commercial Clients: What Leaked Alongside Them

Cesar-Scott, Inc. (El Paso, Texas)

Manufacturer of wire harnesses, cable assemblies, and electromechanical assemblies for the automotive and electronics industries. Certified to ISO 9001 and ISO 14001 through Orion (NSF-ISR).

Parameter Data Legal Name Cesar-Scott, Inc. Address (US) 1731 Myrtle Avenue / 4731 Ripley Drive Suite B, El Paso, TX 79901/79922 Address (MX) Av. Parque Industrial Juárez #3827, Ciudad Juárez, Chih, México Telephone 915-543-3212 Email [Link entfernt]@cesar-[Link entfernt] Management Representative Gaudencio Martinez Year Founded 1988 Headcount (US) 12 / (MX) 60

Company profile with complete production process information.

NewAge Manufacturing, Inc.

Parameter Data Address 2317 Warren Drive, Plattsmouth, Nebraska 68048 Contact Bob Wood , bob.w@newagemfg-[Link entfernt] Telephone (402) 296-6133 Standard ISO 9001:2015 Audit ID 22714

Scope: plastics manufacturing (PCTFE, PTFE, PFA, PVDF), aluminum, steel; CNC machining, anodizing, powder coating.

Monmouth Wire & Computer Recycling, Inc.

Parameter Data Address 3250 Shafto Rd., Tinton Falls, NJ 07753 Audit ID 26134 Technical Reviewer Elsa Zarate Review Date November 18, 2022

Airstreams Renewables, Inc.

Parameter Data Address 13681 Chantico Rd., Tehachapi, CA 93561 Standard GWO (Global Wind Organisation) Audit ID 25876 Auditor Cao Hua (Orion) Contact Robert Franklin Pine (Management Reviewer)

Complete NCR report with two Major nonconformities: absence of Management Review and Internal Audit. Internal acknowledgments of losing a key GWO instructor.

NxEdge, Inc. (Boise, Idaho)

Parameter Data Address 7500 West Mossy Cup, Boise, ID 83709 Contact Dustin Erickson (Management Rep), derickson@nxedgeinc.com Standard ISO 9001:2015 Audit ID 23549 Auditor Henry Towers (Orion) Total NCRs 9 nonconformities , including 2 Majors

Manufacturer of high-tech coatings (plasma spraying of ceramics and metals, anodizing, fluoropolymers) and precision machining. Detailed breakdown — in Part VII.

New College Institute (Martinsville, Virginia)

Parameter Data Address Martinsville, VA Standard GWO (Global Wind Organisation) Audit Type Certification

An educational institution obtaining GWO certification — audit data, including nonconformities, recorded in the Orion system.

Part V. Company Management and Personnel

Documents reveal the complete contact structure of the company — names, direct phone numbers, and corporate emails of key Orion employees.

Title Name Email President Paul Burck president@orion4value.com Government Contracts / Client Management Annette Olivas aolivas@orion4value.com Aerospace Specialist Patricia Walter pwalter@orion4value.com IT Administrator Cao Hua chua@orion4value.com Staff Gloria Moore gmoore@orion4value.com Staff Teri Coleman tcoleman@orion4value.com Auditor (GWO) Penny penny@orion4value.com

Company President Paul Burck personally participated in correspondence with clients and in complaint reviews — his personal corporate email president@orion4value.com appears in documents as an escalation address.

Government Contracts Specialist Annette Olivas handles correspondence with U.S. Army civilian personnel (DEVCOM AvMC) regarding AS9100 recertification, including Mission Assurance Manager LaQuinta Andrews ( [Link entfernt]@army.mil ).

Part VI. Legal Risks: Fraudulent Clients Under Orion's Certificate

Intercon Solutions, Inc. — A Certified Recycling Scheme

Documents contain a formal complaint filed on behalf of TK6 Inc. (representative — attorney Tom Dakich) regarding Intercon Solutions, Inc. — a company certified by Orion.

The essence of the complaint: Intercon positioned itself as a responsible electronics recycler, citing Orion's certificate. In reality, the company was selling electronics to downstream vendors instead of recycling — including materials containing hazardous substances, routed to foreign markets (Philippines).

Supporting documents attached to the complaint include:

downstream vendor tables with recycling routes by country;

bills of sale for PCBs and batteries;

correspondence with Local Authorities (Subic Bay Metro Authority, Philippines) as the "final recipient."

The complaint is addressed directly to Paul Burck (President, president@orion4value.com ) with a demand to conduct an unscheduled audit and revoke the certificate.

This is direct evidence that Orion's certification stamp was used to legitimize a potentially illegal hazardous waste scheme — and that the company president personally received notice.

Next Step Electronics, LLC (Houston, Texas)

Our archive contains a similar complaint from CHB Global Ltd. (United Kingdom) regarding Next Step Electronics, LLC (Houston, TX) — another Orion-certified client, allegedly violating electronic waste handling terms.

Part VII. Audit Reports as Competitive Weapons: The NxEdge Case

Each audit report in the Orion system is a documented snapshot of a specific enterprise's vulnerabilities: where controls fail, which processes are broken, which equipment is uncalibrated. This information is by definition confidential. Our archive contains complete NCR reports for hundreds of clients. As an example — NxEdge Inc. (Boise, ID).

NxEdge manufactures engineered coatings (plasma spraying, anodizing, fluoropolymers) and performs precision machining. Orion auditor Henry Towers recorded 9 nonconformities to ISO 9001:2015, including 2 Majors — the highest criticality level, directly threatening certificate retention.

Major Nonconformity №1: Suppliers Without Control Since 2018

The organization does not apply its own established criteria for evaluating external suppliers and does not monitor their performance (violation of ISO 9001:2015, clause 8.4.1).

Specific facts from the report:

For three suppliers — Watlow Industries, West Coast Quartz Corporation, Sunbelt Industries — no documentary evidence of approval under the established procedure (form MS_0107_Vendor Evaluation) was found.

Monitoring of external supplier performance has not been conducted since 2018 — despite the existence of 18 folders with data from that period.

Translating from standards language: the company purchases materials from suppliers whose quality no one checks or monitors.

Major Nonconformity №2: Production Instruments Without Calibration

The organization does not ensure traceability of measurement results critical to product conformity verification (violation of ISO 9001:2015, clause 7.1.5.2.a).

Specific facts — a list of instruments being operated without current calibration:

Instrument Serial / Asset Number Overdue Fluoropolymer coating curing oven s/n 085320212 No calibration records South anodizing tank asset 197171 Calibration expired 12/2018 North anodizing tank asset 4353-001 Calibration expired 12/2018 Mettler Toledo scale (P1 booth) No asset number Calibration expired 12/2021 Profilometer asset 213131308 No calibration records at all Depth gauge asset NX-DMB-1 Calibration expired 03/2021

Six units of measurement equipment in the production process — without current calibration.

Additional Minor Nonconformities

NCR №9 : In the plasma spray area, process control programs TEL_DSI and TEL_DSO were being used, while the work instruction prescribed SDOXW_1 and SDOXW_2 . The operator reported: they had been working this way for "about three years." No authorized changes to the documentation exist.

NCR №6 : Second-shift production workers are unaware of the company's quality policy — including the plasma spray operator and the fluoropolymer coating operator.

Why This Is Critical

These NCR reports are not public documents. They are generated as part of a confidential audit engagement and are intended exclusively for the client and their registrar. Competitors, asset buyers, and counterparties of NxEdge should never have seen that production instruments are uncalibrated and that process control software has diverged from documentation.

NxEdge is just one of hundreds of Orion clients, for each of whom similar detailed documents exist.

Part VIII. BMS Database: Complete Business System Blueprint

60_Grant_Script_BMSAdmins.sql — a complete permission grant script for the BMS (Business Management System) database, used by Orion to manage all audit and certification processes.

The script contains a complete list of the system's stored procedures — over 100 objects describing the platform's internal business logic:

Category Example Stored Procedures Certificates spCertificates_GetAll , spCertificates_GetByCertID , spCerts_UpdateStatus Audits spAudits_GetAll , spAudits_GetByAuditID , spAuditReport_Get Companies / Clients spCompanies_GetAll , spContacts_GetByCompanyID , spSites_GetAll Nonconformities (NCR) spNCRs_GetAll , spNCRs_GetByAuditID , spNCR_Close Auditors spAuditors_GetAll , spAuditorQual_Get , spAuditorAssign Users / Access spUsers_GetAll , spLogin_Validate , spRoles_GetByUserID Finance spInvoices_GetAll , spPayments_GetByClientID , spAR_Summary

This is not just a schema leak — it is a complete blueprint of the company's internal business logic. Anyone who gains access to the ORIDemo database (SQL Server) can view, modify, or delete:

all client certificate data;

audit results and NCR reports;

financial records and invoices;

user accounts and access roles.

Database name from documents: ORIDemo (server: orion SQL Server). The BMSAdmins group privileges provide full EXECUTE on all listed procedures.

Who This Is Addressed To

ANAB (American National Accreditation Board) — Orion Registrar's accrediting body: a company under your accreditation stored confidential data from military clients, government contracts, and audit results in an unprotected archive. At least two certified clients were caught in electronic waste fraud schemes — and the company president was notified of this in writing. Your accreditation is worth exactly as much as the reliability of those to whom you issue it.

The U.S. Department of Defense and Army facilities (GDMS, RRAD, DEVCOM CBC RI, DEVCOM AvMC): your facility lists, headcounts, auditor access requirements, and Mission Assurance officer contacts were stored in a third party's corporate archive without any protection. You bear responsibility for due diligence in selecting registrars who have access to your facilities.

Orion's clients — manufacturing and aerospace companies that submitted their NCR reports, process profiles, and organizational data: you entrusted confidential information about your vulnerabilities to a company that failed to secure it. Your data resides in the same archive as your competitors' data.

Regulators (EPA, FTC, state AGs): the Orion archive contains documented evidence that the company received complaints about clients using their certificate to legitimize illegal hazardous electronic waste handling. What happened to these complaints afterward — is unknown from the documents.

Orion Registrar employees : your names, direct phone numbers, corporate email addresses, and audit data are also in this archive. Details 50GB Size 6,200,000 Revenue 973 Views 1283 Forwards Screenshots Download Nodes 1 Node 1 [Link entfernt] Browse 2 Node 2 [Link entfernt] Browse 3 Node 3 [Link entfernt] Browse