Angstrom Automotive Group Listed by Pear Ransomware Group

On December 1, 2025, automotive supplier Angstrom Automotive Group appeared on the leak site of the pear ransomware group. The listing indicates that internal files were exfiltrated during a ransomware attack on the tier-1 manufacturer that supplies parts to automotive and industrial original equipment makers. While the exact number of people whose information may have been exposed remains unknown, any current or former employees, vendors, or customers whose personal or employment records were stored in those systems may now be at risk.

What Public Reporting Shows

Public reporting indicates that pear actors gained access to Angstrom’s network, encrypted systems, and then exfiltrated files before publishing a sample on their onion leak site. The data includes internal files that ransomware operators typically harvest in these incidents: employee directories, vendor contracts, customer lists, and documents that often contain names, addresses, dates of birth, Social Security numbers, and financial details. No confirmed total of records or specific victim count has been released by the company or the attackers.

The incident follows the group’s standard pattern of dual extortion: first demanding ransom to prevent encryption, then threatening to publish stolen data if the second ransom is not paid. As of the publication date on the leak site, Angstrom had not issued a public statement confirming the breach or detailing what safeguards were in place.

Why This Matters for You and Your Family

When a supplier like Angstrom is hit, the ripple effects reach ordinary families. If you or a household member ever worked there, applied for a job, or had your information shared through a vendor relationship, your data may now sit in a criminal archive. Names, addresses, Social Security numbers, and contact details are the raw material used for identity theft, tax fraud, and phishing campaigns aimed at you and your family.

Even if you were not directly employed by Angstrom, shared vendor networks mean your information can travel through supply chains. A single exposed record can lead to loan applications taken out in your name, unexpected bills, or fraudulent accounts that damage your credit for years.

The Doxxing and Identity-Chain Risks

Ransomware leaks rarely stop at one company. Stolen internal files frequently contain email addresses, usernames, and passwords that attackers cross-reference against other breaches. This creates an identity chain: a gaming username linked to a parent’s work email, a child’s school account tied to a family address, or a reused password that opens multiple doors. Once criminals map these connections, targeted doxxing, swatting, and account takeovers become straightforward.

Credential leaks like this one cascade into gaming platforms, social media, and email. Children’s accounts are especially vulnerable because parents often reuse credentials across work, personal, and family gaming logins. A breach at an employer can therefore expose an entire household’s digital footprint.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real-world identity, then use the included cleanup to remove what you can.
• Rotate any password you used at Angstrom or any vendor system connected to it, and enable 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure of your information is caught in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same addresses and credentials.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing your own accounts.

The most effective defense is early visibility and rapid action. Start your DoxxScan trial today to gain continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping that links scattered handles to your real identity, hands-on remediation by specialists, and full household coverage that includes your children’s gaming accounts. One breach can start a chain; DoxxScan helps you break it before criminals exploit the next link.