California Gasket and Rubber Corporation Listed by frag Ransomware Group

On February 28, 2025, California Gasket and Rubber Corporation appeared on the leak site of the frag ransomware group. The company, which manufactures aviation and aerospace components from a single 50,000-square-foot facility in California, is claimed to have had internal files exfiltrated after a ransomware incident. frag published samples that include passport scans, HR records, employee contact details, customer information, financial statements, and personnel documents.

Reported Details from Reporting

Public reporting indicates that frag claims successful data extraction from CGR’s corporate systems. The posted samples contain corporate internal documents and agreements, HR files, customer and employee contact lists, financial statements, and personnel records that include passport scans. The exact number of individuals affected remains unknown, but the presence of passport images and personnel files means any current or former employee, as well as certain customers, could have sensitive personal data now circulating on criminal forums.

The manufacturing company, founded in 1942, operates two divisions—Gasket and Rubber—within the same facility. No evidence has surfaced showing that customer or employee data was encrypted and held for ransom before exfiltration; the group moved directly to public leaking after gaining access.

Why This Matters for You and Your Family

When a company you work for, used to work for, or do business with loses control of passport scans and personnel files, the risk does not stop at the corporate perimeter. That information can be combined with other leaks to build a complete profile of your identity, finances, and daily life. For many families, an employer breach is the single event that exposes a parent’s full name, date of birth, address history, and travel documents all at once.

Passport scans are especially dangerous because they are treated as high-value identity documents on underground markets. Once available, they accelerate account takeovers, tax fraud, and impersonation attempts that can affect credit scores, employment background checks, and even international travel for you or your spouse.

The Doxxing and Identity-Chain Risk

Leaked HR and personnel files rarely exist in isolation. Public reporting shows that attackers routinely cross-reference employee names, email addresses, and phone numbers with credential-stuffing databases and social-media scrapes. The result is an identity chain that can expose family members, including children whose gaming accounts often reuse the same passwords or recovery email addresses as a parent’s work-related logins.

A single exposed passport scan can anchor an attacker’s map of your household. From there, gaming usernames, school email addresses, and family photos become easy stepping stones to doxxing campaigns or targeted social-engineering attacks. Credential leaks like this one frequently cascade into account takeovers precisely because families share password habits across work, personal, and children’s gaming platforms.

Frag Ransomware Group’s Known Activity

Public reporting attributes the attack to the frag ransomware group. The group emerged in late 2024 and has focused primarily on small-to-medium manufacturing and industrial firms. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files rather than widespread encryption. Frag then posts samples on its leak site and demands payment to prevent full data release, often setting short deadlines measured in days.

Earlier victims listed in ransomware trackers include other U.S.-based manufacturers whose employee and customer records appeared in similar sample dumps. The group’s public communications emphasize the “value” of passport scans and financial spreadsheets, a pattern consistent with the CGR posting.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity so you can see exactly what frag may have obtained.
• Rotate any password you ever used at California Gasket and Rubber Corporation anywhere it is reused, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and recovery details.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The frag posting of California Gasket and Rubber Corporation’s files is a reminder that employer breaches can suddenly place your most sensitive documents in criminal hands. Taking concrete steps now limits how far those chains can extend. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control of your exposed information before opportunists act on it.