Source Photonics Listed by Frag Ransomware Group

On April 4, 2025, optical networking manufacturer Source Photonics appeared on the leak site of the frag ransomware group. The attackers claim to have stolen internal files including financial statements, partnership agreements, licenses, contracts, employee passports, passport scans, and corporate non-disclosure agreements. They gave the company one week to negotiate before the material would be released publicly.

What Public Reporting Shows

Public reporting indicates that frag posted a dedicated page for Source Photonics on its leak site, listing the types of documents extracted during a ransomware intrusion. The exposed data centers on sensitive corporate records and, crucially for individuals, employee passports and passport scans. No confirmed total number of affected employees has been published, and it remains unclear exactly when the initial breach occurred. The group’s post explicitly states that failure to reach an agreement within seven days will result in the files being distributed freely online.

Why This Matters for You and Your Family

When a company’s internal files containing employee passports and personal documents are stolen, the risk extends far beyond the workplace. If you or anyone in your household works at an affected organization, your name, passport details, and potentially home address could now sit in a ransomware data dump. That information can be combined with other leaks to build a complete profile that criminals use for identity theft, loan fraud, or targeted scams against you and your family. Children’s records linked through a parent’s employment file can also become part of the chain.

The Doxxing and Identity-Chain Risks

Passport scans and personal documents are high-value items for doxxers. Once released, these records often surface on multiple underground forums within days. Criminals then cross-reference the data with gaming usernames, email addresses, or phone numbers tied to the same household. The result is an identity chain that can lead to account takeovers on social media, email, and especially gaming platforms. A single leaked corporate credential or personal document can cascade into full doxxing of both adults and children who share the same address or family accounts.

Frag Group’s Known Track Record

Public reporting attributes the attack to the frag ransomware group. The group emerged in late 2024 and has targeted organizations across several sectors by deploying ransomware, exfiltrating data, and then pressuring victims with public leaks. Their typical playbook involves initial access through common vectors such as phishing or unpatched software, followed by claimed exfiltration of sensitive files and a short extortion window—usually one week—before dumping the material. Notable prior victims have included mid-sized technology and manufacturing firms, though details remain limited in open sources.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any employee records that may have surfaced.
• Rotate the password used at Source Photonics anywhere it is reused, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to credential-stuffing attacks from this claimed breach.
• Let remediation specialists handle takedown requests for any exposed personal documents or passport information found circulating online.

The speed with which ransomware groups move stolen personal data means ordinary families must act quickly and systematically. Starting with a clear picture of what has already leaked about you is the most practical defense. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage also protects children’s gaming accounts that frequently become targets when corporate leaks like this one occur. Taking these steps now limits how far the frag leak can reach into your life.