Skip to content
Leak-site post naming CRI Electric, captured by ThreatCluster

CRI Electric

rhysida

Ransomware leak-site victim intelligence

Posted
Aug 22, 2026
Country
US
Industry
Energy & Utilities

What was taken

CRI Electric CRI Electric is a veteran-owned business based in San Antonio, providing professional electrical services since 1998. They cater to both residential and commercial clients, offering services such as emergency electrical repairs, EV charger installations, and home rewiring. We are pleased to present:Employee's federal account artifacts** (`HR-Confidential\Israel's Forms`): Login.gov personal recovery key (VA identity), TSP (retirement savings), ID.me, DoD DS Logon, PIEE (DoD contract

Leak-site images (3)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image contains multiple documents, including a certificate for a service-disabled veteran-owned business, articles of incorporation, a Social Security statement, and tax forms (W-9).
onion leak page109 KB
The image contains a collage of documents, including an incident investigation report, a claim notification, a W-9 form, and various company-related paperwork.
onion leak page112 KB