Skip to content
Leak-site post naming Groupe CRIT SA, captured by ThreatCluster

Groupe CRIT SA

titan

Ransomware leak-site victim intelligence

Files
5
Posted
May 18, 2026
Countdown
sous 72 heures
Country
FR
Industry
Business Services

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

The TITAN group claims Groupe CRIT SA had 5 files taken, all encrypted, with critical data downloaded and analyzed, and a 72-hour countdown shown on the leak page. They state the stolen data includes personal, sensitive, health data, payroll information and bank details. Sample filenames published include CAISSE CRIT RH.xlsx and ETAP.pdf, and the leak page identifies Groupe CRIT SA (domain groupe-crit.com) and a named individual, Claude Guedj.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

People named
Claude GUEDJ

What was taken

All files encrypted, critical data downloaded & analyzed ~ Groupe CRIT SA · TITAN

Data categories
Données personnellesDonnées sensiblesDonnées de santéInformations salarialesRelevés bancaires (RIB)
File types seen
pdf × 1txt × 2xlsx × 1
Sample files (4)
TITAN BLOG AI ANALYZES FRENCH.txt
SearchResults.txt
CAISSE CRIT RH.xlsx
ETAP.pdf

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo of "Groupe crit" featuring the word "Groupe" in gray and "crit" in red.
onion leak page301 KB
Document in French announcing the establishment of a subsidiary in Tunisia by Groupe Crit, detailing its focus on temporary work, recruitment, and training.
onion leak page435 KB
Document titled "Certificat de retenue d'impôts" with sections for employer information, beneficiary details, and tax information, including amounts and identification numbers.
onion leak page691 KB
Screenshot of a payroll document with sections for employee details, qualifications, and payment information, including various monetary amounts.
onion leak page465 KB
Screenshot of a PDF document listing invoices with columns for date, reference, and amounts.
onion leak page550 KB
Document titled "Retail Sales Consultant Activities Agreement" with sections indicating parties involved and an effective date of May 1, 2023.
onion leak page475 KB
Scan of a Chinese passport featuring personal details and a photograph of the passport holder.
onion leak page666 KB
Scan of a Chinese passport featuring personal details, including a photograph, name, and passport information.
onion leak page237 KB
Scan of a Chinese passport containing personal information, including a photograph, name, date of birth, and passport details.
onion leak page706 KB
Scan of a Chinese passport featuring a photograph, personal details, and official markings.
onion leak page582 KB