What happened

The Rhysida ransomware group listed CRI Electric as a victim on its criminal leak site. Secondary reporting described data theft and encryption, but did not publish victim-supplied confirmation, forensic evidence, affected-data detail or a verified incident date. CRI Electric is an Anaheim-based commercial and industrial electrical contractor rather than a grid operator. No evidence reviewed linked the claim to a power plant, utility control system or customer-site outage, so this is an unconfirmed corporate IT claim represented by a headquarters marker.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.