Ransomware group titan hits CRIT Tunisie
CRIT Tunisie — a business services target operating in TN has been listed by the titan ransomware group on 2026-04-14. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | CRIT Tunisie |
|---|---|
| Threat Group | titan |
| Summary | [AI generated] CRIT Tunisie is a subsidiary of the French group CRIT, operating in the human resources and temporary staffing industry. Based in Tunisia, the company provides workforce solutions including temporary employment, permanent recruitment, and outsourcing services. It serves various sectors such as industry, logistics, and services, helping businesses manage their staffing needs efficiently while connecting job seekers with employment opportunities across the country. |
| Date of Breach | 2026-04-14 |
| Discovery Date | 2026-05-18 |
| Region | TN |
| Target Domain | www.crit-tunisie.net |
| Business Sector | Business Services |
| Severity | MEDIUM |
Claim by titan
[AI generated] CRIT Tunisie is a subsidiary of the French group CRIT, operating in the human resources and temporary staffing industry. Based in Tunisia, the company provides workforce solutions including temporary employment, permanent recruitment, and outsourcing services. It serves various sectors such as industry, logistics, and services, helping businesses manage their staffing needs efficiently while connecting job seekers with employment opportunities across the country.
Posted by the titan threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
www.crit-tunisie.net
Leak post (onion / Tor)
https://titanblog.org/post/all-files-encrypted-critical-data-downloaded-analyzed-k7l2v0ck48
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

