Karnes Electric Cooperative Hit by Qilin Ransomware Attack, Exposing Sensitive Data Karnes Electric Cooperative, a not-for-profit electric utility serving 12 counties in South Texas and the Coastal Bend, suffered a ransomware attack in October 2025. The Qilin ransomware group claimed responsibility on October 14, 2025, alleging they exfiltrated 337 GB of internal data, including financial documents and personal information of employees and customers. The stolen data was later posted on the dark web via the TOR network. The breach was officially reported to the Texas Attorney General’s office on February 9, 2026, with Karnes Electric notifying affected individuals by mail. While 598 Texas residents were confirmed impacted, the total number of affected individuals remains undisclosed. Exposed data includes: - Names, addresses, and Social Security numbers - Driver’s license and government-issued ID numbers - Medical and health insurance information - Financial details, including account and payment card numbers The law firm Shamis & Gentile P.A. is investigating potential class action claims for those affected, citing risks of identity theft and financial harm. The incident highlights the growing threat of ransomware targeting critical infrastructure providers.