Data Breaches

Genesys Hack Exposes Customer Data From Internal Systems

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

Data breach

Customer experience company Genesys says it has contained a cyberattack that involved unauthorized access to data.

Headquartered in Menlo Park, California, Genesys is a provider of customer experience and call center technology for mid-sized and large organizations.

On October 19, the company announced that hackers had accessed internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) environment.

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms have not been compromised, and the customer and partner data stored within those systems was not affected, it said.

As part of the incident, the attackers accessed and likely downloaded information such as “business and account information used to manage relationships with existing and prospective customers.”

The potentially compromised data includes names, phone numbers, business email addresses, job titles, company and account information, and other customer interaction information.

Advertisement. Scroll to continue reading.

Genesys immediately deployed containment measures, which included suspending the LMS platform, and on October 23 announced that the incident has been fully contained.

“We have confirmed that the Genesys Cloud, Genesys Engage and Genesys Engage Cloud platforms were not compromised, and there was no unauthorized access to the platforms, customer and partner environments, or customer and partner data stored or processed within these platforms,” the company said.

On Friday, Genesys said its investigation into the scope and impact of the incident remains ongoing, but promised additional details as it reviews the information accessed and as material facts are confirmed.

The company cautioned customers to watch for suspicious communications impersonating Genesys, stressing that it would never ask customers for sensitive information such as passwords via email or other unsolicited channels.

Genesys has not named the attacker, but a recently emerged group called ScarlettGroup has claimed the attack on its leak site. 

Related: 11 Million Impacted by Capcom Data Breach

Related: Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’

Related: Hackers Steal 1.8 Million Records From Nikkei

Related: 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

Related Content

Data Breaches

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

Data Breaches

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

Data Breaches

The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.

Data Breaches

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.

Data Breaches

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.

Data Breaches

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

Data Breaches

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.

Data Breaches

Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version