Asl matn EN tilida, manba saytidan olindi. Manba ↗

Uncategorized

Genesys Hack Exposes Customer Data From Internal Systems

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

By

Ionut Arghire

| October 26, 2026 (10:40 AM ET)

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Customer experience company Genesys says it has contained a cyberattack that involved unauthorized access to data.

Headquartered in Menlo Park, California, Genesys is a provider of customer experience and call center technology for mid-sized and large organizations.

On October 19, the company announced that hackers had accessed internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) environment.

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms have not been compromised, and the customer and partner data stored within those systems was not affected, it said.

As part of the incident, the attackers accessed and likely downloaded information such as “business and account information used to manage relationships with existing and prospective customers.”

The potentially compromised data includes names, phone numbers, business email addresses, job titles, company and account information, and other customer interaction information.

Advertisement. Scroll to continue reading.

Genesys immediately deployed containment measures, which included suspending the LMS platform, and on October 23 announced that the incident has been fully contained.

“We have confirmed that the Genesys Cloud, Genesys Engage and Genesys Engage Cloud platforms were not compromised, and there was no unauthorized access to the platforms, customer and partner environments, or customer and partner data stored or processed within these platforms,” the company said.

On Friday, Genesys said its investigation into the scope and impact of the incident remains ongoing, but promised additional details as it reviews the information accessed and as material facts are confirmed.

The company cautioned customers to watch for suspicious communications impersonating Genesys, stressing that it would never ask customers for sensitive information such as passwords via email or other unsolicited channels.

Genesys has not named the attacker, but a recently emerged group called ScarlettGroup has claimed the attack on its leak site.

Related:11 Million Impacted by Capcom Data Breach

Related:Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’

Related:Hackers Steal 1.8 Million Records From Nikkei

Related:970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

Written ByIonut Arghire

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

More from Ionut Arghire

  • China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
  • Attackers Exploit Third Arista VCO Zero-Day in Four Months
  • 11 Million Impacted by Capcom Data Breach
  • LiteLLM Compromised in Fresh Supply Chain Attack
  • Signal Vulnerability Lets Malicious Callers Block Hang-Ups
  • Splunk, SolarWinds Release Fresh Security Updates
  • Cisco Patches 34 Vulnerabilities Across Multiple Products
  • PHP2Shell Exploitation Started Days Before Patches

Latest News

  • Stolen AI Reasoning Could Help China Build Cheaper Rivals
  • PHP2Shell Exploitation Moves From Probes to Working Shells
  • 953 Online Stores Infected in Long-Lasting Malware Campaign
  • Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
  • Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
  • Mythos 5 Ignored Real-World Harm in July Attack
  • Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
  • In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

Trending

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

SecurityWeek Analysis: 178 Cybersecurity M&A Deals Announced in First Half of 2024

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave

Atlassian Patches 75 Flaws in Data Center and Server Products

Attackers Exploit Third Arista VCO Zero-Day in Four Months

11 Million Impacted by Capcom Data Breach

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

Webinar: The AI Access Risk Already in Your Google Workspace

October 19, 2026

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.

Register

Virtual Event: CISO Forum 2026 Summit

November 10 & 11, 2026

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Cequence Security has appointed Russ Schafer as CMO.

Mona Harrington has been named Assistant Director for Cyber Integration at DHS.

iCOUNTER has appointed Mark H. FitzPatrick as CFO.

More People On The Move

Expert Insights

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)

Context Is King in the Fight Against Modern Cyberattacks

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)

AI Has Changed Attack Speed, Not Security Fundamentals

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)

Four Cyber Threats Harboring Big Plans for the Future

  • AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)

Begin at the End: How to Enable Agentic Remediation

Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.(Nadir Izrael)