2026 Genesys — unauthorised access to internal CRM and learning systems; business contact data likely downloaded (count not published)
Data compromised
Business and account information used to manage relationships with existing and prospective customers: names, phone numbers, work email addresses, job titles, company and account details, and customer interaction records. Genesys says the attackers likely downloaded information; the scope investigation is ongoing. Genesys Cloud, Genesys Engage and Genesys Engage Cloud were not affected.
Technical writeup
Company-confirmed unauthorised access to internal business systems (LMS and CRM environment). Exfiltration is likely per Genesys but not fully confirmed. ScarlettGroup, a recently emerged group, claimed the attack on its leak site; Genesys has not named the attacker or confirmed the claim. No record count published; recordsAffected 0.
Root cause
Not disclosed. Genesys said an attacker accessed internal business systems, including a learning management system and a CRM environment. It announced the incident on October 19 and said on October 23 that it was fully contained. The start date has not been disclosed.