Customer experience company Genesys says it has contained a cyberattack that involved unauthorized access to data.
Headquartered in Menlo Park, California, Genesys is a provider of customer experience and call center technology for mid-sized and large organizations.
On October 19, the company announced that hackers had accessed internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) environment.
The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms have not been compromised, and the customer and partner data stored within those systems was not affected, it said.
As part of the incident, the attackers accessed and likely downloaded information such as “business and account information used to manage relationships with existing and prospective customers.”
The potentially compromised data includes names, phone numbers, business email addresses, job titles, company and account information, and other customer interaction information.
Genesys immediately deployed containment measures, which included suspending the LMS platform, and on October 23 announced that the incident has been fully contained.
“We have confirmed that the Genesys Cloud, Genesys Engage and Genesys Engage Cloud platforms were not compromised, and there was no unauthorized access to the platforms, customer and partner environments, or customer and partner data stored or processed within these platforms,” the company said.
On Friday, Genesys said its investigation into the scope and impact of the incident remains ongoing, but promised additional details as it reviews the information accessed and as material facts are confirmed.
The company cautioned customers to watch for suspicious communications impersonating Genesys, stressing that it would never ask customers for sensitive information such as passwords
Genesys has not named the attacker, but a recently emerged group called ScarlettGroup has claimed the attack on its leak site.
Related Content
Data Breaches
11 Million Impacted by Capcom Data Breach
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.
Data Breaches
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.
Data Breaches
Hackers Steal 1.8 Million Records From Nikkei
The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.
Data Breaches
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.
Data Breaches
One Compromised Login Exposed Millions of California Students’ Records
Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.
Data Breaches
UK Legal Aid Agency Hack Scope Widens After Forensic Review
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.
Data Breaches
CenterPoint Energy Data Breach Impacts 1 Million Texans
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.
Data Breaches
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
