Genesys Says Hackers Accessed Internal Systems and Customer Information
Summary
Genesys says attackers accessed internal LMS and CRM systems and likely downloaded business and customer-related information. The incident is contained, but the investigation continues; Genesys says its customer platforms and data were unaffected.
Key points
- Genesys reported unauthorized access to internal systems, including its learning management system and CRM environment.
- Information accessed may include names, phone numbers, business email addresses, job titles, company and account details, and customer interaction information; Genesys said it was likely downloaded.
- Genesys said its Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms, and the customer and partner data stored or processed within them, were not compromised.
- The company said it contained the incident on October 23; its investigation into the scope and impact remains ongoing.
- Genesys advised customers to watch for suspicious messages impersonating the company and said it would not request passwords through unsolicited communications.
- Genesys has not named the attacker. ScarlettGroup claimed the attack on its leak site.
Article Details
- Victim Organization
- Genesys
- Incident Type
- Cyberattack involving unauthorized access to internal business systems and exposure of customer and business information
- Data Types Exposed
- Names
- Phone numbers
- Business email addresses
- Job titles
- Company and account information
- Customer interaction information
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Genesys suspended its learning management system as a containment measure. The company announced on October 23 that the incident was fully contained; its investigation into scope and impact remained ongoing.
- Ransom Or Extortion
- ScarlettGroup claimed the attack on its leak site. No ransom demand or extortion activity was reported.
- Claim Status
- confirmed
Threat Actors
Vendors
Products
Genesys CloudThe Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms have not been compromised, and the customer and partner data stored within those systems was not affected, it said.Genesys EngageThe Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms have not been compromised, and the customer and partner data stored within those systems was not affected, it said.Genesys Engage CloudThe Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms have not been compromised, and the customer and partner data stored within those systems was not affected, it said.