● Covered by 1 source · 1 reportMedium impact1 neutral
Genesys Cyberattack Exposes Customer Data from Internal Systems
Key points
- Genesys internal systems were breached on October 19.
- Customer business and account information was potentially accessed and downloaded.
- Genesys Cloud, Engage, and Engage Cloud platforms were not affected.
- The company contained the incident by October 23.
Internal Systems Compromised
On October 19, customer experience company Genesys detected unauthorized access to its internal business systems. The compromised systems included a learning management system (LMS) and a customer relationship management (CRM) environment. Genesys provides customer experience and call center technology to mid-sized and large organizations.
Data Exposure Details
The attackers accessed and likely downloaded information such as names, phone numbers, business email addresses, job titles, company and account information, and other customer interaction data. This information is used by Genesys to manage relationships with existing and prospective customers.
Core Platforms Unaffected
Genesys confirmed that its core customer-facing platforms, including Genesys Cloud, Genesys Engage, and Genesys Engage Cloud, were not compromised. Customer and partner data stored within these primary systems remained unaffected by the breach. The company stated there was no unauthorized access to these platforms or their environments.
Containment and Ongoing Investigation
Genesys implemented containment measures immediately, including suspending the LMS platform. By October 23, the company announced the incident was fully contained. The investigation into the full scope and impact of the breach is ongoing, with Genesys promising further details as facts are confirmed. A group named ScarlettGroup has claimed responsibility for the attack.
Customer Advisory
Genesys advised customers to be vigilant for suspicious communications impersonating the company. It emphasized that it would not request sensitive information like passwords via email or other unsolicited channels.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Genesys, a customer experience technology provider, experienced a cyberattack that resulted in unauthorized access to its internal business systems, including a learning management system and a customer relationship management environment. The incident potentially exposed customer business and account information, but core customer platforms were not compromised.