INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Genesys Customer Data Exposed in Internal System Breach Incident
|
2026-10-26 14:40
CRITICAL
LOW
DATA BREACH
Executive Summary
AI-generated
On October 19, hackers accessed internal business systems of Genesys, a customer experience company headquartered in Menlo Park, California, exposing customer data from internal systems. The attackers gained unauthorized access to a learning management system (LMS) and a customer relationship management (CRM) environment, compromising potentially sensitive information such as names, phone numbers, business email addresses, job titles, and other customer interaction details. Genesys immediately deployed containment measures, suspending the LMS platform, and announced on October 23 that the incident had been fully contained. The company has not named the attacker but a group called ScarlettGroup claimed responsibility for the attack. As of now, approximately 970,000 Medi-Cal members are affected by this data breach, which is part of a larger series of incidents involving Capcom, Quest Diagnostics, and Paradigm Healthcare.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope
healthhealth
Incident Timeline
October 19
Hackers accessed internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) environment on October 19.
Click on any entity below to view its context and source!
organisation
LMS
On October 19, the company announced that hackers had accessed internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) environment.
October 23
Threat actors breached Genesys' internal systems, exposing customer data, before the company deployed containment measures and announced full incident resolution on October 23.
2026/10/26
ScarlettGroup claimed the Genesys hack, exposing customer data from internal systems.
Click on any entity below to view its context and source!
organisation
Capcom Data Breach
Related:
11 Million Impacted by Capcom Data Breach
Related
organisation
Medi-Cal Members Affected
Related:
Hackers Steal 1.8 Million Records From Nikkei
Related:
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
organisation
Paradigm Healthcare Data Breach
Related:
Hackers Steal 1.8 Million Records From Nikkei
Related:
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
data_breach
1.8 Records
Related:
Hackers Steal 1.8 Million Records From Nikkei
Related:
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
data_breach
970,000 Cal Members
Related:
Hackers Steal 1.8 Million Records From Nikkei
Related:
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
organisation
Customer Data From Internal Systems
Genesys Hack Exposes Customer Data From Internal Systems.
organisation
ScarlettGroup
Genesys has not named the attacker, but a recently emerged group called ScarlettGroup has claimed the attack on its leak site.
Tactical Metrics
Metrics
data_breach
1,800,000
Records
Click for context!
Related:
Hackers Steal 1.8 Million Records From Nikkei
Related:
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Metrics
data_breach
970,000
Cal Members
Related:
Hackers Steal 1.8 Million Records From Nikkei
Related:
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Intelligence Sources
SecurityWeek
2026-10-26
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Incident Version History
CURRENT VERSION
Last Updated: 2026-10-27T12:01
Comprehensive Tactical Telemetry
Highly Correlated Entities
6x
organisation
Identified Entity
Capcom Data Breach
entity
2x
timeline
Temporal Reference
October 19
date
Contextual Telemetry
Context Block
5 METRICS
industry
Targeted Sector
Health
sector
tactic
Cyber Operation Type
Data Breach
tactic
general metric
Entities
11,000,000
entities
data breach
Records
1,800,000
records
data breach
Cal Members
970,000
cal members
Click on any entity below to view its context in the main text!
Selective Unpublish
Select the networks you want to remove this post from. The system will try to delete the real post through the API and clean the database so you can publish it again.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies. Read our Privacy Policy.