Customer experience organization Genesys has informed that it has experienced an unauthorized access to data. A new group named ScarlettGroup has claimed responsibility for the cyberattack on its leak website. However, Genesys has not identified the hacker.

The company’s headquarters is in Menlo Park, California. The former supplies customer experience as well as call center technology for mid-sized and large companies.

On October 19, 2026 Genesys stated that cyberattackers had accessed internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) environment. As per the company, the Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms had not been compromised, and the customer and partner data stored within those systems was not affected.

The potentially leaked data includes names, phone numbers, business email addresses, job titles, company and account details, as well as other customer interaction information.

Genesys took prompt security measures including suspension of the LMS platform. On October 23, 2026 the company stated that the cyberincident had been completely contained.

Note that the leaked data could be misused for impersonating Genesys. The company has warned users to be wary of emails, calls or chats claiming to be from Genesys.

SOURCES:-

https://www.securityweek.com/genesys-hack-exposes-customer-data-from-internal-systems/

https://www.rescana.com/post/genesys-internal-systems-lms-crm-breach-october-2026

https://radar.offseq.com/threat/genesys-hack-exposes-customer-data-from-internal-systems-228836d8f9bbc857

https://mallory.ai/stories/01a178cf-8c0a-7ee9-bade-5b9e81b0efd2

https://www.damovo.com/newsroom/security-update-regarding-genesys/