Skip to content
Genesys Confirms Breach of Internal CRM and LMS

Genesys Confirms Breach of Internal CRM and LMS

First seen 22 Oct 2026, 19:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 19:44 UTC
  • •Genesys confirmed unauthorized access to its CRM and LMS on October 16, 2026.
  • •No customer data from Genesys Cloud or Engage Cloud was compromised.
  • •Customers should be wary of phishing attempts following the breach.

On October 16, 2026, Genesys confirmed a cybersecurity incident involving unauthorized access to its internal business systems, including a customer relationship management (CRM) platform and a learning management system (LMS). The breach was reported after an extortion claim by a data-extortion group. The accessed data includes names, business email addresses, phone numbers, job titles, and company details of existing and prospective customers. However, Genesys stated that its cloud platforms, including Genesys Cloud and Engage Cloud, were not compromised, and the unauthorized activity has been contained. The investigation is ongoing, and customers are advised to be cautious of unexpected requests for credentials or payment changes. The extortion group's claims of having stolen contracts and password hashes have not been independently verified.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-16
Genesys detects unauthorized access
Genesys became aware of a cybersecurity incident involving unauthorized access to its CRM and LMS systems.
Genesys
2026-10-21
Public confirmation of breach
Genesys publicly confirmed the breach and details of the unauthorized access, following an extortion claim.
X

More articles in this cluster (2)

Following this threat?

Track Genesys in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3

Common questions

What specific data was accessed?
The accessed data includes names, business email addresses, phone numbers, job titles, and company details of existing and prospective customers.
Is customer data from cloud platforms affected?
No, Genesys confirmed that customer data on Genesys Cloud and Engage Cloud platforms was not compromised.
What should customers do now?
Customers should be cautious of unexpected requests for credentials or payment changes and verify them through known channels.