About
Written by ThreatCluster from 2 storiesGenesis is a ransomware group that operates by gaining unauthorized access to networks to exfiltrate data and using extortion to pressure victims. ThreatCluster records around 100 victims attributed to Genesis, with the most affected sectors including Healthcare, Manufacturing, Business Services, Technology, and Financial Services, and the United States, United Kingdom, Canada, Denmark, and Malaysia as the most affected countries. A pattern across the reporting is a focus on healthcare targets with large-scale data exfiltration, illustrated by the Horizon Family Medical Group incident reported in June 2026, where 7 TB of sensitive medical data was reportedly stolen.
Sectors: Healthcare, Business Services, Manufacturing · Countries: US, GB, CA
Recent victims
View all →| Victim | Sector | Country | Data | Posted | Status |
|---|---|---|---|---|---|
| VPNE | managing people, transportation and other services for its clients in various industries | — | Oct 1, 2026 | published | |
| TLC Perinatal | healthcare services | US | 500 Gb of accessible data. | Oct 1, 2026 | published |
| Vera Science | Biotechnology | US | 200 Gb | Oct 1, 2026 | published |
| Owens Distributors | industrial machinery & equipment services | US | 200 Gb of accessible data. | Oct 1, 2026 | published |
| Bernath & Rosenberg | CPA firm | US | 4.5 TB | Sep 14, 2026 | published |
| Dorfman Abrams Music, P.C | CPA firm | US | 1 Tb of accessible data | Sep 14, 2026 | published |
| S******* | Public Company | — | Aug 24, 2026 | published | |
| Hospitality Health ER (Longview) | healthcare | US | 3 TB | Aug 23, 2026 | published |
| **E*** | Not Found | US | >3 TB of data available | Aug 11, 2026 | |
| Interim HealthCare | healthcare (elderly care services) | US | — | Aug 11, 2026 | published |
| Consolidated Medical Practices of Memphis | healthcare | US | — | Aug 10, 2026 | published |
| Interim HealthCare (Oklahoma and Tulsa) | Healthcare | US | — | Aug 10, 2026 | |
| **** | Not Found | US | Over 1 Tb of available data. | Jul 31, 2026 | |
| Boyum IT Solutions (HOT!) | IT services | DK | 15 Tb of accessible data | Jul 30, 2026 | published |
| C.A. Walker Construction | construction management | US | 1.4 Tb | Jul 30, 2026 | published |
| Williams Accounting Professional | CPA firm | CA | 700 Gb | Jul 26, 2026 | published |
| JJP Slip Forming Inc. | Restaurants | US | 1.3 Tb | Jul 26, 2026 | published |
| Building Envelope Systems | construction | United States | 300 Gb | Jul 26, 2026 | published |
| Westlake Realty Group, Inc. | real estate development | US | 300 Gb of Data Available. | Jul 26, 2026 | published |
| Servonix Technologies | IT services | US | — | Jul 26, 2026 | published |
| Infinity Pipeline,Inc. | construction | US | 588 Gb | Jul 26, 2026 | published |
| Apex Agro, LLC | Agriculture and Food Production | US | 250 GB of accessible data. | Jul 5, 2026 | |
| Mirage Endoscopy Center | Healthcare | US | — | Jul 5, 2026 | published |
| Bri-Tech, Inc | Automation | United States | 588 GB | Jul 5, 2026 | published |
| SBI Software | Technology | US | — | Jul 5, 2026 | published |
Found by ThreatCluster
27 total from our crawlListed on this group's leak site and not present in the aggregated feeds.