genesis
ransomware group · aka unknown · unknown · active since 2026-06-18 (first post on the group's leak site as tracked by this dashboard; any earlier activity unknown)
Victims · 7d
2▲2 vs prev. week
Victims · 30d
4active targets
Victims · 90d
28
All-time (tracked)
115since 2025-10-21
Last post
09-15 00:40UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Genesis is a ransomware/data-extortion operation first tracked by this dashboard on 2026-06-18, when its leak site posted its initial victims; it accumulated 26 listings by 2026-08-25. The group follows a leak-site-based extortion model, naming victims across healthcare, construction, real estate, professional services, and IT, with listings to date skewing toward small and mid-sized, mostly US-based organizations. Aliases, country of origin, and any affiliate lineage are unknown in widely available public reporting. Posting cadence slowed in the most recent tracked period (0 victims in the last 7 days, 3 in the last 30), though the group remained active as of its last post on 2026-08-25. No vendor, law-enforcement, or blockchain-analytics sources have published revenue figures or CVE attributions for this group as of the profile date.
Tactics & tooling
- Operates a dedicated leak site naming victims, consistent with a double-extortion model
- Claims victims across multiple verticals in a single operation, with healthcare providers among the most frequently named
- Victim profile to date skews toward small and mid-sized organizations, including regional US healthcare and construction firms
- Most named victims are US-based; at least one European target (Boyum IT Solutions, Denmark) listed
- Initial access techniques, malware/encryptor details, and infrastructure: unknown (no widely published technical reporting)
- Ransom demands and negotiation behavior: unknown
Targeted sectors
HealthcareConstructionReal estateAccounting/Professional servicesIT/Software
Notable public victims
Interim HealthCare, Hospitality Health ER (Longview), Consolidated Medical Practices of Memphis, Boyum IT Solutions, Westlake Realty Group, Inc., C.A. Walker Construction, Building Envelope Systems, Williams Accounting Professional, JJP Slip Forming Inc.
Estimated earnings
No public figure.
Leak-site victims115 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Bernath & Rosenberg | · 20h ago | A full service CPA firm |
| Dorfman Abrams Music, P.C | · 20h ago | A full service CPA firm |
| S******* | · 21d ago | An International Public Company |
| Hospitality Health ER (Longview) | · 22d ago | A healthcare organization |
| **E*** | · Aug 12, 2026 | A healthcare organization |
| Consolidated Medical Practices of Memphis | · Aug 11, 2026 | A healthcare organization |
| Interim HealthCare | · Aug 11, 2026 | A healthcare organization dealing with elderly care services |
| **** | · Jul 31, 2026 | A healthcare organization |
| Boyum IT Solutions (HOT!) | · Jul 31, 2026 | A provider of IT services |
| C.A. Walker Construction | · Jul 31, 2026 | A construction management company |
| Williams Accounting Professional | · Jul 27, 2026 | A full service CPA firm |
| JJP Slip Forming Inc. | · Jul 27, 2026 | A company that operates in the Restaurants industry |
| Building Envelope Systems | · Jul 27, 2026 | A reputable construction company based in Plainville, MA |
| Westlake Realty Group, Inc. | · Jul 27, 2026 | A full-service real estate development company |
| Servonix Technologies | · Jul 27, 2026 | A provider of IT services |
| Infinity Pipeline,Inc. | · Jul 27, 2026 | A family owned, local construction company. |
| Apex Agro, LLC | · Jul 5, 2026 | A Chemical Production Company |
| Mirage Endoscopy Center | · Jul 5, 2026 | A healthcare organization |
| Bri-Tech, Inc | · Jul 5, 2026 | A technology design and integration firm |
| SBI Software | · Jul 5, 2026 | An Enterprise Resource Planning Software Provider |
| DICON | · Jul 5, 2026 | A general contracting construction firm |
| Westgate | · Jul 5, 2026 | A construction management company |
| Dunagan Associates | · Jul 5, 2026 | Provides services in residential real estate and insurance |
| Synergy Interactive | · Jul 5, 2026 | A provider of staffing services |
| East Texas Family Medicine | · Jul 5, 2026 | A healthcare organization |
| Brooklyn Defender Services | · Jun 30, 2026 | A legal organization dedicated to safeguard the rights of its clients |
| United Personnel (a division of Masis Staffing Solutions) | · Jun 18, 2026 | A provider of staffing services |
| The Associated Builders and Contractors of Indiana/Kentucky | · Jun 18, 2026 | A trade association |
| *B* | · Jun 6, 2026 | A trade association |
| Family Medical Associates of Raleigh | · Jun 5, 2026 | A healthcare organization |
| Cavalier Flooring Systems Inc. | · May 30, 2026 | A flooring and tile contractor |
| Wentworth | · May 30, 2026 | the DC Metro area's premier design-build firm |
| Green Resource | · May 30, 2026 | A leading distributor of professional fertilizers, chemicals, and seeds for local and lawn grasses |
| Cedar Street Capital (A part of a Cynvestors Limited Partnership) | · May 30, 2026 | A private investment entity associated with Cynthia Stiehl |
| A Roettgers | · May 30, 2026 | Fuel distributor and gas station operator |
| ******** & Co | · May 29, 2026 | A provider of financial services |
| *M** | · May 29, 2026 | A healthcare organization |
| Peña & Bromberg | · May 28, 2026 | A legal firm dedicated to safeguard the rights of its clients |
| **** & ******** | · May 23, 2026 | A legal firm dedicated to safeguard the rights of its clients |
| Pequod Associates | · May 12, 2026 | A global leader in the provision of Marine Claims TPA and Recovery services. |
| Casino Gaming Commission | · May 12, 2026 | Official Casino Gaming Commission of Jamaica. |
| Fargo Moorhead West Fargo Chamber | · May 12, 2026 | A business services provider. |
| Integrated Process Engineers & Constructors. | · May 12, 2026 | Specializes in custom modular process systems, offering a wide range of products including bioreactors, filtration systems, and utility stations. |
| Ben F. Barcus and associates pllc | · May 12, 2026 | A law firm from Tacoma, WA. |
| Palo | · May 12, 2026 | Architecture and Planning. |
| HostBooks (HOT!) | · May 12, 2026 | An accounting software provider. |
| CarePoint Health | · May 9, 2026 | CarePoint Health will provide all patients of the company's affiliated physicians who would benefit from team based care. |
| The American Board of Preventive Medicine | · May 9, 2026 | A healthcare certification organization. |
| Prescott & Holden | · May 9, 2026 | A legal firm dedicated to safeguard the rights of its clients |
| Van Atta Engineering | · May 9, 2026 | A civil engineering and surveying firm located at 570 Congress Park Dr, Dayton, Ohio. |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .