Genesys hack exposes customer data from internal systems
Original title: Genesys Hack Exposes Customer Data From Internal Systems
Names, phones, emails, and account details were likely taken from LMS and CRM systems; cloud platforms were not hit.
Genesys said attackers accessed internal business systems, including a learning management system and a CRM, and likely downloaded relationship data for existing and prospective customers. The company said Genesys Cloud, Genesys Engage, and Genesys Engage Cloud were not compromised. It suspended the LMS and on October 23 said the incident was fully contained, while the scope review continues. Genesys has not named an attacker; ScarlettGroup has claimed the attack on its leak site.
Unconfirmed: ScarlettGroup’s leak-site claim is unconfirmed, and Genesys says its investigation is still ongoing.
- Genesys first announced the intrusion on October 19.
- Exposed fields can include job titles, company details, and customer interaction information.
- Genesys said it never asks for passwords by email or other unsolicited channels.
- The company said more detail will follow as material facts are confirmed.
Impact: Customer and prospect contact and account data likely downloaded
- 1.Watch for communications impersonating Genesys that request passwords or other sensitive data.
- Vendors
- Genesys
- Threat actors
- ScarlettGroup
- Victims
- Genesys
From the original article
1 min read at securityweek.com
The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected. The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.