Ransomware Intelligence / Groups / genesis

Ransomware group

genesis

Financial interests only. <br/> We do not provide or work with affiliate programs, no collaborations either. <br/> The requested payment must be made within a specified time frame, otherwise the price may be increased, we will begin to publish the data we have about your company and notify the company's customers and suppliers. <br/> Charitable, non-profit, and medical institutions are only hacked if they have reputation gaps known from open sources or discovered in company data. However, this is only data extraction; live support systems are not affected. <br/> Data is always destroyed after payment; we do not attack the same company twice. <br/> Interesting fact: once, the total amount of claims against a breached company exceeded its entire capitalization. We know how to create trouble, though it is in our mutual interest to avoid it. <br/> To make the data leak more valuable, the most important information is published in a separate folder for each company called “parsed” and is also published on darkweb forums.

• 0claims, 7 days
• 4claims, 30 days
• 20claims, 90 days
• 2026-07-27first seen
• 2026-10-01last seen

These are claims posted by the group on its leak site, counted when we first see them. They are not confirmed incidents, and we never name a victim.