CUTSIGNcutting for sign — daily OSINT threat read

Search — “ScarlettGroup”

1 story · 0 IoCs

Stories

P3

Genesys internal LMS and CRM systems accessed in intrusion; customer business contacts exposed, no platform compromise confirmed

brief 2026-10-27quick readMediumactor: ScarlettGroup

Genesys disclosed on October 19 that hackers accessed internal business systems, including a learning management system and a CRM environment, and that attackers likely downloaded business contact information such as names, phone numbers, business emails, job titles, and account data. The company says Genesys Cloud, Genesys Engage, and Genesys Engage Cloud were not compromised and that the incident was fully contained by October 23, while its investigation remains ongoing. ScarlettGroup, a recently emerged group, has claimed the attack on its leak site, and Genesys warned customers to watch for impersonation and phishing.