genesis
First seen October 21, 2025Active115 claimed victims
The claims below are reproduced as posted by genesis on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Genesis is an emerging ransomware group first observed in late 2025, targeting small to mid-sized US organizations across healthcare, retail, financial services, legal, and manufacturing using double-extortion tactics, focusing heavily on data exfiltration and public leaking.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Lows Orkney | November 11, 2025 | ransomware_live | — |
| Continental Global Group | November 11, 2025 | ransomware_live | — |
| S.B. Conrad, Inc | November 11, 2025 | ransomware_live | — |
| Heimbrock | October 27, 2025 | ransomware_live | — |
| Kipp & Christian | October 26, 2025 | ransomware_live | — |
| Dependable Plastic | October 13, 2025 | ransomware_live | — |
| River City Eye | September 25, 2025 | ransomware_live | — |
| Ronemus & Vilensky | September 19, 2025 | ransomware_live | — |
| I-Tek Medical Technologies | September 9, 2025 | ransomware_live | — |
| Roth & Scholl | September 9, 2025 | ransomware_live | — |
| Austin Capital Trust | September 4, 2025 | ransomware_live | — |
| Healthy Living Market and Café | August 31, 2025 | ransomware_live | — |
| Claimlinx | August 15, 2025 | ransomware_live | — |
| Advantage CDC | August 20, 2024 | ransomware_live | — |
| Southern Specialty and Supply | May 7, 2024 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).