BreachCensus

genesis

First seen October 21, 2025Active122 claimed victims

The claims below are reproduced as posted by genesis on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

Genesis is an emerging ransomware group first observed in late 2025, targeting small to mid-sized US organizations across healthcare, retail, financial services, legal, and manufacturing using double-extortion tactics, focusing heavily on data exfiltration and public leaking.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
Dill Dill Carr Stonbraker & Hutchings.December 5, 2025ransomware_live—
Curtis Investment Group, Inc.December 1, 2025ransomware_live—
PJSI Consultants SDN BHD.December 1, 2025ransomware_live—
Data Enterprises of the Northwest.December 1, 2025ransomware_live—
Petro Environmental.December 1, 2025ransomware_live—
Rose DisplaysDecember 1, 2025ransomware_live—
Manusos General Contracting, IncNovember 11, 2025ransomware_live—
Lows OrkneyNovember 11, 2025ransomware_live—
Continental Global GroupNovember 11, 2025ransomware_live—
S.B. Conrad, IncNovember 11, 2025ransomware_live—
HeimbrockOctober 27, 2025ransomware_live—
Kipp & ChristianOctober 26, 2025ransomware_live—
Dependable PlasticOctober 13, 2025ransomware_live—
River City EyeSeptember 25, 2025ransomware_live—
Ronemus & VilenskySeptember 19, 2025ransomware_live—
I-Tek Medical TechnologiesSeptember 9, 2025ransomware_live—
Roth & SchollSeptember 9, 2025ransomware_live—
Austin Capital TrustSeptember 4, 2025ransomware_live—
Healthy Living Market and CaféAugust 31, 2025ransomware_live—
ClaimlinxAugust 15, 2025ransomware_live—
Advantage CDCAugust 20, 2024ransomware_live—
Southern Specialty and SupplyMay 7, 2024ransomware_live—
← NewerPage 2 of 2

Claim data from ransomware.live and RansomLook (CC BY 4.0).