---
title: Genesys confirms intruders accessed and likely downloaded customer contact data from its learning platform and CRM; Genesys Cloud and Engage not affected | ctxsec
url: https://ctxsec.com/items/genesys-internal-lms-crm-breach-oct-2026
description: ""
status: "confirmed by the vendor (Genesys, Oct 19 and Oct 23). Attacker not named by Genesys; a leak-site claim is unverified, last updated 2026-10-23"
published: 2026-10-19
updated: 2026-10-23
---

> 

[← Cybersecurity News](/news) · [markdown](/items/genesys-internal-lms-crm-breach-oct-2026.md)

confirmed by the vendor (Genesys, Oct 19 and Oct 23). Attacker not named by Genesys; a leak-site claim is unverified

2026-10-19 · updated

2026-10-23

### Genesys confirms intruders accessed and likely downloaded customer contact data from its learning platform and CRM; Genesys Cloud and Engage not affected

Contact-center vendor Genesys says it learned of an intrusion on **Oct 16**. The attacker reached internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) platform, and Genesys confirms information there was accessed and/or downloaded. That covers names, business emails, phone numbers, job titles, company and account details, and other customer interaction information.

Genesys says the Genesys Cloud, Genesys Engage and Genesys Engage Cloud platforms, customer and partner environments, and data processed in them (including call recordings and analytics) were **not** accessed. On Oct 23 it said the intrusion is fully contained and the LMS has been suspended. Scope review continues. SecurityWeek reports that the ScarlettGroup gang claimed the attack on its leak site. Genesys hasn't named an attacker.

**For Genesys customers:** expect targeted phishing that uses real account and contact details. Genesys says it will never ask for passwords by email or unsolicited channels. Warn the people listed as your Genesys contacts and admins.

Sources: [Genesys: Security update, incident affecting certain internal business systems (Oct 19, updated Oct 23)](https://www.genesys.com/blog/post/security-update-incident-affecting-certain-genesys-internal-business-systems) · [SecurityWeek: Genesys hack exposes customer data from internal systems (Oct 26)](https://www.securityweek.com/genesys-hack-exposes-customer-data-from-internal-systems/)