Group profile25 claimed in last 30d70 total tracked

genesis

Forward this

Genesis has posted 25 victims in the past 30 days against an all-time claimed total of 70, sustaining a fast, high-volume leak cadence since its first tracker sighting in May 2026. The group's recent activity clusters heavily on US healthcare providers, including multiple postings against Interim HealthCare franchises and a Memphis-based medical practices network, alongside repeated hits on technology, manufacturing, and business services targets; claims outside the US (Denmark, Canada) are marginal by comparison. Genesis is described in its own materials as a double-extortion operation focused on data exfiltration and public shaming of victims, a claim consistent with the pattern of repeat postings against the same named organizations across consecutive days, suggesting pressure campaigns tied to leak-site deadlines rather than one-off disclosures. No MITRE ATT&CK technique set has been catalogued for this group to date. The concentration on small to mid-sized US healthcare and services entities, combined with the volume seen in the last 30 days, marks Genesis as one of the more active newly emerged

Brief by The Nexus · Aug 15 · 15:01 UTC

Genesis is an emerging ransomware group first observed in late 2025, targeting small to mid-sized US organizations across healthcare, retail, financial services, legal, and manufacturing using double-extortion tactics, focusing heavily on data exfiltration and public leaking.

First seen: May 21 · 00:00 UTCLast seen: Aug 12 · 00:00 UTCTracked since: 2025-10-21

Sectors hit

Unspecified11
Healthcare6
Technology4
Manufacturing4
Business Services4
Retail & E-Commerce1
Professional Services1
Financial Services1

Countries hit

United States33
Denmark1
Canada1

Recent claimed victims

Aug 12 · 05:44 UTC

**E***

**E***

Consolidated Medical Practices of Memphis

Interim HealthCare

Interim HealthCare

Consolidated Medical Practices of Memphis

Interim HealthCare (Oklahoma and Tulsa)

****

****

Boyum IT Solutions (HOT!)

C.A. Walker Construction

Boyum IT Solutions (HOT!)

C.A. Walker Construction

Williams Accounting Professional

JJP Slip Forming Inc.

Building Envelope Systems

Westlake Realty Group, Inc.

Servonix Technologies

Infinity Pipeline,Inc.

Williams Accounting Professional

JJP Slip Forming Inc.

Building Envelope Systems

Westlake Realty Group, Inc.

Servonix Technologies

Infinity Pipeline,Inc.

Apex Agro, LLC

Mirage Endoscopy Center

Bri-Tech, Inc

SBI Software

DICON

Westgate

Dunagan Associates

Synergy Interactive

East Texas Family Medicine

Apex Agro, LLC

Mirage Endoscopy Center

Bri-Tech, Inc

SBI Software

DICON

Westgate

Dunagan Associates

Synergy Interactive

East Texas Family Medicine

Brooklyn Defender Services

United Personnel (a division of Masis Staffing Solutions)

The Associated Builders and Contractors of Indiana/Kentucky

United Personnel (a division of Masis Staffing Solutions)

The Associated Builders and Contractors of Indiana/Kentucky

*B*

*B*

Family Medical Associates of Raleigh

PB White & Co

Family Medical Associates of Raleigh

Cavalier Flooring Systems Inc.

Wentworth

Green Resource

Cedar Street Capital (A part of a Cynvestors Limited Partnership)

A Roettgers

Cavalier Flooring Systems Inc.

Wentworth

E*

E*

B

B