Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Genesis
As of Oct 19, 2026, Genesis has listed 117 confirmed victims on its leak site since Sep 10, 2025, 0.4% of all victims tracked by Brandefense. Its most targeted country is United States (85.5% of its victims) and its most targeted sector is Healthcare.
Genesis is an emerging ransomware group first observed in late 2025, targeting small to mid-sized US organizations across healthcare, retail, financial services, legal, and manufacturing using double-extortion tactics, focusing heavily on data exfiltration and public leaking.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 117
- Rank By Victims
- #60
- Last Leak-Site Post
- Oct 1, 2026
- Top Country
- United States
- Top Sector
- Healthcare
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 20 |
| June 2026 | 5 |
| July 2026 | 18 |
| August 2026 | 4 |
| September 2026 | 6 |
| October 2026 (month in progress) | 2 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 4 |
| December 2025 | 8 |
| January 2026 | 10 |
| February 2026 | 10 |
| March 2026 | 17 |
| April 2026 | 1 |
| May 2026 | 20 |
| June 2026 | 5 |
| July 2026 | 18 |
| August 2026 | 4 |
| September 2026 | 6 |
| October 2026 (month in progress) | 2 |
| Month | Confirmed victims |
|---|---|
| September 2025 | 2 |
| October 2025 | 10 |
| November 2025 | 4 |
| December 2025 | 8 |
| January 2026 | 10 |
| February 2026 | 10 |
| March 2026 | 17 |
| April 2026 | 1 |
| May 2026 | 20 |
| June 2026 | 5 |
| July 2026 | 18 |
| August 2026 | 4 |
| September 2026 | 6 |
| October 2026 (month in progress) | 2 |
Latest Genesis Victims.
Search all 117 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| VPNE vpne.com | USUnited States | Hospitality and Tourism | Not stated | |
| Vera Science verascience.com | USUnited States | Healthcare | Not stated | |
| Owens Distributors owensdistributors.com | USUnited States | Food and Beverage | Not stated | |
| Vera Science veroscience.com | USUnited States | Healthcare | Not stated | |
| TLC Perinatal tlcperinatal.com | USUnited States | Healthcare | Not stated | |
| VPNE | Unknown | Technology | Not stated |
How They Operate.
Genesis's threat actor profile lists 1 ATT&CK techniques, 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Genesis Targets.
History.
First confirmed victim listed on its leak site
First seen in Brandefense data
Busiest month on record: 20 confirmed victims
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.