Data breach
Genesys data breach
In 2026, Genesys suffered a data breach affecting 223,144 records. Exposed data included names, surname, email addresses and 3 other types of data.
Breach date
223 144
Records in the breach
6
Types of data exposed
Were you affected by the Genesys breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Genesys breach
- Names
- Surname
- Email Addresses
- Phone Numbers
- Company Names
- Employment Information
About the breach
Genesys disclosed a cybersecurity incident on October 16, 2026, involving unauthorized access to certain internal business systems, including a Customer Relationship Management (CRM) platform and a Learning Management System (LMS).
Key Details of the Incident
• Date Discovered: October 16, 2026
• Containment Status: Genesys announced on October 23, 2026, that the intrusion and incident have been fully contained, immediate remediation actions are complete, and the affected LMS has been suspended.
• Exposed Data: Information accessed from internal systems includes names, business email addresses, telephone numbers, job titles, and company/account details of existing and prospective customers.
• Unaffected Systems: Genesys confirmed that the Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not compromised. There was no unauthorized access to customer and partner environments or data stored within them, including call recordings and analytics data.
Risks and Recommendations
• Primary Risk: The main practical risk to customers is targeted phishing, impersonation, or social engineering attacks that leverage stolen business contact details.
Key Details of the Incident
• Date Discovered: October 16, 2026
• Containment Status: Genesys announced on October 23, 2026, that the intrusion and incident have been fully contained, immediate remediation actions are complete, and the affected LMS has been suspended.
• Exposed Data: Information accessed from internal systems includes names, business email addresses, telephone numbers, job titles, and company/account details of existing and prospective customers.
• Unaffected Systems: Genesys confirmed that the Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not compromised. There was no unauthorized access to customer and partner environments or data stored within them, including call recordings and analytics data.
Risks and Recommendations
• Primary Risk: The main practical risk to customers is targeted phishing, impersonation, or social engineering attacks that leverage stolen business contact details.
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Immediately change your password on the affected website, but also any other website where you may re-use this password.
2. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
3. Consider call identification apps on your mobile device, such as True Caller, which could assist in identifying possible scam calls.
1. Immediately change your password on the affected website, but also any other website where you may re-use this password.
2. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
3. Consider call identification apps on your mobile device, such as True Caller, which could assist in identifying possible scam calls.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.