genesis
Activity analysis
HackerFeeds has tracked 128 victims claimed by genesis since May 2024, most recently in November 2026 — ranking #59 of 332 groups (0.4% of all tracked ransomware victims). It posted 24 victims in the last 90 days, down 25% on the previous 90 days (32). Its most-targeted sector is Healthcare (27 victims), followed by Business Services (22). The United States accounts for 115 victims (93% of those with a known location); 4 victims did not disclose a location.
Victims per year
- 20242
- 202522
- 2026106
Top sectors
- Healthcare27
- Business Services22
- Manufacturing15
- Technology12
- Financial Services10
- Professional Services7
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Genesis is an emerging ransomware group first observed in late 2025, targeting small to mid-sized US organizations across healthcare, retail, financial services, legal, and manufacturing using double-extortion tactics, focusing heavily on data exfiltration and public leaking.
Recent victims
No victims tracked yet.