Genesis is an emerging ransomware group observed since late 2025, targeting small to mid-sized organizations.
Analyst brief
Genesis is an emerging ransomware group first observed in late 2025, targeting small to mid-sized organizations across sectors like healthcare, retail, and manufacturing in the US, Denmark, and Canada. The group employs double-extortion tactics, emphasizing data exfiltration and public leaking. Defenders should enhance monitoring for data exfiltration indicators and ensure critical data is not stored unencrypted.
genesis
activecrime
Genesis is an emerging ransomware group first observed in late 2025, targeting small to mid-sized US organizations across healthcare, retail, financial services, legal, and manufacturing using double-extortion tactics, focusing heavily on data exfiltration and public leaking.
observed victims (by country)
United StatesDenmarkCanada
observed sectors
HealthcareProfessional ServicesTechnologyNot Found