Genesys Internal LMS and CRM Systems Breached; ScarlettGroup Claims Attack, Customer Contact Data Likely Stolen
Genesys, a California-based customer experience and call center technology provider, disclosed on October 19 that attackers accessed internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) environment. The company says it contained the incident by October 23, while its investigation into scope and impact is still ongoing. Genesys states that the Genesys Cloud, Genesys Engage and Genesys Engage Cloud platforms, and the customer and partner data stored in them, were not compromised. A recently emerged group, ScarlettGroup, has claimed the attack on its leak site, but Genesys has not attributed the incident.
Detalhes técnicos
- Attackers accessed and likely downloaded business and account information used to manage relationships with existing and prospective customers.
- Potentially exposed data: names, phone numbers, business email addresses, job titles, company and account information, and other customer interaction information.
- Containment included suspending the LMS platform.
- The initial access vector and the attack techniques have not been disclosed.
Remediação
- Genesys warns customers to be alert to suspicious communications impersonating Genesys and states it will never request sensitive information such as passwords via email or other unsolicited channels.
- Defenders at Genesys customers should treat inbound contact referencing Genesys accounts with caution, as the exposed contact data supports targeted phishing.
Linha do tempo
-
Genesys Internal LMS and CRM Systems Breached; ScarlettGroup Claims Attack, Customer Contact Data Likely Stolen
ler a análise desta fonte ocultar
Genesys, a California-based customer experience and call center technology provider, disclosed on October 19 that attackers accessed internal business systems, including a learning management system (LMS) and a customer relationship management (CRM) environment. The company says it contained the incident by October 23, while its investigation into scope and impact is still ongoing. Genesys states that the Genesys Cloud, Genesys Engage and Genesys Engage Cloud platforms, and the customer and partner data stored in them, were not compromised. A recently emerged group, ScarlettGroup, has claimed the attack on its leak site, but Genesys has not attributed the incident.
Technical Details
- Attackers accessed and likely downloaded business and account information used to manage relationships with existing and prospective customers.
- Potentially exposed data: names, phone numbers, business email addresses, job titles, company and account information, and other customer interaction information.
- Containment included suspending the LMS platform.
- The initial access vector and the attack techniques have not been disclosed.
Remediation
- Genesys warns customers to be alert to suspicious communications impersonating Genesys and states it will never request sensitive information such as passwords via email or other unsolicited channels.
- Defenders at Genesys customers should treat inbound contact referencing Genesys accounts with caution, as the exposed contact data supports targeted phishing.