Ransomware victim disclosure
← All victimsHostBooks
Claimed by genesis · listed 3 days ago
Status timeline
- Listed
May 18, 2026
- Data leaked
At a glance
- Group
- genesis
- Status
- Data leaked
- Sector
- Software/Accounting
- Listed on leak site
- May 18, 2026
- Data size
- 500 GB
About the victim
AI dossier — public-source company profileHostBooks is an accounting software provider founded in 2009. The company offers a cloud-based platform encompassing cloud accounting, expense management, invoicing, reconciliations, inventory management, financial reporting, and a client management portal. It serves businesses requiring integrated financial and operational software tools.
- Industry
- Accounting Software (SaaS/Cloud)
- Founded
- 2009
Attack summary
Severity: critical — 500 GB of data has been published including confirmed medical data, criminal data, personal PII, and financial data belonging to the company's clients — constituting large-scale exfiltration of multiple categories of regulated and sensitive data.The Genesis ransomware group claims to have exfiltrated approximately 500 GB of data from HostBooks, including client personal data, medical data, financial data, criminal data, legislation data, email archives, network user folders, and data from the company's file server. The post indicates data has been published/made available for download.
Data the group says was taken
AI dossier — extracted from the leak post- Client data
- Personal data
- Medical data
- Legislation data
- Criminal data
- Operational data
- Financial data
- Company file server data
- Email archives
- Network user folders
The group's post references roughly 1 proof file.
What the group claims
Founded in 2009, HostBooks is an accounting software provider. The company's software features cloud accounting, expense management, cloud storage, invoicing, reconciliations, inventory management, data import/export, financial reports and a client management portal.
The leak post
captured from the group's siteFounded in 2009, HostBooks is an accounting software provider. The company's software features cloud accounting, expense management, cloud storage, invoicing, reconciliations, inventory management, data import/export, financial reports and a client management portal. For these lawyers, building a website is too complicated. The same goes for protecting their clients' data. ``` - 500 Gb of accessible data. - Clients Data. - Personal Data. - Medical Data. - Legislation Data. - Criminal Data. - Operational Data. - Financial Data. - Data from company fileserver. - Email archives. - Folders of network users. ``` [Download The List of Company Files](http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz3c647ibqixiad.onion/download/72daf8151f038f9399f8.txt)
Data the group says was taken
- Clients Data
- Personal Data
- Medical Data
- Legislation Data
- Criminal Data
- Operational Data
- Financial Data
- Data from company fileserver
- Email archives
- Folders of network users
Screenshot of the leak post

Sources
Source
Indexed 3 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
