Skip to content
Ransomware

Manusos General Contracting, Inc listed on Genesis ransomware leak site

The ransomware group Genesis has listed Manusos General Contracting, Inc on its leak site, claiming to have exfiltrated 780 GB of data.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Genesis
  • Country: United States
  • Sector: Manufacturing
  • Announcement date: November 11, 2025

The ransomware group known as Genesis has listed Manusos General Contracting, Inc on its dedicated leak site. According to the group's announcement, the cyberattack resulted in the exfiltration of a significant volume of data belonging to the organization.

The alleged data breach incident

On November 11, 2025, the Genesis group published an announcement claiming to have successfully compromised Manusos General Contracting, Inc. The group alleges that the breach involved the unauthorized extraction of 780 GB of data from the company's file servers. While the group has made these claims publicly, it is important to note that information regarding the specific operations and identity of the Genesis group remains limited.

This incident follows a common pattern in modern cyber extortion, often referred to as double extortion. In such scenarios, threat actors do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive information. The threat of leaking this stolen data on a public forum is used as leverage to pressure the victim into paying a ransom. While no ransom demand has been specified in the current listing, the presence of the organization on a leak site indicates a high level of intent to publish the stolen information.

Details of the claimed stolen data

The announcement made by the Genesis group specifies that the stolen information is quite diverse, encompassing various types of sensitive corporate and operational files. The group claims that the exfiltrated data set includes the following categories:

  • Project data
  • Contracts
  • NDAs
  • Financial data
  • Network user folders
  • Management folders

The breadth of the data types mentioned suggests that the attackers targeted core business functions, ranging from administrative management to specific project documentation and financial records.

About Manusos General Contracting, Inc

Manusos General Contracting, Inc. is an Illinois-based general contracting and construction firm. The company provides construction management and general contracting services for commercial and industrial projects.

Potential impact and organizational risks

The alleged leak of this data may pose significant risks to the company's business operations and its employees. The exposure of sensitive financial records and legal contracts could potentially weaken the company's competitive position and lead to a loss of trust with business partners. Furthermore, the leaked information could potentially be utilized by malicious actors for identity theft or targeted phishing campaigns, creating secondary risks for both employees and stakeholders.

Because the company is based in the United States, this incident may trigger legal obligations under state-level data breach notification laws and relevant regulations. Organizations operating in the manufacturing and construction sectors often handle vast amounts of proprietary project information and sensitive client contracts, making them attractive targets for data exfiltration.

To defend against such threats, organizations typically focus on robust security measures. This includes implementing strict access controls to limit who can access sensitive file servers, maintaining comprehensive logging and monitoring to detect unauthorized data movement, and conducting regular security awareness training to help employees recognize phishing attempts. Additionally, maintaining offline or immutable backups and ensuring that all software is regularly patched are fundamental steps in reducing the attack surface and mitigating the impact of a potential breach.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

Related stories