S.B. Conrad, Inc listed by Genesis ransomware group

• Ransomware group: Genesis
• Country: United States
• Sector: Manufacturing
• Announcement date: November 11, 2025

The ransomware group known as Genesis has listed the construction company S.B. Conrad, Inc on its leak site. According to the group's announcement, they claim to have successfully exfiltrated 500 GB of data from the organization.

Details of the alleged attack

On November 11, 2025, the Genesis group posted an announcement on their leak site targeting S.B. Conrad, Inc. The group claims that the breach involved the theft of 500 GB of data, which was allegedly taken from the company's file servers. While the group has made these claims, public information regarding the specific methods or identity of the Genesis group remains limited.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms. These sites often host lists of compromised organizations and, in some cases, samples of stolen data. The use of such platforms is a hallmark of modern cyber extortion, where the threat of public exposure is used as leverage against the target organization.

Data involved in the claim

The leak announcement suggests that the exfiltrated data is extensive and covers various aspects of the company's operations. The group claims that the stolen information may include a wide range of sensitive documents and directories. Specifically, the data said to be involved includes:

• Project data
• Contracts
• Non-disclosure agreements (NDA)
• Financial data
• Technical data
• Network user folders
• Management folders

The variety of these data types suggests a broad reach into the organization's internal file structures, potentially touching upon both administrative and operational workflows.

The organization profile

S.B. Conrad, Inc. is a general contracting and construction company based in New York. The company provides construction management and general construction services for commercial and industrial projects.

Impact and security implications

The alleged data exfiltration could have significant consequences for the company. The exposure of sensitive information may negatively impact the organization's operational continuity and its commercial reputation. Furthermore, the exposure of financial and contractual records could lead to a loss of trust among business partners and clients.

Because the company is based in the United States, the incident may bring the organization under the purview of state-level data protection laws and potential legal obligations. Additionally, the leaked technical data and network folders may pose a risk for secondary attacks or targeted phishing attempts against the organization. Given the methods employed by the group, the publication of this data may be considered part of a double extortion strategy.

Double extortion is a tactic where attackers not only encrypt an organization's data but also steal it, threatening to leak the sensitive information on a public leak site if the ransom is not paid. This increases the pressure on the victim, as the threat shifts from mere operational disruption to permanent reputational and legal damage.

In the manufacturing and construction sectors, maintaining the integrity of project data and technical specifications is critical. Organizations in this sector often face risks from targeted phishing or secondary attacks if technical network information is exposed. To defend against such threats, organizations typically implement multi-layered security strategies, including robust access controls, regular monitoring of network folders, and comprehensive employee training to recognize social engineering attempts.