10x Genomics Listed by revil Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On March 13, 2020, the ransomware group revil listed 10x Genomics on its data-leak site and stated that it had taken internal files from the company. No confirmed count of affected individuals has been released, and the precise contents of the material have not been made public. The incident is one of many in which a ransomware operator publicly advertised stolen corporate data rather than confirming encryption or payment demands. Because the listing itself is the primary source of information, the scale of any exposure and the method used to obtain the files remain unconfirmed.

Inside the incident

Public records show only that 10x Genomics appeared on the revil leak site on the reported date. The group asserted that internal files had been removed during a ransomware operation, but no further technical details, timelines, or evidence of the intrusion have been disclosed by either the company or investigators.

Neither the volume of data nor the number of people potentially referenced in the files has been stated. Subsequent confirmation or denial of the claims by 10x Genomics has not appeared in available reporting.

Who is revil?

Revill, also tracked publicly as REvil or Sodinokibi, operated a ransomware-as-a-service model in which affiliate groups deployed the malware and the core operators managed leak infrastructure. The group routinely used a double-extortion approach: encrypting systems and then threatening to publish stolen files if a ransom was not paid.

Its leak sites functioned as a public catalogue of claimed victims. Listings were presented by the operators as proof of access, though independent verification of the data’s authenticity or the circumstances of its acquisition was not provided by the group.

Who is 10x Genomics?

10x Genomics develops instruments and consumables used in single-cell and spatial genomics research. Its customers include academic laboratories, biotechnology firms, and pharmaceutical companies that generate large volumes of sequencing data tied to biological samples.

Organisations in this sector routinely process genomic sequences, experimental metadata, and associated research records. A breach that exposes such material can affect both the scientific integrity of ongoing projects and the privacy expectations of individuals whose samples contributed to the datasets.

What was likely exposed

The only data category named in connection with the listing is “internal files exfiltrated in ransomware attack.” No inventory of file types, no indication of whether personal identifiers were present, and no confirmation of the files’ scope have been released.

Companies of this kind commonly store proprietary research protocols, instrument logs, and genomic datasets. Without an official disclosure, it is not possible to determine whether any of these categories were among the material referenced by the listing.

What's at stake

Genomic information is difficult to change and can reveal sensitive details about individuals and their relatives. If such data were included in the exfiltrated files, affected people could face long-term privacy consequences even if the immediate operational impact on the company remains unclear.

For the organisation, the incident adds to the body of public claims about its security posture. Any subsequent regulatory or contractual reviews would depend on facts that have not yet been published.

Were you affected?

Because the number of individuals referenced in the files is unknown, anyone who has provided samples to research projects involving 10x Genomics technology should treat the possibility as open. The first practical step is to monitor official statements from the company and any notices issued through research institutions or biobanks.

Readers can also run a free exposure scan of their email address against known breach datasets to check whether their information has appeared in other publicly reported incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.