QFloors Listed by genesis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

QFloors, a provider of software for the flooring industry, appeared on a listing published by the genesis ransomware group on 18 January 2026. The number of individuals affected has not been disclosed, and the only confirmed detail is that internal files were claimed to have been taken during a ransomware operation.

Inside the incident

The incident came to public notice solely through the group’s listing on that date. No information has been released about the date of the intrusion, the volume of data involved, or the technical method used to gain access. The organisation has not issued a statement confirming or denying the claims, and the scale of any operational disruption remains unknown.

Inside genesis

Genesis is a ransomware operation that maintains a public leak site where it lists organisations it claims to have compromised. The group follows the common pattern of encrypting systems and threatening to publish stolen files if a ransom is not paid. Its listings are presented by the group itself and are not independently verified at the time they appear.

QFloors and its sector

QFloors supplies software used by flooring contractors and retailers to manage orders, inventory, pricing and customer records. Companies in this sector routinely store commercial data that can include contact details for business clients, project specifications and financial transaction records. A compromise at a software supplier can therefore expose information belonging to many downstream businesses even when the supplier itself does not directly serve consumers.

What data was at risk

The listing refers only to “internal files.” No inventory of specific data categories has been published. Organisations of this type commonly hold business correspondence, customer lists, pricing schedules and system configuration details; however, the precise contents of the exfiltrated material have not been confirmed.

The real-world impact

Exposed internal files can be used for targeted fraud against the organisation’s clients or for further attacks against connected systems. For individuals whose details appear in those files, the main risks are increased phishing or impersonation attempts. The organisation itself faces potential loss of client trust and the cost of restoring systems and reviewing security controls.

What to do if you're exposed

Monitor email and postal addresses associated with any flooring businesses you have dealt with for unusual activity. Enable multi-factor authentication on accounts that may share credentials with the affected systems. Review bank and credit statements for unauthorised transactions. Readers can run a free exposure scan of their email address against known breach data to check whether their information has appeared in previously published sets.

AICompiled with AI assistance from public sources and published under our editorial standards.