Geno Bank Listed by Coinbase Cartel Ransomware Group

On March 15, 2026, the ransomware group coinbasecartel added GenoBank.io to its leak site, claiming that internal files had been exfiltrated from the DNA data storage platform after a ransomware attack.

What Public Reporting Shows

Public reporting indicates that GenoBank.io, which offers a blockchain-based system for secure storage and transfer of DNA information used for medical, ancestry, and lifestyle insights, suffered a ransomware intrusion. The attackers listed the company on their dark web leak page hosted at an onion address, stating that internal files had been taken. Available reporting describes the number of affected individuals as unknown at this time, and the precise volume or specific categories of exposed data beyond “internal files” have not been detailed in the initial listing. The incident follows the group’s typical pattern of encrypting systems, exfiltrating data, and then publicly naming victims who do not pay.

Why This Matters for You and Your Family

If you or anyone in your household has ever submitted a saliva sample, uploaded raw DNA data, or created an account with GenoBank.io or a similar service, your most personal biological information may now sit in attackers’ hands. DNA data is permanent and uniquely identifying. Unlike a credit card, it cannot be replaced. A leak of this kind can enable long-term identity fraud, insurance discrimination, or targeted scams that reference your family’s real medical history. Even if you never used GenoBank yourself, relatives who tested years ago may have linked accounts that expose shared genetic markers belonging to you and your children.

The Doxxing and Identity-Chain Risks

DNA records are high-value anchors for doxxing chains. Once attackers possess genetic data tied to an email, phone number, or username, they can cross-reference it with other breaches to build a complete profile. Public reporting shows these chains frequently link to gaming accounts, social media handles, and home addresses. Credential leaks like this one routinely cascade into account takeovers because the same password used for a DNA service is often reused elsewhere. For families, the exposure of a child’s gaming account can quickly reveal the household’s real identity when the parent’s DNA profile has already been leaked.

Coinbasecartel’s Known Track Record

Public reporting attributes coinbasecartel with emerging in late 2024 as a ransomware operation that blends crypto-themed branding with traditional extortion. The group has listed dozens of victims, many in fintech, health-tech, and data-storage sectors. Its publicly observed playbook involves initial access through phishing or exploited remote desktop services, followed by claimed exfiltration of sensitive files before encryption. The extortion style relies on dual pressure: threatening to publish stolen data on its leak site while sometimes contacting victims directly. Observers note the group’s willingness to target organizations handling irreplaceable personal data, exactly the category GenoBank falls into.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real identity so you can see exactly what chains exist today.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours rather than months.
• Rotate every password you ever used at GenoBank.io or any DNA testing service, then replace it with a unique passphrase and enable 2FA through an authenticator app everywhere that password was reused.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the weakest link in doxxing chains when parental data is already exposed.
• Let remediation specialists handle the follow-up work of sending takedown notices to data brokers and monitoring for resale of your information.

The incident shows that even companies promising privacy-first DNA storage can be breached and their internal files published. Taking concrete steps now limits how far attackers can travel down the identity chain that begins with your genetic code. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to understand and close the gaps before the next wave of extortion begins.