Healthy Living Market & Café, an organic grocery store chain, suffered a ransomware attack in September 2025 by the Genesis ransomware gang. The breach compromised names, Social Security numbers, direct deposit information, medical records, and addresses of an undisclosed number of individuals. Genesis claimed to have stolen 400 GB of data, including financial, payroll, and HR information, though the company has not verified the full extent of the theft. The attack involved unauthorized access to a local server, potentially exposing personally identifiable information (PII). Neither the company nor Genesis disclosed whether a ransom was paid or demanded. The incident poses significant risks of identity theft, financial fraud, and reputational damage, with no mention of credit monitoring or identity protection services offered to victims. The attack aligns with broader trends of ransomware groups exfiltrating sensitive data before encryption, amplifying pressure on organizations to comply with ransom demands.