Ethan Conrad Properties Data Breach Exposes Personal and Financial Information

Published: 22 September 2026
Real Estate data breach illustration
Breach Discovery: Not Publicly DisclosedBreach Notification: September 2026

Ethan Conrad Properties notified individuals in September 2026 that their personal information, likely including Social Security numbers and other identifying details, was exposed in a data breach. The exact number of people affected hasn’t been publicly disclosed. Affected individuals should enroll in the free credit monitoring offered in their notification letter and consider placing a fraud alert or credit freeze right away.

CompanyEthan Conrad Properties
IndustryReal Estate
Data Types ExposedFull Name, Social Security Number, Date of Birth, Address Information, Other Personal Identifying Information
People AffectedNot Publicly Disclosed
Attack MethodUnspecified/Unauthorized Access
Regulators NotifiedCalifornia Attorney General

Were you affected by this breach?

You may be owed compensation.

Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.

Check if you qualify — free review

What Happened in the Ethan Conrad Properties Data Breach?

Ethan Conrad Properties recently notified individuals that their personal information was involved in a data security incident. The company sent formal breach letters in September 2026, informing recipients that unauthorized parties may have accessed sensitive records. As a result, affected individuals are now being offered free credit monitoring services to help guard against misuse of their data.

The exact discovery date of the breach has not been publicly disclosed. However, the notification letter indicates that the company identified unauthorized access to information within its systems and moved to assess what data was involved. This type of incident typically follows a pattern where a company first detects unusual activity, then works to determine the scope of exposure before notifying those affected.

Following discovery, Ethan Conrad Properties appears to have conducted an internal review to understand which records were compromised. The company’s notification letter, signed by its Chief People Officer, points to a review process aimed at confirming the nature of the exposure. In addition, the company filed a formal notification with the California Attorney General, a step required when California residents are affected by a breach involving personal information.

Who Was Affected?

The notification letter does not specify whether the affected individuals are employees, tenants, business partners, or another group tied to Ethan Conrad Properties. Because the letter was signed by a Chief People Officer, it’s possible that current or former employees make up some or all of the affected population. However, without more detail from the source material, the exact relationship between the company and affected individuals remains unclear.

The total number of people affected by this breach has not been publicly disclosed. Likewise, the geographic scope of those impacted is not fully detailed, though the filing with the California Attorney General confirms that at least some California residents were involved. Notification letters referencing New York and North Carolina attorney general contacts suggest that individuals in those states may also have been affected.

What Information Was Potentially Exposed?

While the notification letter does not provide an exhaustive list of every data element involved, it strongly implies that the exposed information falls into categories closely tied to identity theft risk. The company’s offer of credit monitoring services, along with detailed guidance on fraud alerts and credit freezes, indicates that sensitive personal and financial details were part of the exposure.

  • Full name
  • Social Security number
  • Date of birth
  • Address information
  • Other personal identifying information potentially tied to credit or financial accounts

Because Social Security numbers and dates of birth are strongly indicated by the nature of the response offered, affected individuals face a real risk of identity theft. Criminals can use this type of information to open new credit accounts, file fraudulent tax returns, or apply for loans in someone else’s name. This kind of fraud can take months to detect and even longer to resolve.

In addition to identity theft, there’s a risk of targeted phishing attempts. Scammers often use breached personal details to craft convincing emails or phone calls that impersonate legitimate institutions. As a result, affected individuals should treat unexpected communications, especially those asking for personal or account information, with heightened suspicion.

What Is the Company Doing?

In response to the incident, Ethan Conrad Properties began notifying affected individuals in September 2026. The company is offering free credit monitoring services through CyberScout, giving recipients a specific enrollment code and a 90-day window to sign up. This step is a standard measure meant to help detect fraudulent use of exposed information early.

Furthermore, the company filed a formal breach notification with the California Attorney General, fulfilling its legal obligation under state breach notification law. This filing provides regulators and the public with visibility into the incident. The company also included guidance in its letter on fraud alerts, credit freezes, and other protective actions, showing an effort to help affected individuals limit potential harm.

What Should Affected Individuals Do?

Enroll in Free Credit Monitoring

Anyone who received a notification letter should enroll in the offered credit monitoring service as soon as possible. Because enrollment must happen within 90 days of the letter’s date, waiting too long could mean losing access to this free protection entirely.

To enroll, visit the CyberScout activation portal referenced in the notification letter and enter the unique code provided. This service can help detect unauthorized use of your information more quickly than checking accounts manually. Since enrollment requires internet access and an email account, those without reliable access should seek help from a trusted family member or friend.

Consider a Fraud Alert or Credit Freeze

Given that Social Security numbers may have been exposed, placing a fraud alert or credit freeze is a smart precaution. A fraud alert requires businesses to verify your identity before extending new credit, which adds a layer of protection against fraudulent applications.

Alternatively, a credit freeze blocks lenders from even viewing your credit report unless you lift the freeze yourself. This means identity thieves generally cannot open new accounts in your name while the freeze is active. Because federal law prohibits credit bureaus from charging for a freeze, this protection is available to everyone at no cost.

Monitor Financial Accounts and Credit Reports

Regularly reviewing your bank statements, credit card activity, and credit reports is essential after any data breach. Look closely for unfamiliar charges, new accounts you didn’t open, or inquiries from lenders you don’t recognize.

You’re entitled to a free credit report annually from each of the three major bureaus through annualcreditreport.com. As a result, spacing out requests from each bureau throughout the year can give you ongoing visibility into your credit file. If you spot anything suspicious, contact the relevant credit bureau immediately to dispute the entry.

Stay Alert for Phishing Attempts

Because breach notifications often trigger a wave of related scam attempts, affected individuals should be cautious of unexpected emails, texts, or calls. Scammers sometimes pose as the breached company itself, asking victims to confirm account details or click suspicious links.

Instead of responding directly to unsolicited messages, verify the sender’s identity through official contact channels. For example, you can call the number listed in the original notification letter rather than any number provided in a suspicious follow-up message. This simple step can prevent a secondary scam from compounding the original breach’s damage.

Know Your Legal Options

If your personal information was exposed in this breach, you may have legal options available to you. Many data breach victims consult with an attorney to understand whether they qualify for compensation through a class action or individual claim.

Because deadlines for filing claims can vary by state and by the specific facts of the case, it’s wise to seek a free consultation sooner rather than later. An experienced data breach attorney can review your situation, explain your rights, and help you decide on the best path forward.

Get a Free Case Review

Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.



More Information

Official data breach notification from California Attorney General

Related Data Breaches

Browse all recent data breaches →