Real estate industry data breaches expose Social Security numbers, financial account information tied to mortgages and closings, and property records at brokerages, title companies, mortgage lenders, and property management firms. These exposures carry a heightened risk of financial fraud, including wire fraud schemes that specifically target real estate transactions, where attackers use stolen closing and escrow information to trick buyers or title companies into wiring funds to fraudulent accounts. Real estate transactions involve an unusually large amount of sensitive financial data changing hands in a short window of time, across multiple parties including buyers, sellers, agents, lenders, and title companies, which creates multiple points of potential exposure in a single deal. Property management companies also retain long-term tenant data, including Social Security numbers and payment histories, that can be exposed even outside of an active transaction. This page tracks confirmed data breaches at real estate companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves.
Commercial real estate finance firm Berkadia was hit by a ShinyHunters extortion campaign that exposed over 300,000 email addresses along with names, phone numbers, and physical addresses stolen from its Salesforce environment.
Berkadia Data Breach Exposes Names, Emails, and Phone Numbers Read More »
An unauthorized actor accessed AppFolio's CRM system through its third-party vendor Salesloft between August 8 and August 18, 2025, potentially exposing names and Social Security numbers of thousands of individuals across Texas, Maine, Massachusetts, Montana, and New Hampshire. AppFolio disabled the Salesloft integration and began mailing notification letters in October 2025. Affected individuals should immediately
AppFolio Data Breach Exposes Personal Information Read More »