Ethan Conrad Properties, Inc., a commercial real estate company based in Sacramento, California that owns and manages a portfolio of retail, office, and industrial buildings, has begun notifying individuals about a cyber security incident affecting its network. Companies that maintain employee records, including sensitive personal information, have a responsibility to keep that data secure.
Ethan Conrad Properties’s Data Breach Investigation
According to a Notice of Data Breach letter Ethan Conrad Properties filed with the California Attorney General’s office, the company discovered potentially suspicious activity within its network on August 24, 2026. Upon discovery, Ethan Conrad Properties says it took swift action to secure its network and immediately began working with third-party computer specialists to investigate the full nature and scope of the incident. The company states that, while its investigation remains in its early stages and ongoing, it recently discovered that certain employee data, kept in the ordinary course of business, may have been potentially impacted.
Ethan Conrad Properties has stated that the specific data elements involved are not yet fully known, and that it is notifying employees out of an abundance of caution while the investigation continues. The company’s notice states that the information believed to potentially be at risk may include an individual’s first and last name in combination with one or more additional, unspecified personal data elements. The company has said there is currently no evidence of attempted or actual misuse of any information as a result of this incident.
Incidents affecting commercial real estate and property management companies are not uncommon, since these businesses typically maintain detailed personnel records for a workforce spread across a large portfolio of properties, along with financial and vendor information tied to their leasing and property operations. This combination of data can make such companies an appealing target for hackers seeking access to a large set of records through a single point of entry.
Ethan Conrad Properties has arranged to make complimentary online credit monitoring services available for twelve months through Cyberscout, a TransUnion company, to individuals whose information may have been affected. The company notes that due to privacy laws it cannot activate these services directly on an individual’s behalf, so affected individuals must enroll themselves using the activation information provided in their notification letter.
Even when an investigation is still ongoing and a company has not yet confirmed the full scope of information exposed, notifying potentially affected individuals promptly, as Ethan Conrad Properties appears to have done here (within roughly one month of discovering the suspicious activity), allows those individuals more time to take precautionary steps such as monitoring their accounts and enrolling in credit monitoring, rather than waiting for a fully completed investigation before any notice goes out.
When Did This Breach Occur?
Ethan Conrad Properties says it discovered potentially suspicious activity within its network on August 24, 2026. The company began notifying affected individuals on September 18, 2026, while its investigation into the incident remains ongoing.
What Information Was Breached?
Ethan Conrad Properties’s notice states that the information believed to potentially be at risk may include an individual’s first and last name in combination with one or more additional personal data elements. The company has not publicly specified the complete list of those additional data elements, and states that its investigation into the full scope of the incident is ongoing.
What You Can Do
If you received a notice from Ethan Conrad Properties, consider taking the following steps:
- Enroll in the complimentary 12-month credit monitoring service through Cyberscout referenced in your notification letter.
- Review your financial account statements and credit history regularly for unauthorized activity.
- Consider placing a fraud alert or credit freeze with the three major credit bureaus.
- Request a free annual credit report from each of the three major credit bureaus at annualcreditreport.com.
- Be cautious of any unsolicited communications referencing this incident that ask for personal information.
File a Data Breach Lawsuit Against Ethan Conrad Properties
If you received a notice that your personal information may have been exposed in the Ethan Conrad Properties data breach, you may have legal options available to you.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
