AppFolio, Inc.

AppFolio, Inc., a real estate platform, experienced a cybersecurity incident where an unauthorized individual gained access to sensitive personal information (PII) of an unspecified number of individuals. The compromised data included names, addresses, dates of birth, and Social Security numbers—highly sensitive details that could expose affected individuals to identity theft, financial fraud, or other malicious activities. The breach prompted a legal investigation by Lynch Carpenter, LLP, a national class action law firm, which is assessing potential compensation claims for victims. The incident underscores significant risks to customer privacy and trust, with potential long-term reputational and financial repercussions for AppFolio. The exact scope of the breach, including the number of impacted individuals and the method of unauthorized access, remains undisclosed, heightening concerns about data security practices within the company.

Source: https://www.globenewswire.com/news-release/2025/10/09/3164529/0/en/Lynch-Carpenter-Investigates-Claims-in-AppFolio-Data-Breach.html

TPRM report: https://www.rankiteo.com/company/appfolio

"id": "app0902209101025",
"linkid": "appfolio",
"type": "Breach",
"date": "10/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown number of individuals',
                        'industry': 'Real Estate Technology',
                        'location': 'Pittsburgh, PA (HQ), Santa Barbara, CA '
                                    '(operations)',
                        'name': 'AppFolio, Inc.',
                        'type': 'Corporation'}],
 'customer_advisories': 'Data breach notifications sent to affected '
                        'individuals (implied by Lynch Carpenter, LLP)',
 'data_breach': {'data_exfiltration': 'Yes (records obtained by unauthorized '
                                      'person)',
                 'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Dates of Birth',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2025-10-09',
 'description': 'An unauthorized person obtained records containing personally '
                'identifiable information (PII) from AppFolio, a real estate '
                'platform. The compromised data includes names, addresses, '
                'dates of birth, and Social Security numbers. The exact number '
                'of affected individuals is unknown. Lynch Carpenter, LLP is '
                'investigating potential claims for compensation on behalf of '
                'affected parties.',
 'impact': {'brand_reputation_impact': 'Potential (under investigation by '
                                       'Lynch Carpenter, LLP)',
            'data_compromised': ['Names',
                                 'Addresses',
                                 'Dates of Birth',
                                 'Social Security Numbers'],
            'identity_theft_risk': 'High (PII including SSNs exposed)',
            'legal_liabilities': 'Potential (class action investigation '
                                 'ongoing)'},
 'investigation_status': 'Ongoing (legal investigation by Lynch Carpenter, '
                         'LLP)',
 'references': [{'date_accessed': '2025-10-09',
                 'source': 'Globe Newswire Press Release'},
                {'source': 'AppFolio Official Website',
                 'url': 'https://www.appfolio.com/'},
                {'source': 'Lynch Carpenter LLP Investigation Page',
                 'url': 'https://www.lynchcarpenter.com/'}],
 'regulatory_compliance': {'legal_actions': 'Potential class action '
                                            'investigation by Lynch Carpenter, '
                                            'LLP'},
 'response': {'communication_strategy': 'Public disclosure via Globe Newswire; '
                                        'legal firm (Lynch Carpenter, LLP) '
                                        'outreach to affected individuals'},
 'threat_actor': 'Unauthorized person',
 'title': 'AppFolio Data Breach',
 'type': 'Data Breach'}