Income Property Management Data Breach Exposes Sensitive Personal Information
Income Property Management Co. (IPM), a Portland, Oregon-based property management firm, disclosed a data breach involving unauthorized access to its network. The company first detected suspicious activity on December 22, 2024, but did not publicly announce the incident until March 26, 2026 over 15 months later.
An investigation revealed that an unauthorized actor exfiltrated files from IPM’s network on or around January 29, 2025, roughly five weeks after the initial detection. The company spent nearly a year reviewing the compromised files, completing the process on December 4, 2025, before confirming that sensitive personal data had been exposed.
The breach affected an undisclosed number of individuals in the U.S., with exposed information including:
- Driver’s license numbers
- Alien registration numbers
- Health insurance details (provider names and ID numbers)
- Dates of birth
- Social Security numbers
- Medical conditions
- Passport numbers
In response, IPM is offering free credit monitoring for individuals whose Social Security numbers were compromised, along with fraud assistance through HaystackID. Affected parties can contact a dedicated call center at 1-855-329-7315 (available for 90 days from the notice date) or reach IPM by mail at 1800 SW 1st Ave. #220, Portland, OR 97201 until April 1, 2026, after which the address will change to 11740 SW 68th Parkway, Suite 100, Tigard, OR 97223.
Source: https://www.claimdepot.com/data-breach/income-property-management-co-2026
Income Property Management cybersecurity rating report: https://www.rankiteo.com/company/income-property-management
"id": "INC1774888949",
"linkid": "income-property-management",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Undisclosed number of '
'individuals in the U.S.',
'industry': 'Real Estate/Property Management',
'location': 'Portland, Oregon, USA',
'name': 'Income Property Management Co. (IPM)',
'type': 'Property Management Firm'}],
'customer_advisories': 'Free credit monitoring for individuals with '
'compromised SSNs; fraud assistance via HaystackID; '
'dedicated call center (1-855-329-7315) and mail '
'contact until April 1, 2026',
'data_breach': {'data_exfiltration': 'Yes (on or around January 29, 2025)',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Driver’s license numbers',
'Alien registration numbers',
'Health insurance details '
'(provider names and ID numbers)',
'Dates of birth',
'Social Security numbers',
'Medical conditions',
'Passport numbers']},
'date_detected': '2024-12-22',
'date_publicly_disclosed': '2026-03-26',
'description': 'Income Property Management Co. (IPM), a Portland, '
'Oregon-based property management firm, disclosed a data '
'breach involving unauthorized access to its network. An '
'investigation revealed that an unauthorized actor exfiltrated '
'files containing sensitive personal data.',
'impact': {'data_compromised': 'Sensitive personal information including '
'driver’s license numbers, alien registration '
'numbers, health insurance details, dates of '
'birth, Social Security numbers, medical '
'conditions, and passport numbers',
'identity_theft_risk': 'High'},
'investigation_status': 'Completed (review finished on December 4, 2025)',
'references': [{'source': 'Incident disclosure by Income Property Management '
'Co.'}],
'response': {'communication_strategy': 'Public disclosure on March 26, 2026; '
'offering free credit monitoring and '
'fraud assistance',
'third_party_assistance': 'HaystackID (fraud assistance)'},
'title': 'Income Property Management Data Breach Exposes Sensitive Personal '
'Information',
'type': 'Data Breach'}