Landmark Properties

Landmark Properties, a major U.S. student housing developer, suffered a severe cyber incident where the Morpheus ransomware operation claimed to have exfiltrated 1.2 TB of sensitive data from its systems. The stolen data allegedly includes financial documents, confidential business deals, client information (including passport copies), HR records, and expired files. Cybersecurity researchers warn that malicious actors could exploit this data for financial fraud, identity theft, and corporate espionage, severely undermining trust and operational integrity.The breach exposes personal and financial details of clients and employees, risking reputational damage, regulatory penalties, and loss of critical business relationships. The incident highlights the group’s aggressive tactics, with Morpheus (linked to the HellCat ransomware-as-a-service) having already compromised at least six other organizations. The leak of active deal data and confidential agreements further threatens Landmark’s competitive positioning, legal compliance, and client trust, with potential long-term financial and operational repercussions.

Source: https://www.scworld.com/brief/massive-landmark-properties-breach-alleged-by-morpheus-ransomware-gang

Landmark Properties, Inc. cybersecurity rating report: https://www.rankiteo.com/company/landmark-properties---athens-georgia

"id": "LAN18102718112625",
"linkid": "landmark-properties---athens-georgia",
"type": "Ransomware",
"date": "5/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'real estate (student housing development)',
                        'location': 'United States',
                        'name': 'Landmark Properties',
                        'type': 'private company'}],
 'data_breach': {'data_exfiltration': '1.2 TB of data claimed stolen',
                 'personally_identifiable_information': 'yes (passport copies '
                                                        'and other client '
                                                        'information)',
                 'sensitivity_of_data': 'high (includes personally '
                                        'identifiable information and '
                                        'confidential corporate data)',
                 'type_of_data_compromised': ['financial documents',
                                              'confidential agreements',
                                              'HR records',
                                              'client information (passport '
                                              'copies)',
                                              'active deal data',
                                              'expired files']},
 'description': 'Major U.S. student housing developer Landmark Properties had '
                '1.2 TB of data claimed to have been stolen from its systems '
                'by the Morpheus ransomware operation. The stolen data '
                'allegedly includes financial documents, confidential deals, '
                'client information (including passport copies), and expired '
                'files. The breach poses risks of financial fraud, identity '
                'theft, and corporate espionage, with potential fallout '
                'including reputational damage, regulatory penalties, and loss '
                'of business relationships.',
 'impact': {'brand_reputation_impact': 'high (potential reputational damage, '
                                       'loss of client trust, and competitive '
                                       'positioning)',
            'data_compromised': ['financial documents',
                                 'confidential deals',
                                 'client information (passport copies)',
                                 'HR records',
                                 'active deal data',
                                 'expired files'],
            'identity_theft_risk': 'high (passport copies and personally '
                                   'identifiable information exposed)',
            'legal_liabilities': 'potential regulatory penalties'},
 'initial_access_broker': {'high_value_targets': ['financial documents',
                                                  'confidential deals',
                                                  'client information']},
 'motivation': ['financial gain', 'data theft', 'corporate espionage'],
 'ransomware': {'data_exfiltration': '1.2 TB of data claimed stolen',
                'ransomware_strain': 'Morpheus (associated with HellCat '
                                     'ransomware-as-a-service)'},
 'references': [{'source': 'Cybernews'}],
 'threat_actor': 'Morpheus ransomware operation (associated with HellCat '
                 'ransomware-as-a-service)',
 'title': 'Landmark Properties Data Breach by Morpheus Ransomware',
 'type': ['data breach', 'ransomware attack']}