Massive Data Leak Exposes Sensitive Records in Real Estate Sector

Over 170,000 Records Left Unprotected Online

Cybersecurity researcher Jeremiah Fowler has uncovered a major data exposure incident involving a large real estate management firm. The database, left unencrypted and open to the public, contained over 170,000 sensitive records.

Weighing in at 116.24 gigabytes, the database included names, dates of birth, Social Security numbers, home addresses, and email addresses. Fowler reported that the files appeared to belong to Income Property Investments, a real estate company based in California.

Though not confirmed, the records may have been managed by either the company or a third-party service provider. Regardless of ownership, the data was accessible to anyone without authentication.

Internal Documents and PII in Plain Text

What made the leak especially alarming was the level of detail in the exposed files. Internal records included employee evaluations, demotion notices, police and incident reports, and eviction documents. Petty cash records, receipts, and some financial documents showed partial card data, such as card type and last four digits.

Even more concerning were spreadsheets listing motel employees’ personally identifiable information—all stored in plain text. The lack of encryption made the data a potential goldmine for identity theft, fraud, or phishing attacks.

Fowler also found files related to medical issues, property damage photos, and arrest records, raising serious privacy concerns.

Immediate Action Taken After Disclosure

Fowler responsibly reported the breach to Income Property Investments. On the same day, access to the database was restricted. While the exposure window remains unclear, the quick response prevented further exploitation.

This incident underscores the risks of poorly secured databases, especially when dealing with large volumes of personal and sensitive information. Real estate companies must now treat cybersecurity as a top operational priority—not an afterthought.