
JRK Property Holdings, Inc., a Los Angeles-based real estate investment and property management firm, has notified residents of a data security incident that may have exposed personal information belonging to current and former tenants, applicants, and employees. Contact our data breach lawyers to learn more about your legal options.
According to notices filed with state attorneys general (including New Hampshire and California), JRK identified suspicious activity on its network on March 26, 2026. The company engaged cybersecurity experts, took steps to secure its systems, and retained a third-party forensic firm. On April 22, 2026, the investigation determined that an unauthorized individual may have accessed files and folders containing personal information.
A ransomware group known as “The Gentlemen” claimed responsibility for the incident on the dark web around April 4, 2026, and alleged it had obtained data belonging to JRK. The company has not publicly confirmed the full scope of the data involved beyond what appears in its official notifications. Reports indicate the incident affects thousands of people across multiple states (California filings reference more than 11,000 individuals; other state notices confirm impacts in additional jurisdictions).
Property management companies like JRK typically store sensitive information related to tenant screening and lease applications. Based on the company’s notices, information that may have been involved includes:
JRK is offering affected individuals 12 months of free credit monitoring and identity theft protection through Experian IdentityWorks, along with identity restoration support and $1 million in identity theft insurance.
Property management firms hold some of the most sensitive financial and identity documentation that exists, often gathered during rental applications and background checks. When that information is exposed, affected individuals face a real risk of identity theft, fraudulent credit applications, and unauthorized account activity that can take months or years to fully resolve.
Simply offering free credit monitoring does not undo the exposure of a Social Security number or financial details. Consumers affected by this incident may have legal options to pursue accountability and compensation beyond what the company is voluntarily offering.
The Lyon Firm has represented consumers nationwide in numerous data breach cases against companies that failed to adequately protect sensitive personal information. Here is what sets our team apart:
If you received a notice from JRK Property Holdings about this data breach, contact The Lyon Firm today to discuss your rights and options. Call (513) 381-2333 or reach out online for a free, confidential case review.
Details of this incident are based on JRK Property Holdings’ public filings with state attorneys general and other publicly reported information, which may be incomplete or subject to change. This article does not accuse JRK Property Holdings of any wrongdoing, and no conclusions about liability should be drawn from the reporting of a data breach.
Taking the first step doesn’t have to be complicated. In just a few minutes, you can share the basics of your case, and our team will guide you from there: