
JRK Property Holdings, Inc., a Los Angeles-based real estate investment and property management firm, has notified residents of a data security incident that may have exposed personal information belonging to current and former tenants and applicants. Contact our data breach lawyers to learn more about your legal options.
According to notices filed with state attorneys general (including New Hampshire and California), JRK identified suspicious activity on its network on March 26, 2026. The company engaged cybersecurity experts and on April 22, 2026, the investigation determined that an unauthorized individual may have accessed files and folders containing personal information.
A ransomware group known as “The Gentlemen” claimed responsibility for the incident on the dark web around April 4, 2026, and alleged it had obtained data belonging to JRK. The company has not publicly confirmed the full scope of the data involved beyond what appears in its official notifications but reports indicate the incident affects thousands of people across multiple states (California filings reference more than 11,000 individuals; other state notices confirm impacts in additional jurisdictions).
Property management companies like JRK typically store sensitive information related to tenant screening and lease applications. Based on the company’s notices, information that may have been involved includes:
The Lyon Firm has represented consumers nationwide in numerous data breach cases against companies that failed to properly protect sensitive personal information. We settled numerous cases under similar circumstances and we are confident we can rightly compensate all victims through legal recourse.
If you received a notice from JRK Property Holdings about this data breach, contact The Lyon Firm today to discuss your rights and options. Call (513) 381-2333 or reach out online for a free, confidential case review.
Details of this incident are based on JRK Property Holdings’ public filings with state attorneys general and other publicly reported information, which may be incomplete or subject to change. This article does not accuse JRK Property Holdings of any wrongdoing, and no conclusions about liability should be drawn from the reporting of a data breach.
Taking the first step doesn’t have to be complicated. In just a few minutes, you can share the basics of your case, and our team will guide you from there: