Strauss Borrelli PLLC, a leading data breach law firm, is investigating Income Property Investments Inc. regarding its recent cybersecurity incident. The Income Property Investments cybersecurity incident may impact the privacy of sensitive personal information belonging to an undetermined number of individuals.
ABOUT INCOME PROPERTY INVESTMENTS INC.:
Income Property Investments is a real estate and property management company based in California. Today, Income Property Investments’ diversified multi-state portfolio includes hotels, conventional and affordable apartment complexes, commercial buildings, townhomes, and single family homes.2 Accordingly, Income Property Investment’s teams address everything from regulatory compliance, physical repairs, capital renovation projects, financial accounting, advertising, and a wide array of other property management activities.2 Income Property Investments is headquartered in San Dimas, California.
WHAT HAPPENED?
Recently, it was reported by an online source that Income Property Investments had experienced a cybersecurity incident impacting the privacy of its data. According to this source, a cybersecurity researcher discovered a non-password-protected database that contained thousands of records belonging to Income Property Investments.1 The exposed database contained 170,360 records with a total size of 116.24 GB.1 In a limited sampling of the exposed documents, the researcher saw spreadsheets detailing motel-employees’ PII, including names, physical addresses, email addresses, date of birth, and Social Security number in plain text.1 The database also showed property inspection reports, notices to vacate (evictions), employee terminations and demotion letters, petty cash statements, receipts, and expense reports (some of which contain the card type used to pay and its last 4 digits).1
According to the source, after discovering the database the researcher notified Income Property Investments of the exposure. Income Property Investments did not issue a reply but later that day public access to the documents was restricted.1 At this time, it is not known how long these documents were exposed to the public or if anyone else may have accessed the database.1 As of June 24, 2025, Income Property Investments has not publicly acknowledged the data exposure or confirmed whether the incident resulted in a data breach.
If you received a breach notification letter from Income Property Investments Inc.:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
