Almeida Law Group is investigating a data breach at JRK Property Holdings, Inc. The breach occurred on March 26th, 2026. If you were affected, contact Almeida Law Group.
About JRK Property Holdings, Inc.
JRK Property Holdings, Inc. is a private real estate investment and property management firm founded in 1991 and headquartered in Los Angeles, California. The company acquires, repositions, and operates multifamily apartment communities, hotels, and commercial properties across the United States. As of 2025, it ranked among the 50 largest apartment owners in the country, with approximately 26,938 units, total assets exceeding $9 billion, and more than 700 employees. Its subsidiaries include JRK Hotel Group and JRK Residential Group.
What Happened?
JRK Property Holdings, Inc. was listed in a California Attorney General sample breach notice published on July 27th, 2026. According to that filing and JRK’s own notice to affected individuals, the company detected suspicious activity on its network on March 26th, 2026 and immediately engaged cybersecurity experts to investigate. The investigation concluded on June 28th, 2026, determining that an unauthorized individual may have accessed certain files and folders containing personal information. The exposed data includes names, addresses, Social Security numbers, driver’s license numbers, government-issued identification numbers, and financial account information. JRK reported the breach to the attorneys general in California, Massachusetts, Nebraska, New Hampshire, and Texas. The company is offering identity theft protection through Experian IdentityWorks to affected individuals.
JRK also filed an earlier notification with the New Hampshire Attorney General on May 11th, 2026, which referenced an initial investigation conclusion date of April 22nd, 2026, and specified that the data involved for those recipients included names, addresses, Social Security numbers, and bank account information. The later California filing lists a broader set of data types, consistent with an expanded forensic investigation. Separately, the ransomware group known as “The Gentlemen” claimed responsibility for the attack on its leak site on April 4th, 2026, alleging it exfiltrated data including 111,000 Social Security numbers. That figure and other specifics on the group’s leak site are unverified attacker claims, not company-confirmed facts. The claim has been reported by cybersecurity monitoring services including DeXpose and Ransomware.live. JRK’s earlier New Hampshire notice stated the company did not believe affected individuals’ information had been or would be made public. As of July 31st, 2026, no class action lawsuit has been filed, but at least three law firms — Federman & Sherwood, Migliaccio & Rathod LLP, and Shamis & Gentile P.A. — have announced investigations into the breach.
Key Facts at a Glance
- Company or Organization: JRK Property Holdings, Inc.
- Industry: Real estate investment and property management (multifamily, hospitality, commercial)
- Location: Los Angeles, California
- Incident type: Unauthorized network access; ransomware group claimed responsibility
- Date of breach: March 26th, 2026
- Date breach discovered: June 28th, 2026
- Date of consumer notification: July 27th, 2026 (California AG filing); May 5th, 2026 (earlier New Hampshire mailing)
- Total persons affected: 11,120 (as reported to the California and Texas attorneys general)
- Identity theft protection offered: Experian IdentityWorks (credit monitoring and identity theft protection; enrollment deadline and duration listed as variable in the notice template)
- Litigation status: No class action filed as of July 31st, 2026; investigations announced by Federman & Sherwood, Migliaccio & Rathod LLP, and Shamis & Gentile P.A.
- Source: California Attorney General sample breach notice — https://oag.ca.gov/ecrime/databreach/reports/sb24-627223; New Hampshire DOJ notification letter — https://mm.nh.gov/files/uploads/doj/remote-docs/jrk-property-holdings-20260511.pdf; DeXpose — https://www.dexpose.io/the-gentlemen-ransomware-group-strikes-jrk-property-holdings/; Ransomware.live — https://www.ransomware.live/id/anJrLmNvbUB0aGVnZW50bGVtZW4=
What Should You Do?
If you received a notification letter from JRK Property Holdings, enroll in the complimentary Experian IdentityWorks membership as soon as possible by visiting the enrollment link provided in your notice and using the activation code included with your letter. Whether or not you received a letter, you should place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent new accounts from being opened in your name. Review your bank and financial account statements carefully for unauthorized transactions, and monitor your credit reports for unfamiliar accounts or inquiries. You can obtain free credit reports from all three bureaus at AnnualCreditReport.com. If you believe your identity has already been misused, visit IdentityTheft.gov to report the incident and get a personalized recovery plan.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
