2026 Income Property Management Co. — network intrusion (files taken Jan 2025; notices Mar 2026)
Data compromised
SSNs, DOB, driver’s license, passport, alien registration, health insurance details, medical conditions (varies)
Technical writeup
Income Property Management Co. (IPM / CRMG), a Portland-area multifamily and commercial property manager, disclosed that it detected unauthorized activity on December 22, 2024, and that an investigation found files were taken from its network on or around January 29, 2025. A file review completed by December 4, 2025 determined those files contained personally identifiable information. Public consumer notices—including a March 27, 2026 PR Newswire release—stated that data elements could include driver’s license numbers, alien registration numbers, health insurance provider and member ID numbers, dates of birth, Social Security numbers, medical conditions, and passport numbers, varying by individual. IPM offered complimentary credit monitoring where SSNs were involved and operated a dedicated call center. Nationwide victim counts were not published in the initial notice wave.
Root cause
Unauthorized network access and file exfiltration (details limited in public notices)