MalwareProfessional ServicesProfessional ServicesRansomwareRansom DemandedData ExfiltratedData PublishedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Harcourts Prime Properties

bd_0898dc40d53e6abc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 20, 2025

Filed

Apr 3, 2025

To disclose

14 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Harcourts Prime Properties →

Harcourts Prime Properties experienced a ransomware incident on March 18, 2025. On March 20, 2025, the company was notified of a ransom demand on the Dark Web containing sample Agent Information sheets. The breach may have exposed names, contact information, and social security numbers. The company contained the incident, enhanced security protocols including MFA, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 14 days

Mar 18, 2025

Begins

Mar 20, 2025

Discovered

Apr 3, 2025

Filed

vs. sector median

17 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitekillsecbd_b3c80073da2e29ca2025-03-18 · +16dVerified

Name: Harcourts Prime Properties
norm: harcourts prime properties
Domain: harcourtsprime.com

Name: Harcourts Prime Properties
norm: harcourts prime properties
Domain: harcourtsprime.com
Industry: Professional Servicesllm

Discovered: Mar 20, 2025
Breach occurred: Mar 18, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified relevant regulatory authorities

During the incident: Launched a thorough investigation
Took steps to secure our systems
Took immediate steps to contain the incident and prevent further unauthorized access
Notified relevant regulatory authorities
Changes made: Enhancing our security protocols, including multi-factor authentication and system monitoring
Enroll in Credit Monitoring that includes: Daily credit report monitoring from major bureaus, Real-time alerts of suspicious activity, Identity theft insurance and dedicated resolution support
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-600857
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2025
Raw hash: a66d8fabe1efeae2b2baa9711dc38f545f4dd895ace78a5fe514f4d50ddf3bcc

Linked disclosures

Ransomware claims (1)

Reporting entityHarcourts Prime Properties

Victim entityHarcourts Prime Properties

Incidentdiscovered Mar 20, 2025

Stated responseLaunched a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov