AppFolio, Inc., a real estate platform, experienced a cybersecurity incident where an unauthorized individual gained access to sensitive personal information (PII) of an unspecified number of individuals. The compromised data included names, addresses, dates of birth, and Social Security numbers—highly sensitive details that could expose affected individuals to identity theft, financial fraud, or other malicious activities. The breach prompted a legal investigation by Lynch Carpenter, LLP, a national class action law firm, which is assessing potential compensation claims for victims. The incident underscores significant risks to customer privacy and trust, with potential long-term reputational and financial repercussions for AppFolio. The exact scope of the breach, including the number of impacted individuals and the method of unauthorized access, remains undisclosed, heightening concerns about data security practices within the company.

AppFolio, a cloud-based real estate software provider, suffered a data breach due to a vulnerability in its third-party vendor, Salesloft, which allowed unauthorized access to its CRM system between August 8–18, 2025. The breach exposed personal information (names and Social Security numbers) of 72,444 U.S. individuals, including residents across multiple states. The incident was detected on August 22, 2025, with investigations confirming the compromise on September 18, 2025. AppFolio disabled Salesloft integrations, notified affected individuals (starting October 6, 2025), and offered 24 months of free credit monitoring and identity theft protection. The breach stemmed from a supply-chain attack, where threat actors exploited a flaw in Salesloft’s system to exfiltrate sensitive customer data from AppFolio’s hosted environment. Regulatory disclosures were made to state authorities, including Attorney Generals' offices in Maine, Massachusetts, Oregon, Texas, Montana, and New Hampshire.

AppFolio, Inc. experienced a significant data breach originating from a security incident at Salesloft, one of its third-party vendors. The breach, discovered on August 22, 2025, involved cybercriminals infiltrating Salesloft’s inadequately secured network, thereby gaining unauthorized access to AppFolio’s files. The forensic investigation confirmed that sensitive personal information of tens of thousands of individuals was compromised, including names and Social Security numbers (SSNs).The exposed data poses severe risks, as cybercriminals may exploit it for identity theft, dark web sales, or financial fraud. The breach has prompted legal action, with Murphy Law Firm investigating a potential class action lawsuit on behalf of affected individuals to recover damages. The incident underscores critical vulnerabilities in AppFolio’s vendor security protocols, leading to large-scale exposure of highly sensitive personal data with long-term repercussions for victims.