Rockrose Development Suffers Major Data Breach in July 2025, Impacting 47,000 Individuals Rockrose Development, a New York-based real estate firm, confirmed a July 2025 data breach exposing sensitive personal information of 47,392 residents and employees. The compromised data includes names, Social Security numbers, taxpayer IDs, driver’s license and passport numbers, financial account details, health insurance records, medical information, and online credentials. The ransomware group Play claimed responsibility for the attack, alleging it stole documents related to clients, payroll, accounting, and taxes. Rockrose has not verified the gang’s claims, nor disclosed whether a ransom was paid or how the breach occurred. The company is offering affected individuals 24 months of free identity protection through Experian, with an enrollment deadline of March 31, 2026. Play, active since June 2022, employs a double-extortion tactic, demanding payment for both decryption keys and to prevent public release of stolen data. In 2025 alone, the group has claimed 41 confirmed attacks and 339 unconfirmed incidents, with construction and real estate firms among its recent targets. Other victims this year include Rock Solid Stabilization & Reclamation, Gorham Sand & Gravel, Thomas Safran & Associates, and All States Materials Group. The Rockrose breach is the largest ransomware attack on a U.S. construction or real estate firm tracked since 2018, accounting for the majority of the 69,513 records compromised in the sector this year. Such attacks can disrupt critical operations, including payroll, billing, and communication systems, while exposing victims to fraud risks. Founded in 1970, Rockrose has developed over 15,000 residential units and nearly 6 million square feet of office space in New York and Washington, D.C.