Greystar Real Estate Partners Discloses Data Breach Affecting 333 Washington Residents Greystar Real Estate Partners LLC, the largest apartment operator in the U.S., based in Charleston, South Carolina, reported a data breach that occurred in May 2026. The incident impacted 333 residents of Washington state. Between May 1 and May 18, 2026, an unauthorized third party accessed an employee email account and obtained sensitive files. After detecting and containing the breach, Greystar launched an investigation with external cybersecurity experts. Exposed data included names, Social Security numbers, driver’s license or Washington ID numbers, financial and banking details, and full dates of birth. The breach was disclosed to the attorneys general of Massachusetts and Washington on August 27, 2026, with consumer notification letters mailed the same day. In response, Greystar is providing affected individuals with 24 months of free credit monitoring and identity restoration services via Experian IdentityWorks. Enrollment requires an activation code from the notification letter, valid until November 30, 2026. A dedicated call center (1-833-931-4653) has been established for assistance, operating Monday through Friday, 8 a.m. to 8 p.m. Central Time.

Greenhouse Apartments Data Breach Under Investigation After SAFEPAY Ransomware Attack A cybersecurity incident at Greenhouse Apartments, a 489-unit pet-friendly community in Kennesaw, Georgia, has exposed the sensitive personal data of 3,473 individuals across the U.S., including six residents of Maine. The breach was discovered on September 21, 2025, following unauthorized access between September 20–21, 2025. The SAFEPAY ransomware group claimed responsibility for the attack, publicly posting about it on the dark web on October 24, 2025. Greenhouse Apartments, managed by Greystar, engaged a national cybersecurity firm to investigate and mitigate the impact. While the exact types of compromised data remain unspecified, the firm notified the Maine Attorney General on March 17, 2026, and began mailing breach notifications to affected individuals on March 13, 2026. Class action law firm Shamis & Gentile P.A. is now investigating potential legal claims for those impacted, citing possible eligibility for compensation. The incident highlights ongoing risks tied to ransomware attacks targeting property management systems.