Income Property Management Data Breach Exposes Sensitive Personal Information Income Property Management Co. (IPM), a Portland, Oregon-based property management firm, disclosed a data breach involving unauthorized access to its network. The company first detected suspicious activity on December 22, 2024, but did not publicly announce the incident until March 26, 2026 over 15 months later. An investigation revealed that an unauthorized actor exfiltrated files from IPM’s network on or around January 29, 2025, roughly five weeks after the initial detection. The company spent nearly a year reviewing the compromised files, completing the process on December 4, 2025, before confirming that sensitive personal data had been exposed. The breach affected an undisclosed number of individuals in the U.S., with exposed information including: - Driver’s license numbers - Alien registration numbers - Health insurance details (provider names and ID numbers) - Dates of birth - Social Security numbers - Medical conditions - Passport numbers In response, IPM is offering free credit monitoring for individuals whose Social Security numbers were compromised, along with fraud assistance through HaystackID. Affected parties can contact a dedicated call center at 1-855-329-7315 (available for 90 days from the notice date) or reach IPM by mail at 1800 SW 1st Ave. #220, Portland, OR 97201 until April 1, 2026, after which the address will change to 11740 SW 68th Parkway, Suite 100, Tigard, OR 97223.