Castle Group Data Breach Exposes Sensitive Personal Information in Prolonged Cyberattack Castle Group, a Florida-based property management firm specializing in luxury residential communities, suffered a significant data breach after an unauthorized actor infiltrated its network between September 2025 and February 2026. The company, headquartered in Plantation, Florida, provides high-end property management, financial, and lifestyle services under its "Royal Service" philosophy. The breach was discovered on August 11, 2026, when Castle Group identified that sensitive personal data had been compromised. The company responded by securing its systems and engaging cybersecurity experts to investigate. The Qilin ransomware group later claimed responsibility, announcing on February 17, 2026, via the dark web that it had exfiltrated business and financial records. On August 26, 2026, Castle Group formally disclosed the incident to the Massachusetts and Vermont Attorneys General. The exposed data includes Social Security numbers, government ID numbers, financial account details, credit/debit card information, and health records putting affected individuals at risk of identity theft and financial fraud. Class action law firm Shamis & Gentile P.A. is investigating potential legal claims on behalf of those impacted, with affected parties potentially eligible for compensation. The breach highlights the growing threat of ransomware attacks targeting corporate networks and the long-term risks of prolonged unauthorized access.