American student housing developer breached, hackers claim


Landmark Properties, a real estate developer with over $15 billion in assets under management, allegedly had its systems breached, with cybercriminals claiming to have stolen over a terabyte of data.

The company’s name appeared on the Morpheus ransomware gang’s dark web leak site, which criminals use to showcase their latest victims. The post claims that cybercrooks took 1.2 terabytes of data from the company.

We have reached out to Landmark Properties for comment and will update the article once we receive a reply.

ADVERTISEMENT

Meanwhile, threat actors claim they’ve accessed a trove of data: from financial documents and client details to confidential agreements and active deals. Data samples attached to the dark web post several passport copies, some of which indicate expired documents. Other attachments cover the company’s financials, documents marked “confidential.”

Stefanie Ernestas Naprys Paulina Okunyte Marcus Walsh profile
Stay informed and get our latest stories on Google News

If confirmed, the attack could endanger individuals and entities whose data was exposed. For example, attackers could leverage the details for identity theft, financial fraud, or even corporate espionage.

The Cybernews researchers believe that exposure of client data, financial documents, and internal operations can lead to legal claims, scrutiny, and even reputational damage.

“When confidential agreements, HR records, and active deal data are leaked, it not only puts individuals at risk but also jeopardizes client trust, competitive positioning, and potential business negotiations. The fallout can include reputational damage, regulatory penalties, and loss of business relationships,” the team said.

Morpheus data leak site
Screenshot of the gang's dark web leak site. Cybernews.

Headquartered in Athens, Georgia, Landmark Properties is one of the largest student housing developers in the US. The company has over 115 residential communities with over 71,000 beds under the company’s management, and assets worth over $15 billion.

The company operates the Standard, Legacy, Saga, the Retreat, Tradition, and other well-known American brands for student housing.

ADVERTISEMENT

The culprit behind the attack, Morpheus, is a relative newcomer, having appeared on the scene in late 2024. Researchers at SentinelOne believe the gang has connections to another cybercriminal cartel, HellCat.

According to Cybernews’ dark web tracker Ransomlooker, Morpheus victimized at least six organizations this year, while HellCat added 16 to its list.