On February 19, 2023, Elliott Homes, a home builder operating in Sacramento, Phoenix, and Yuma, appeared on the LockBit 3.0 ransomware leak site. The listing states that internal files were exfiltrated during a ransomware attack. The company has not publicly quantified how many customer or employee records were affected, and the leak-site posting does not detail the specific data types beyond “internal files.” Anyone who purchased a new home from Elliott Homes, worked with the builder, or had their personal information stored in its systems may now be exposed.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch elliotthomes.com
Get alerted the next time elliotthomes.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about elliotthomes.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Primary Disclosure Details
The LockBit 3.0 leak site listing, archived via ransomware.live, states that Elliott Homes was listed on 19 February 2023 after the group claims to have stolen company data. The disclosure indicates that files were taken prior to encryption or during the intrusion, a standard LockBit tactic. No customer count, employee count, or exact file inventory is provided in the primary posting. Elliott Homes has not issued a detailed public breach notification that expands on these facts, leaving the full scope of exposed records unknown at this time.
Why This Matters for You and Your Family
If you bought a home from Elliott Homes in California or Arizona, your name, address, phone number, email, financial details, and possibly Social Security number used during the purchase process could be among the internal files now in criminal hands. Homebuyer data is especially valuable because it ties real-world identity to physical locations and financial commitments. For families, this exposure can lead to targeted phishing, loan fraud, or identity theft that affects credit scores for years. Even if you are not a recent customer, vendors, subcontractors, and employees listed in the stolen files face the same risks.
Doxxing and Identity-Chain Implications
Ransomware groups rarely stop at one dataset. Once internal files leave the victim’s network they frequently appear on multiple underground forums, enabling attackers to link your homebuyer record to other breached accounts. A single email or phone number from the Elliott Homes files can be correlated with credential leaks from retail, social media, or gaming platforms. This creates an identity chain that leads to doxxing, account takeovers, and harassment. Children’s gaming accounts are particularly vulnerable because parents often reuse passwords or security questions tied to family addresses and names found in home-purchase records.