Schottenstein Property Group Inc Listed by akira Ransomware Group

On April 25, 2023, real estate company Schottenstein Property Group Inc appeared on the leak site of the Akira ransomware group. The listing states that internal files were exfiltrated during a ransomware attack and that the data includes corporate information tied to customers, details on 80 retail properties across 23 states, and personal information. The group warned that Schottenstein appeared unconcerned about the exposure and that samples would be published soon. Anyone whose personal data or customer records were held by the company may now be at risk of identity theft or further targeting.

Reported Details from the Listing

The Akira leak site posting, archived via ransomware.live, explicitly names Schottenstein Property Group Inc and describes the incident as a ransomware attack in which internal files were taken. It highlights the company’s portfolio of 80 retail properties in 23 states and notes that both corporate customer information and personal information are among the stolen data. The listing does not quantify the number of affected individuals, specify file types beyond “internal files,” or disclose the exact ransom demand. It does claim that some of the customers are “big and well-known,” suggesting the breach could expose high-profile business relationships alongside ordinary customer records.

Why This Matters for You and Your Family

If you have ever been a tenant, customer, vendor, or employee of Schottenstein Property Group or any of its retail properties, your personal information may have been taken. Real estate firms routinely collect names, addresses, Social Security numbers, driver’s license details, bank account information for rent payments, and tax records. Once that data leaves the company’s control, it can be used for tax fraud, account takeovers, or sold on underground markets. Even if the leak site has not yet published every file, the mere confirmation that personal information was allegedly exfiltrated creates immediate exposure for you and anyone whose records were stored in the compromised systems.

Doxxing and Identity-Chain Risks

Ransomware groups like Akira rarely stop at posting generic samples. When personal information surfaces, attackers and opportunistic criminals can link it to your email addresses, phone numbers, usernames, and online handles. A single leaked address or customer file can anchor an identity chain that reveals your children’s names, schools, or gaming accounts. These chains often lead to doxxing, SIM-swapping attempts, or targeted phishing. Credential leaks of this kind frequently cascade into gaming account takeovers, especially when family members reuse passwords or security questions derived from personal records.

Akira Group’s Known Track Record

Public reporting attributes the emergence of Akira to early 2023. The group rapidly built a reputation for double-extortion tactics: encrypting victim networks while simultaneously exfiltrating data for later public release. Prior victims have included organizations across manufacturing, healthcare, and professional services. Akira typically gains initial access through compromised remote desktop protocol credentials or phishing, exfiltrates sensitive files over several days, then demands payment to prevent publication. Their leak site serves both as a shaming mechanism and a marketplace for unsold data, increasing the long-term risk that stolen records will circulate even if the victim pays.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity so you can see exactly what chains back to the Schottenstein breach.
• Rotate any password you ever used with Schottenstein Property Group or its retail properties, and enable 2FA through an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours rather than months.
• Cover the household with DoxxScan family protection that extends to dependents and your children’s gaming accounts, which often become targets when personal information leaks.
• Let remediation specialists handle takedown requests and data-broker removals for you while you focus on securing accounts and watching for fraud.

The Schottenstein Property Group breach is a reminder that real estate customer records remain high-value targets because they contain persistent personal details that are difficult to change. Acting quickly on the confirmed exposure can limit how far attackers carry the identity chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts vulnerable to credential-based takeovers.