umbrellaproperties.com PART2 Listed by dispossessor Ransomware Group

On May 22, 2024, the ransomware group Dispossessor added umbrellaproperties.com PART2 to its public leak site, claiming that it had exfiltrated internal files from the Oregon-based rental property management company during a ransomware attack.

Primary Disclosure Details

The listing on the Dispossessor leak site states that internal files were taken from Umbrella Properties, a firm that manages apartments, duplexes, and townhouses across Eugene, Springfield, Junction City, and Bend. The disclosure includes a video preview of files labeled PART#1 and explicitly marks this as PART2 of the release. The leak site does not quantify how many records were affected, nor does it list specific document types beyond the general description of internal files exfiltrated in a ransomware attack. No ransom demand amount or payment deadline appears in the public posting.

Why This Matters for You and Your Family

If you have ever rented from Umbrella Properties, lived in one of its units, or applied for housing through the company, your personal information may now sit in an attacker-controlled archive. Landlords and property managers routinely collect full names, dates of birth, Social Security numbers, driver’s license copies, bank account details for rent payments, employment history, and references. When those records leave the company’s control, the exposure is permanent. Even if the exact volume of records remains unknown, the fact that internal files were allegedly exfiltrated means anyone whose data was stored on the compromised systems now faces heightened risk of identity theft, fraudulent loan applications, or rental-application scams that target people with similar housing histories.

Doxxing and Identity-Chain Implications

Real estate records are high-value connectors in doxxing chains because they link a person’s legal name and current or past address to email accounts, phone numbers, and family members. Once attackers possess those links, they can pivot to breached credential databases, public records aggregators, and social-media profiles to build a complete picture. A single address tied to your name can reveal your children’s names and ages, especially when school or sports forms were submitted as part of a rental application. That information then cascades into gaming accounts, where usernames and passwords are frequently reused. Credential leaks of this nature routinely lead to account takeovers that expose chat logs, friend lists, and location data, further expanding the identity chain.

Dispossessor’s Known Track Record

Public reporting attributes the first activity of the Dispossessor ransomware group to late 2023. The group has since listed dozens of organizations, focusing primarily on small and mid-sized businesses in the United States. Its typical playbook begins with initial access gained through compromised remote desktop credentials or phishing, followed by exfiltration of sensitive files before encryption. Rather than relying solely on encryption pressure, Dispossessor emphasizes public shaming and gradual data dumps when victims do not pay. The PART2 label on the Umbrella Properties listing fits this pattern of staged releases designed to increase pressure over time. The group’s leak site remains active and continues to publish new victims on a regular basis.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used on umbrellaproperties.com or related tenant portals anywhere it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address and credentials.
• Let remediation specialists handle takedown requests across data brokers and leak repositories on your behalf while you focus on securing remaining accounts.

The Umbrella Properties breach is a reminder that housing-related data is now a routine target for financially motivated ransomware operators. Taking concrete steps today limits how far attackers can travel down the identity chain that begins with a rental application. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts—capabilities designed precisely for incidents like this one.