The number of cyberattacks on companies in the British real estate sector significantly increased last year. Current data confirms a 17 per cent rise, with a total of 208 registered incidents in 2025. This development highlights the growing threat to industry players, who are increasingly becoming targets for cybercriminals.
Karis Insurance, a company specialising in real estate insurance, emphatically points out that real estate agents and valuers are increasingly targeted due to the extensive personal data they must store for compliance checks. This sensitive information, which is essential for adhering to legal regulations and processing transactions, makes real estate service providers attractive targets for attackers.
Reasons for increased vulnerability
The necessity to collect and manage detailed personal client data carries an inherent risk. From copies of identification documents and bank details to address information, all this data is highly valuable to cybercriminals. The industry must therefore continuously review and adapt its security measures to meet the complex threat landscape. This includes not only technical protective mechanisms but also training staff in handling sensitive information and recognising potential attacks.
Real estate companies are not only responsible for financial transactions but also for complying with strict data protection regulations, such as the GDPR in Europe or similar frameworks in the United Kingdom. A successful cyberattack can lead not only to significant financial losses due to stolen data or operational disruptions, but also to lasting damage to the company's reputation and high penalties. The 208 incidents in 2025 underscore the urgency of implementing preventive strategies.
Recommendations for the industry
- —Regular review and updating of IT security systems and software.
- —Employee training on phishing, social engineering, and secure data handling.
- —Implementation of two-factor authentication (2FA) and strong password policies.
- —Regular backups of critical data to ensure quick recovery in the event of an attack.
The rising number of cyberattacks underscores the necessity for real estate companies to view digital security as an integral part of their business strategy. Only through proactive measures and a comprehensive risk assessment can the increased threat level be effectively countered to protect client and company data and ensure business continuity.
