Cybersecurity Threats Impacting Real Estate & Construction Industry

Thailand, August 12, 2025

News Summary

The construction and real estate sectors are grappling with rising cybersecurity threats such as phishing, ransomware, and data breaches. A recent report highlights a decline in attack campaigns targeting these industries, with a noted increase in ransomware victims. The report stresses the need for enhanced cybersecurity strategies as digital integration grows, as well as the importance of leveraging emerging technologies to safeguard sensitive information against evolving threats.

Cybersecurity Threats Impacting Real Estate & Construction Industry

The construction and real estate sectors are experiencing a notable shift in their cybersecurity landscape, according to insights from a recent industry report that analyzed data over the last three months. This analysis highlights the ongoing challenges these industries face concerning cybersecurity threats, particularly from phishing, ransomware, and advanced persistent threats (APTs).

Over the past 90 days, the real estate and construction sectors were targets in only 2 out of 16 observed attack campaigns, representing a decline from the previous share of 25%. These two attack campaigns occurred in May and July, with suspected involvement from Chinese Volt Typhoon and a group of Thai-speaking cybercriminals known as CCTH2501.

Geographic and Campaign Insights

Thailand emerged as the only country affected in both campaigns, illustrating the localized nature of some threats. The Volt Typhoon campaign was more extensive, targeting victims across several continents, while CCTH2501 focused specifically on the Thai market. Both campaigns primarily targeted web applications and operating systems, with Volt Typhoon additionally breaching routers and network monitoring tools.

Phishing and Ransomware Surge

In recent months, there has been an alarming rise in discussions about the real estate and construction industries across various underground forums, with 1,176 mentions recorded, translating to 1.9% of all detected chatter. This position ranks the sectors 13th out of 14 in industry mentions.

The most notable conversations revolved around three main issues: data leaks, ransomware incidents, and data breaches. Specific trends reported include:

• Data leaks increased from 105 to 171 mentions, indicating potential threats from misconfigured cloud storage and third-party vulnerabilities.
• Ransomware mentions surged from 77 to 172, particularly concerning campaigns aimed at property management and IT sectors in construction.
• Data breaches grew from 86 to 134 mentions, showcasing a consistent trend toward compromising corporate networks.
• Reported hacks saw a rise from 9 to 29 instances.
• Web exploits rose from 9 to 17, likely related to vulnerabilities in property listing platforms.

Vulnerabilities and Ransomware Victims

Despite being largely overshadowed by other sectors, the real estate and construction industry recorded 121 confirmed ransomware victims during the recent quarter. While this indicates a 16% decrease from the previous 144 victims, the industry’s percentage share of overall ransomware attacks increased from 7.2% to 8.4%. The data suggests that sustained activity in ransomware is a significant threat, particularly highlighted in May when victim counts reached 50, 39, and 40 across that month.

The analysis further highlights that 42 out of 72 recognized ransomware groups were specifically targeting the real estate and construction sectors, with dominant players including gangs like Play, Qilin, and Safepay.

Future Directions in Cybersecurity

As the real estate and construction industries continue to expand their digital footprint, challenges associated with cybersecurity persist. Many companies in these sectors rely heavily on third-party providers, complicating the management of their cybersecurity protocols. Emerging technologies such as artificial intelligence and machine learning are looked upon as potential solutions for enhancing protective measures against this evolving threat landscape.

The industry must prioritize strengthening cybersecurity strategies to safeguard sensitive information, thereby maintaining trust with clients, partners, and stakeholders. Continuous monitoring and adaptation to change will be crucial in mitigating future threats.

FAQs

Chart: Key Cybersecurity Trends in Real Estate & Construction

Below is a summary chart of key features from the report:

• Attack Campaigns Recorded: 2 out of 16 (12.5%)
• Ransomware Victims: 121 total
• Data Breaches: Increased from 86 to 134
• Data Leaks: Increased from 105 to 171
• Ransomware Mentions: Increased from 77 to 172

Deeper Dive: News & Info About This Topic

Additional Resources

• Clark Hill: 2025 Commercial Real Estate Outlook
• RSM: 2025 Cybersecurity Snapshot
• WTW: Cybersecurity in Real Estate
• Marsh: Cyber Threats in Real Estate
• HousingWire: How Gen AI is Impacting Cybercrime
• Wikipedia: Cybersecurity
• Encyclopedia Britannica: Cybersecurity
• Google Search: Cybersecurity in Real Estate
• Google Scholar: Cybersecurity Real Estate
• Google News: Cybersecurity Real Estate