Lincoln Property Company Commercial
Lincoln Property Company Commercial LLC, a privately held commercial real estate firm founded in 1965 and headquartered in Dallas, Texas, has disclosed a data breach that was discovered earlier this year. The company is one of the nation’s largest diversified commercial real estate operators, managing and leasing over 720 million square feet of space across the United States and Europe.
The breach was reported to the California Attorney General and the Massachusetts Office of Consumer Affairs and Business Regulation on Oct. 1, 2026, and to the Texas Attorney General on Oct. 2, 2026. According to state filings, 6,585 Texas residents and 540 Massachusetts residents were affected. Lincoln discovered the breach on March 24, 2026, and began notifying consumers on Oct. 1, 2026.
The breach was caused by a ransomware attack. After detecting the cybersecurity incident, Lincoln promptly engaged third-party cybersecurity experts to investigate and contain the situation, according to the company’s notification to consumers. The investigation determined that an unauthorized party had gained access to certain files containing personal information. The company confirmed that the incident has since been contained.
About a week after the breach was discovered, on April 1, 2026, a ransomware group known as INC Ransom posted a claim on the dark web.
The post appeared on the tor network and stated that the group had obtained 800 GB of confidential data from Lincoln Property Company. The stolen data reportedly included client information from major firms and government entities, along with contracts, NDAs, closed deals, personal and investment data, project files and drawings. Financial records such as planning documents, accounting data, investment memorandums, audits from 2021 through 2026 and investor information were also reportedly among the compromised files.
Lincoln’s investigation continued for several months. On Sept. 3, 2026, the company determined which individuals had their personal information impacted. The types of personally identifiable information exposed included names, addresses, Social Security numbers, driver’s license numbers, government-issued ID numbers, financial information (such as account numbers or credit and debit card numbers) and dates of birth.
Protected health information was also exposed, including medical information and health insurance information.
Lincoln Property Company Commercial’s response
Affected individuals were notified by U.S. Mail. Because the breach exposed highly sensitive information, including Social Security numbers, financial account details and health records, Lincoln is offering a complimentary 24-month membership to Experian IdentityWorks. This service includes three-bureau credit monitoring, fraud resolution services and up to $1 million in identity theft insurance. The identity theft insurance is underwritten by American Bankers Insurance Company of Florida, an Assurant company, according to the notification letter.
To enroll, affected individuals can visit the Experian IdentityWorks enrollment page and enter the activation code included in their notification letter. A credit card is not required for enrollment. The deadline to enroll is Dec. 31, 2026.
In addition, identity restoration support is immediately available for 24 months from the date of the notification letter. This service does not require enrollment. Through this service, Experian Identity Restoration agents can help investigate and resolve incidents of fraud. This includes contacting credit grantors to dispute charges, assisting with placing credit freezes and working with government agencies to help restore affected individuals’ identities. The terms and conditions for identity restoration are available online.
The company also noted in its notification that even after the Experian IdentityWorks membership expires, affected individuals will continue to receive identity restoration support through Experian IdentityWorks ExtendCare.
Affected individuals who have questions or need help enrolling can call 833-918-1105, Monday through Friday, 8 a.m. to 8 p.m. Central Time.
