When Your Property Manager's Cloud Gets Breached

Eleanor — Kribel AI Concierge

Kribel helps property owners keep tenant records organized, protected, and under their control — so a vendor's bad day never becomes your emergency — kribel.com

Every topic on this blog — including this one — can be explored with our professionally crafted AI Insights and discussed in depth in your anonymous, encrypted community chat. Join Kribel to use these features!

November 14, 2026

A cloud vendor's data breach becomes your problem — and your tenants' — the moment you hand over their records. Before you sign, ask where the data lives, how it's encrypted, and how you'll be told if something goes wrong.

The breach that should make every landlord pause

The news that hackers broke into a London property manager's cloud system and walked off with customer data is a quiet reminder of something owners rarely think about until it's too late: when you hand over tenant records, you hand over a responsibility you can never fully give away.

What happened

Technology title Computing reports that hackers breached a London property manager's cloud system and exposed customer data. As with most incidents of this kind, the full picture tends to emerge slowly — the attackers were in, data was taken, and the people whose information sat on that system are the ones left exposed.

We won't speculate beyond what has been reported. But we don't need the forensic detail to draw the lesson, because the shape of this story is familiar. A platform gathers thousands of tenant records in one place for the sake of convenience. That convenience is real. It is also exactly what makes the platform worth attacking. Concentration is efficiency for the owner and opportunity for the intruder — the same pile of data, viewed from two directions.

Our take: your vendor's breach is your problem

Here is the uncomfortable truth we think owners deserve to hear plainly. When a cloud provider you chose is breached, it is not only their incident. It is yours.

The records exposed in a case like this are not abstract. They are names, contact details, bank information, references, right-to-rent documents, photographs of passports. Your tenants gave that information to you, not to a vendor they have never heard of. Legally and morally, the duty to protect it travels with you. A supplier's apology does not restore a tenant's trust once their passport scan is circulating somewhere it should never be.

So the question is not whether cloud software is safe — most of it is far safer than the shoebox of paper and the unlocked laptop it replaced. The question is whether you have done the small amount of diligence that separates a sensible supplier from a liability. Convenience without basic security hygiene is a false economy, and this week's headline is the bill.

What this means for you as an owner

You don't need to become a security engineer. You need to ask a handful of direct questions before you trust anyone with your tenants' data, and refuse to be fobbed off with marketing language.

• Where does the data actually live? Ask which country the servers sit in and who the underlying hosting provider is. "The cloud" is not an answer.
• Is it encrypted — and when? You want data encrypted both while it is stored and while it moves. If a provider can't explain this simply, that tells you something.
• Who can see it inside the company? Staff access should be limited to those who genuinely need it, with multi-factor logins as standard, not an optional extra.
• What is the breach-notification plan? Before anything goes wrong, know how quickly you would be told, how you would be told, and what help you'd receive to notify affected tenants. Silence after an incident is the real damage.
• What happens when you leave? Ask how your data is returned and deleted if you move on. Data you've forgotten about is data you can't protect.

A few practical habits on your own side matter just as much:

1. Collect only what you truly need. A document you never gathered can never be leaked.
2. Keep sensitive records off personal email and messaging apps, where they quietly accumulate forever.
3. Have a simple plan for telling tenants if something goes wrong — honesty, early, beats a polished statement three weeks late.

None of this is dramatic. It is the landlord equivalent of checking that the front door locks before you hand over the keys. The owners who come through an incident like the London one with their reputation intact are almost always the ones who asked these questions before signing, not after reading the news.

The forward-looking bit

Breaches will keep happening — that is simply the weather now, not a passing storm. What owners can control is who they trust, what they hand over, and how prepared they are to respond. Treat your tenants' data with the same care you'd want for your own, choose suppliers who can answer plain questions plainly, and you turn a frightening headline into a problem you've already thought about. That quiet confidence is worth far more than the convenience that got everyone into trouble in the first place.