Cybersecurity threats significantly impact the real estate and construction sectors.
Thailand, August 12, 2025
The construction and real estate sectors are grappling with rising cybersecurity threats such as phishing, ransomware, and data breaches. A recent report highlights a decline in attack campaigns targeting these industries, with a noted increase in ransomware victims. The report stresses the need for enhanced cybersecurity strategies as digital integration grows, as well as the importance of leveraging emerging technologies to safeguard sensitive information against evolving threats.
The recent report analyzing the cybersecurity threat landscape within the real estate and construction sectors has unveiled troubling insights. Over the last three months, the industry has seen a decrease in attack campaigns but remains vulnerable to various cyber threats including ransomware and data breaches.
In the past 90 days, the real estate and construction industry was identified as a target in 2 out of 16 attack campaigns, marking a decrease from the previous period, where the sector faced a staggering 25% of campaigns. Notably, these campaigns occurred in May and July, involving suspected threat actors primarily from China and Thailand.
The two identified campaigns primarily targeted web applications and operating systems. One campaign, attributed to the Chinese group known as Volt Typhoon, had a global target range while the other, linked to Thai-speaking cybercriminals identified as CCTH2501, specifically focused on Thailand. Despite the lowered activity, the advanced persistent threats impacting the sector remained minimal.
The report highlights that the real estate and construction industry ranked 12th out of 14 sectors in terms of detected vulnerabilities, accounting for 2.6% of all industry-linked critical vulnerabilities. Key concerns include Cross-Site Scripting (XSS) and clickjacking attacks, which saw a significant rise. Only a small number of injection attacks and a stable risk level associated with Remote Code Execution (RCE) were reported during this time.
Ransomware incidents have become a pressing concern in the industry, with a total of 121 verified victims reported, making up 8.7% of all ransomware victims during the analyzed period. Though this represents a 16% decrease from the previous quarter, the industry’s share of victims has increased.
Throughout the past three months, a notable trend in ransomware activity became evident, especially during May, where there were spikes in victim counts. A diverse range of ransomware groups targeted the industry, with a significant percentage focusing on construction and property management IT systems.
In terms of underground activity, the report noted 1,176 mentions of the real estate and construction industry on dark web forums, accounting for 1.9% of industry chatter overall. This chatter increased, highlighting an alarming trend in cybersecurity incidents, particularly data leaks, ransomware, and data breaches that suggest an increase in targeted attacks against this sector. Specific emerging trends include notable increases in data leaks and breach incidents from misconfigured cloud storage and third-party vulnerabilities.
The coalition of complexities in operations and reliance on third-party providers puts the real estate and construction sectors at a heightened risk. Emerging technologies such as artificial intelligence and machine learning are increasingly seen as pivotal in shaping future cybersecurity architectures that could address these challenges effectively.
Data leaks, ransomware attacks, and data breaches are the most prevalent types of attacks faced by the industry.
In the past three months, the industry experienced 2 out of 16 observed attack campaigns.
42 out of 72 ransomware groups, or 58%, targeted the real estate and construction sector during the reported period.
The report noted 1,176 mentions on dark web channels, indicating growing concerns and discussions around cybersecurity for the industry.
Emerging technologies like artificial intelligence and machine learning are emphasized for their potential in enhancing cybersecurity strategies.
South Lake Tahoe and Salt Lake City, August 13, 2025 News Summary Major moves are unfolding…
Morris, Illinois, August 13, 2025 News Summary District leaders unveiled a financing roadmap to fund a…
1506 Van Ness Ave, August 13, 2025 News Summary City leaders propose a 36-month market-rate bridge…
First Hill, Seattle, August 13, 2025 News Summary A private K–5 school has applied for a…
Hamburg, August 13, 2025 News Summary Plancraft, a Hamburg-based construction software startup, closed a €38 million…
Alabama, August 13, 2025 News Summary Birmingham-based construction and program management firm HPM has partnered with…