Cybersecurity Threats Impacting Real Estate & Construction Industry

Article Sponsored by:

CMiC Global

CMIC Global Logo

Since 1974, CMiC has been a global leader in enterprise software for the construction industry. Headquartered in Toronto, Canada, CMiC delivers a fully integrated platform that streamlines project management, financials, and field operations.

With a focus on innovation and customer success, CMiC empowers construction firms to enhance efficiency, improve collaboration, and make data-driven decisions. Trusted by industry leaders worldwide, CMiC continues to shape the future of construction technology.

Read More About CMiC: 

Conceptual image showing cybersecurity challenges in the real estate industry

Thailand, August 12, 2025

News Summary

The construction and real estate sectors are grappling with rising cybersecurity threats such as phishing, ransomware, and data breaches. A recent report highlights a decline in attack campaigns targeting these industries, with a noted increase in ransomware victims. The report stresses the need for enhanced cybersecurity strategies as digital integration grows, as well as the importance of leveraging emerging technologies to safeguard sensitive information against evolving threats.

Cybersecurity Threats Surge in Real Estate and Construction Sectors

The latest report on cybersecurity threats in the real estate and construction industries reveals a complex and evolving landscape of risks. Over the past 90 days, the sector has experienced a surprising rise in attack campaigns and ransomware incidents, shedding light on critical vulnerabilities that may jeopardize sensitive client data.

According to the report, the real estate and construction industry was involved in 2 out of 16 attack campaigns, making up about 12.5% of all observed attacks. However, this marks a decrease from the previous quarter, where the sector accounted for 25% of attack campaigns. The identified campaigns, attributed to cybercriminals including the Chinese group known as Volt Typhoon and Thai-speaking threat actors, occurred in May and July, with Thailand being the only country affected in both incidents.

Volt Typhoon’s operations spanned several continents, targeting web applications, operating systems, and routers, while CCTH2501 focused exclusively on victims within Thailand. Despite these incidents, the report indicates that the impact from advanced persistent threats (APTs) remained minimal for the real estate and construction sectors, with only 2 of the 16 observed campaigns aimed at them.

Ransomware Incidents on the Rise

Notably, ransomware incidents have surged in the real estate and construction sector. Overall, 121 victims were recorded, representing a significant share of 8.7% of all ransomware victims during this period. While this reflects a 16% decline from the previous quarter’s total of 144 victims, the sector’s share of ransomware victims still increased from 7.2% to 8.4%.

The report highlights a total of 42 ransomware groups targeting the sector, with prominent players including Play, Qilin, and Safepay, each claiming around 12 victims. A concerning trend is the marked interest in ransomware, particularly noteworthy in May, where victim counts were recorded at 50, 39, and 40 across three months.

Increased Cybersecurity Concerns

In the last 90 days, the real estate and construction sector was mentioned 1,176 times in underground and dark web channels—indicating a rise in cybersecurity chatter. This was attributed mostly to concerns surrounding data leaks, ransomware, and data breaches. Among the noteworthy findings, mentions of data leaks surged from 105 to 171, indicating potential exposure due to misconfigured cloud storage and third-party breaches.

The report also indicated fluctuations in attack vectors against the sector. DDoS activities nearly vanished, suggesting a trend towards more targeted intrusions rather than broad-spectrum attacks. Interestingly, vulnerabilities within the industry showcased a 2.6% share in detected vulnerabilities across sectors, ranking 12th out of 14 sectors.

Call to Action: Enhanced Cybersecurity Measures Needed

As the landscape of threats continues to shift, experts emphasize the urgency of prioritizing cybersecurity within the real estate and construction industries. The incorporation of advanced technologies like AI and machine learning into cybersecurity strategies is becoming crucial for protecting sensitive data and maintaining trust with clients and stakeholders.

Ultimately, with both the growing frequency of cyberattacks and the dynamic nature of threats, the real estate and construction sectors must remain vigilant and proactive in safeguarding their operations.

FAQ Section

What recent trends have been observed in cybersecurity within the real estate and construction sectors?

Recent reports indicate an overall increase in cybersecurity threats, especially from ransomware. Specific trends include a surge in data leaks and successful ransomware attacks, requiring heightened focus on preventive measures.

How many attack campaigns affected the real estate and construction industry recently?

Over the past three months, the real estate and construction sectors were involved in 2 out of 16 attack campaigns, which is about 12.5% of all campaigns observed during this period.

What measures should the real estate and construction industry take for better cybersecurity?

The industry should prioritize cybersecurity enhancements through the adoption of advanced technologies like AI and machine learning to strengthen defenses against evolving cyber threats.

Deeper Dive: News & Info About This Topic

Additional Resources

Construction CA News
Author: Construction CA News

CALIFORNIA STAFF WRITER The CALIFORNIA STAFF WRITER represents the experienced team at constructioncanews.com, your go-to source for actionable local news and information in California and beyond. Specializing in "news you can use," we cover essential topics like product reviews for personal and business needs, local business directories, politics, real estate trends, neighborhood insights, and state news affecting the area—with deep expertise drawn from years of dedicated reporting and strong community input, including local press releases and business updates. We deliver top reporting on high-value events such as the Rose Parade, Coachella, Comic-Con, and the California State Fair. Our coverage extends to key organizations like the California Building Industry Association and Associated General Contractors of California, plus leading businesses in technology and entertainment that power the local economy such as Apple and Alphabet. As part of the broader network, including constructionnynews.com, constructiontxnews.com, and constructionflnews.com, we provide comprehensive, credible insights into the dynamic landscape across multiple states.

Stay Connected

More Updates

Would You Like To Add Your Business?

WordPress Ads