Cybersecurity threats significantly impact the real estate and construction sectors.
Thailand, August 12, 2025
The construction and real estate sectors are grappling with rising cybersecurity threats such as phishing, ransomware, and data breaches. A recent report highlights a decline in attack campaigns targeting these industries, with a noted increase in ransomware victims. The report stresses the need for enhanced cybersecurity strategies as digital integration grows, as well as the importance of leveraging emerging technologies to safeguard sensitive information against evolving threats.
The latest report on cybersecurity threats in the real estate and construction industries reveals a complex and evolving landscape of risks. Over the past 90 days, the sector has experienced a surprising rise in attack campaigns and ransomware incidents, shedding light on critical vulnerabilities that may jeopardize sensitive client data.
According to the report, the real estate and construction industry was involved in 2 out of 16 attack campaigns, making up about 12.5% of all observed attacks. However, this marks a decrease from the previous quarter, where the sector accounted for 25% of attack campaigns. The identified campaigns, attributed to cybercriminals including the Chinese group known as Volt Typhoon and Thai-speaking threat actors, occurred in May and July, with Thailand being the only country affected in both incidents.
Volt Typhoon’s operations spanned several continents, targeting web applications, operating systems, and routers, while CCTH2501 focused exclusively on victims within Thailand. Despite these incidents, the report indicates that the impact from advanced persistent threats (APTs) remained minimal for the real estate and construction sectors, with only 2 of the 16 observed campaigns aimed at them.
Notably, ransomware incidents have surged in the real estate and construction sector. Overall, 121 victims were recorded, representing a significant share of 8.7% of all ransomware victims during this period. While this reflects a 16% decline from the previous quarter’s total of 144 victims, the sector’s share of ransomware victims still increased from 7.2% to 8.4%.
The report highlights a total of 42 ransomware groups targeting the sector, with prominent players including Play, Qilin, and Safepay, each claiming around 12 victims. A concerning trend is the marked interest in ransomware, particularly noteworthy in May, where victim counts were recorded at 50, 39, and 40 across three months.
In the last 90 days, the real estate and construction sector was mentioned 1,176 times in underground and dark web channels—indicating a rise in cybersecurity chatter. This was attributed mostly to concerns surrounding data leaks, ransomware, and data breaches. Among the noteworthy findings, mentions of data leaks surged from 105 to 171, indicating potential exposure due to misconfigured cloud storage and third-party breaches.
The report also indicated fluctuations in attack vectors against the sector. DDoS activities nearly vanished, suggesting a trend towards more targeted intrusions rather than broad-spectrum attacks. Interestingly, vulnerabilities within the industry showcased a 2.6% share in detected vulnerabilities across sectors, ranking 12th out of 14 sectors.
As the landscape of threats continues to shift, experts emphasize the urgency of prioritizing cybersecurity within the real estate and construction industries. The incorporation of advanced technologies like AI and machine learning into cybersecurity strategies is becoming crucial for protecting sensitive data and maintaining trust with clients and stakeholders.
Ultimately, with both the growing frequency of cyberattacks and the dynamic nature of threats, the real estate and construction sectors must remain vigilant and proactive in safeguarding their operations.
Recent reports indicate an overall increase in cybersecurity threats, especially from ransomware. Specific trends include a surge in data leaks and successful ransomware attacks, requiring heightened focus on preventive measures.
Over the past three months, the real estate and construction sectors were involved in 2 out of 16 attack campaigns, which is about 12.5% of all campaigns observed during this period.
The industry should prioritize cybersecurity enhancements through the adoption of advanced technologies like AI and machine learning to strengthen defenses against evolving cyber threats.
South Lake Tahoe and Salt Lake City, August 13, 2025 News Summary Major moves are unfolding…
Morris, Illinois, August 13, 2025 News Summary District leaders unveiled a financing roadmap to fund a…
1506 Van Ness Ave, August 13, 2025 News Summary City leaders propose a 36-month market-rate bridge…
First Hill, Seattle, August 13, 2025 News Summary A private K–5 school has applied for a…
Hamburg, August 13, 2025 News Summary Plancraft, a Hamburg-based construction software startup, closed a €38 million…
Alabama, August 13, 2025 News Summary Birmingham-based construction and program management firm HPM has partnered with…