Key facts: Easterly Government Properties data breach
- Date reported: June 15, 2026
- Target entity: Easterly Government Properties
- Source of breach: Third-party security incident involving EY (Ernst & Young)
- Data types: Names, physical mailing addresses, Social Security numbers, taxable income
- Status: Confirmed; reported on June 15, 2026.
- Severity: Medium; exposure of Social Security numbers and financial data increases the risk of identity theft and tax fraud.
What happened in the Easterly Government Properties data breach?
Easterly Government Properties (easterlyreit.com) experienced a data breach stemming from a third-party security incident at their professional tax services vendor, EY. The incident was officially reported on June 15, 2026. While the company itself was not the primary target of the breach, the unauthorized access to EY's systems allowed an unidentified party to acquire sensitive files related to Easterly Government Properties' records.
The breach resulted in the acquisition of personal information, including names, mailing addresses, Social Security numbers, and taxable income. This incident is classified as medium severity due to the sensitive nature of the financial and identification data involved. Such exposure typically increases the risk of identity theft and fraudulent tax filings. Easterly Government Properties has expressed regret regarding the incident and the inconvenience caused to affected individuals.
Who is behind the incident?
The attacker or cause of the incident has not been identified.
Impact and risks for Easterly Government Properties investors and employees
The exposure of Social Security numbers and taxable income presents significant risks to affected individuals, particularly regarding identity theft and financial fraud. Malicious actors could use this information to open unauthorized credit accounts or file fraudulent tax returns to claim refunds. Additionally, the availability of physical addresses and names makes individuals more susceptible to targeted phishing attacks or physical mail scams.
Typical outcomes for this type of breach include a long-term risk of credential abuse and financial exploitation. Affected parties should immediately monitor their credit reports for suspicious activity, consider placing a credit freeze, and be vigilant for any unexpected communications from tax authorities. Transparency regarding the breach allows individuals to take necessary steps to protect their personal and financial well-being.
How to protect against similar security incidents
In light of the data breach at Easterly Government Properties involving Social Security numbers and tax information, individuals should take immediate steps to secure their financial identities.
- Implement credit freezes and monitoring. Contact the major credit bureaus to place a freeze on your credit reports to prevent unauthorized accounts from being opened. Regularly review bank statements and credit reports for any transactions you do not recognize.
- Protect against tax identity theft. Be alert for notifications from the IRS regarding duplicate tax filings or unexpected account activity. Consider applying for an IRS Identity Protection PIN (IP PIN) to ensure only you can file a tax return using your Social Security number.
- Enhance account security. Enable multi-factor authentication (MFA) on all financial and personal accounts to provide an additional layer of protection. Use a password manager to generate and store complex, unique passwords for every online service.
- Monitor third-party risk. Organizations should implement continuous monitoring of their third-party vendors to identify potential security gaps in the supply chain. Utilize attack surface management tools to maintain visibility over digital assets and identify vulnerabilities before they are exploited.
Taking proactive measures and maintaining high security hygiene are the most effective ways to mitigate the risks associated with identity theft.
Frequently asked questions
What happened in the Easterly Government Properties security breach?
On June 15, 2026, Easterly Government Properties (easterlyreit.com) disclosed a security breach. According to initial reports, a third-party security incident involving their professional tax services vendor, EY, resulted in the unauthorized acquisition of personal information including names, mailing addresses, Social Security numbers, and taxable income.
When did the Easterly Government Properties breach occur?
The Easterly Government Properties breach was publicly reported on June 15, 2026. The exact date of the attack has not been disclosed.
What data was exposed?
The types of data involved in the Easterly Government Properties incident include names, physical mailing addresses, Social Security numbers, and taxable income. This page will be updated as verified information becomes available.
Is my personal information at risk?
If you interacted with Easterly Government Properties, there's a possibility your personal information could be affected. Because this specific breach confirmed the exposure of Social Security numbers and taxable income, affected individuals face an immediate and direct risk of identity theft and tax fraud.
What steps should companies take after being breached?
Easterly Government Properties is expected to secure its systems, notify affected parties, and provide guidance on protective actions. The company may also review its third-party security measures and deploy attack surface management to prevent future incidents.
This cybersecurity news article is powered by UpGuard Breach Risk — continuous attack surface monitoring for your organisation and supply chain.
