Among the sectors increasingly targeted are real estate and PropTech (property technology) firms. As these firms accelerate their digital transformation, they simultaneously become more susceptible to the perils of cyber terrorism.

In 2018, one fine morning our community management system stopped working. Our local server database server was not responding as it should have, long story short after some investigation it was learnt that we have been a victim of a cyber terrorism; called Ransomware. These attacks encrypt the data on our servers or devices and require a ransom payment to remove the encryption. In such attacks hackers do not steal the data they just plant a bug that encrypts everything. We made a principled decision not to engage with the hackers and instead commenced disaster recovery process. Even though we were able to restore all our systems the experience was no less traumatic.

A similar case that elucidated this threat was the ransomware attack on Brookfield Residential in late 2022. Brookfield, one of North America's largest homebuilders, fell victim to a highly coordinated cyberattack that encrypted their key operational data, crippling their PropTech systems. The attackers demanded a sizable ransom in bitcoin to unlock the encrypted files. Although Brookfield had considerable cybersecurity measures in place, the attack's sophistication overwhelmed the firm’s defences, causing significant disruptions.

There are many such incidents and reports that highlight the focus of cyber attacks on real estate firms. Given the escalating frequency and sophistication of these attacks, how can real estate and PropTech firms defend themselves? Here are a few tried and tested strategies.

Cybersecurity Awareness

Firstly, businesses must create a culture of cybersecurity awareness. This involves training employees to recognize and respond appropriately to phishing attempts and suspicious emails, which are often the initial steps of ransomware attacks. Similarly, updating and patching all software promptly is crucial to prevent exploitation of known vulnerabilities.

Backup

Next, firms should regularly back up all essential data and keep it separate from their primary network. In the event of a ransomware attack, this enables companies to restore their systems without capitulating to ransom demands. The rule of thumb is to follow the 3-2-1 backup strategy – having at least three total copies of your data, two of which are locally stored in different mediums, and one is offsite.

Cybersecurity tools

Furthermore, firms should invest in advanced cybersecurity tools. Anti-ransomware solutions can detect and quarantine ransomware before it infiltrates the network and begins encrypting files. Similarly, tools like intrusion detection and prevention systems (IDPS) and next-generation firewalls can help protect against more complex multi-stage attacks.

Insurance

Finally, PropTech and real estate firms should consider obtaining cyber insurance. While it may not prevent an attack, it can mitigate financial losses and provide access to expert resources in the aftermath.

Cyber terrorism in the form of ransomware attacks presents an increasingly sophisticated threat to the real estate and PropTech sectors. By proactively addressing cybersecurity risks, including creating a culture of security awareness, ensuring regular data backups, investing in advanced protection tools, and considering cyber insurance, firms can significantly enhance their resilience against these nefarious threats. Despite the challenges, the imperative of digital transformation remains. The key is to undertake this journey with a clear-eyed understanding of the risks and a commitment to robust cybersecurity practices. After all, in today's interconnected world, cybersecurity is not a luxury; it's a necessity.