TruAmerica Multifamily Data Breach: A Ransomware Claim, Not Yet a Lawsuit
Reference Guide
On September 22, 2026 a ransomware group listed TruAmerica Multifamily, a Los Angeles apartment owner, on its leak site. As of October 16, 2026 the company has not publicly confirmed a breach, no notice letters have been posted with the California Attorney General, and we found no TruAmerica multifamily data breach lawsuit in any federal court. There is no settlement and nothing to claim.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Has Actually Been Reported
TruAmerica Multifamily is a multifamily investment firm based in Los Angeles, founded in 2013. It owns and operates apartment communities nationwide, with regional hubs in Dallas, Seattle, Salt Lake City, Chicago, Miami and Washington, D.C.; Wikipedia puts the portfolio at more than 55,000 apartment units.
On September 22, 2026 the ransomware group Termite publicly claimed responsibility for a cyberattack on the company, according to the dark-web monitors Ransomware.live and DeXpose. DeXpose reports that the group threatened to leak sensitive data unless negotiations are initiated. That is the attackers’ claim, not a finding.
What is missing matters as much: no tracker lists what kind of data was taken (Breachsense records the leak size as “Unknown”), and no number of affected people has been published.
Case details
As of October 16, 2026 we found no filed lawsuit over the claimed TruAmerica multifamily data breach. A CourtListener search of federal dockets for “TruAmerica” returns 61 results; the most recently filed is a 2025 employment case in the District of Nevada (No. 2:25-cv-00345), which was closed on January 23, 2026 and has nothing to do with a cyberattack. Our own feed of new federal filings shows no TruAmerica case since October 10, 2026.
That is not proof no case exists: state courts are not covered, and data-breach suits are often filed only after notice letters go out.
Status: Unconfirmed Breach, No Lawsuit
California requires a business to send the Attorney General a sample notice whenever it notifies more than 500 California residents. A Los Angeles landlord with that portfolio would likely show up there first if residents’ data was involved — that is the filing to watch.
Could Your Data Be Involved?
Nobody knows yet whose data, if any, was taken. The people who would plausibly be affected by a breach at a landlord are current and former residents (rental applications often hold Social Security numbers, income and bank details), employees and investors. None of that has been confirmed for this incident.
The practical test is your mail. If TruAmerica confirms a breach, it must notify affected people directly. Keep any letter and its envelope: it says which of your fields were involved and it is your proof if a case is ever filed. Your property may operate under its own community name, so read the sender line carefully.
Is There Money? Not Now
TruAmerica Breach Claim Timeline
2013 — TruAmerica Founded
The Los Angeles multifamily investment firm is founded. It grows into a national owner-operator of apartment communities.
September 22, 2026 — Ransomware Group Claims Attack
Termite lists TruAmerica Multifamily on its leak site and threatens to publish data unless negotiations begin. Ransomware.live estimates the attack date as the same day.
September 23, 2026 — Trackers Pick It Up
Breachsense records the listing. Leak size: unknown. No data categories or victim count are published.
October 10, 2026 — No AG Notice So Far
The California Attorney General’s breach list carries postings through this date with no TruAmerica entry.
October 16, 2026 — No Lawsuit Found
No company confirmation, no notice letters, no filed class action, no settlement.
Three Things to Watch For
A ransomware claim with no official notice is an easy story for impostors to borrow:
“TruAmerica settlement” claim pages
There is no TruAmerica data breach settlement. Any site asking for your Social Security number or bank details to “register for your payout” is collecting data, not filing a claim.
Rent or deposit “security update” messages
If resident data was stolen, criminals can send convincing emails about new payment portals or changed bank details. Confirm any payment change by calling your leasing office at a number you already have.
Ads presented as a lawsuit
A page saying attorneys are “investigating” is a solicitation, not a filed case. Signing a retainer is a real legal decision — it is not how you join a class.
TruAmerica Data Breach — Questions People Ask
Short answers to the questions people ask most about this case.
Is there a TruAmerica Multifamily data breach lawsuit?
Not that we could find as of October 16, 2026. Federal docket searches show no data-breach case naming TruAmerica. Lawsuits often follow notice letters, so this can change.
Did TruAmerica actually have a data breach?
Unconfirmed. The ransomware group Termite claimed an attack on September 22, 2026. TruAmerica had not publicly confirmed or denied it as of October 16, 2026.
What data was taken, and how many people are affected?
Unknown. No tracker lists data categories, Breachsense records the leak size as unknown, and no notice has been posted with the California Attorney General.
How can I check if my name has been involved in a data breach?
Watch your mail for a notice letter, which is the definitive answer. You can also search the California Attorney General’s breach list, where companies post sample notices whenever more than 500 California residents are notified.
Can you sue a company for data breaches?
Yes — people whose data is exposed regularly bring class actions over breaches. But a case needs a confirmed breach and harm to point to, and here neither has been established yet.
Is there a settlement or claim form?
No. There is no lawsuit, so there is no settlement, fund, administrator, claim form or deadline.
Is this related to the RealPage rent-pricing cases?
No. The claimed cyberattack is a separate matter from the rent-pricing antitrust litigation; see our RealPage page for that.
What is worth doing right now?
If you rent or rented from a TruAmerica property, freeze your credit at all three bureaus — free and reversible. Be wary of messages about rent payments, and keep any notice letter you receive.
About This Information
- Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated
- $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Data Breach Settlement CalculatorWhat comparable breach settlements have paid per person
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Landlord LawsuitsClass actions against apartment owners and property managers
- RealPage SettlementThe separate rent-pricing antitrust litigation against landlords