Skip to content

AppFolio

Disclosed Oct 6, 202511 months ago72,444 affectedConfirmed

Official notice

What is known

People affected72,444 (as reported by the organization)
DisclosedOct 6, 2025
DiscoveredAug 22, 2025
HappenedAug 8, 2025
AttackHacking
Data exposedSocial Security numbers, Names
SectorTech · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: AppFoliooag.ca.gov · Official notice
Washington Attorney General breach notice: AppFolioatg.wa.gov · Official notice
Oregon DOJ breach notice: AppFoliojustice.oregon.gov · Official notice
Texas Attorney General data security breach report BR-0004597: AppFoliooag.my.site.com · Official notice
Vermont Attorney General: 2025-10-06 AppFolio Data Breach Notice to Consumersago.vermont.gov · Official notice
Indiana Attorney General 2025 data breach report: AppFolioin.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAOct 6, 2025
Washington AGresidents of WAOct 6, 20252,882
Oregon DOJresidents of OROct 6, 202572,444
Vermont AGresidents of VTOct 6, 2025
Indiana AGresidents of INOct 6, 20251,346
Texas AGresidents of TXOct 7, 20255,056
History of this record
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-10-06-appfolio-data-breach-notice-consumers · backfill source
  • 2026-09-25 · data_types: [] to ["ssn","names"] · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 72444 · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · discovered: empty to 2025-08-22 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about AppFolio

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.