Friesen Group Data Breach Impacts Sensitive Personal Information of Individuals

Friesen Group, a real estate company serving the Abbotsford area and the Fraser Valley region, disclosed a data breach that affected approximately 500 people in the United States.

The breach was reported to the U.S. Department of Health and Human Services and to the attorneys general offices of California and Massachusetts. In addition, Friesen Group posted a notice about the incident on its website. Consumer notification letters were sent on Sept. 21, 2026.

The breach began on May 15, 2025, when an unauthorized user gained access to the company's computer network. Four days later, Friesen Group received a suspicious email indicating that data stored within its network may have been at risk.

The company put its incident response protocols into action and brought in independent computer forensic experts to investigate.

Following the forensic investigation, which concluded on July 15, 2025, Friesen Group worked with a separate data review team to examine the potentially compromised data and identify which individuals may have been affected. On July 16, 2026, more than 14 months after the breach itself, that the company completed its analysis and determined whose information was found within the potentially compromised data.

The types of information that may have been exposed included names, test data and medical records.

Friesen Group's response to the breach

Friesen Group is offering 12 months of free identity theft protection services through Cyberscout, a TransUnion company.

Affected individuals can enroll in the free credit monitoring services by visiting Cyberscout's activation page and entering the unique code provided in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

Friesen Group has also set up a dedicated phone line for individuals who have questions about the incident. According to the notification letter, the phone line is available Monday through Friday from 8 a.m. to 8 p.m. Eastern time. Affected individuals can find the phone number in their notification letter.