Sweetwater Data Breach: Social Security Numbers Exposed

Sweetwater Development & Management Company, a Georgia-based real estate investment and development firm, disclosed a data breach linked to a security incident at its third-party vendor, Ultimus Funds Solutions. The company is part of the broader Sweetwater Companies platform, which focuses on multifamily property development, acquisition and management.

The total number of individuals affected in the United States has not been disclosed.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on Aug. 14, 2026.

Sweetwater first communicated with affected individuals about the incident on July 30, 2026. A more detailed follow-up written notice dated Aug. 14, 2026, provided additional information about the breach and outlined resources available to those impacted.

The breach did not occur within Sweetwater's own computer systems. Instead, it took place at Ultimus Funds Solutions, which handles certain data on Sweetwater's behalf. Ultimus made Sweetwater aware of the incident, which prompted the company to begin reviewing the situation and determining who was affected.

At this time, the dates when the breach occurred or when it was first discovered have not been publicly disclosed.

The types of personal information exposed in the breach included Social Security numbers and driver's license information.

Separately, on Aug. 14, 2026, a ransomware group called CoinbaseCartel posted on the Tor network, claiming that it had obtained data belonging to Sweetwater Holdings, a related entity within the broader Sweetwater platform. The relationship between this ransomware claim and the vendor breach at Ultimus Funds Solutions has not been publicly clarified by the company.

Sweetwater Development & Management Company's response to the breach

Sweetwater is offering affected individuals 24 months of credit monitoring and identity protection services through CyberScout, a TransUnion company, at no cost. The services include single bureau credit monitoring, a single bureau credit report, a single bureau credit score and proactive fraud assistance.

To enroll, affected individuals should visit the website listed in their notification letter and enter the unique code provided in their correspondence. Enrollment must be completed within 90 days of the date of the letter. Individuals who need help with enrollment can call 1-877-432-7463 for assistance.