
Washington Prime Group Holdings L.P, a major U.S. retail real estate operator, recently suffered a data breach that exposed personally identifiable information (PII). The breach was limited in scope for Massachusetts residents but could have broader implications nationwide, given Washington Prime Group’s extensive operations.
On Dec. 23, 2025, the company disclosed the data security incident to the Massachusetts Attorney General’s office. According to the official notification filed with the state, the breach involved unauthorized access to personally identifiable information, specifically financial account data and Social Security numbers. The breach’s severity is heightened by the nature of the data involved, as both financial and Social Security information are highly valuable to identity thieves and can be used for fraudulent activities.
The incident was also discussed on the dark web, where a group named Worldleaks claimed responsibility for leaking data from the company on Sept. 23, 2025, via the Tor network.
In response to the breach, Washington Prime Group has taken several steps to support those affected. The company is offering 24 months of complimentary credit monitoring and identity restoration services through Experian. Affected individuals have been provided with detailed instructions for enrolling in Experian IdentityWorks, which includes access to credit reports, daily credit monitoring, identity restoration assistance, and $1 million in identity theft insurance.
If you believe your personal information may have been compromised in this breach:
A dedicated assistance line has been set up for impacted individuals at 833-745-2429, Monday through Friday, from 8 a.m. to 8 p.m. ET.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)