Rockrose Development Corp. Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Rockrose Development L.L.C. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Rockrose Development
Rockrose Development L.L.C. is a well-known real estate development, ownership and management company based in New York City, with additional operations in Washington, DC. Founded in 1970, Rockrose has a long history of developing, acquiring and managing both residential and commercial properties.
Over the past five decades, the company has been involved in the development or acquisition of nearly six million square feet of office space and about 15,000 residential apartments.
What Happened?
In July 2025, Rockrose Development experienced a significant data breach. On July 4, 2025, unauthorized individuals, linked to the PLAY ransomware group, gained access to Rockrose’s systems.
Shortly after, on July 14, 2025, the hackers claimed on the dark web that they had obtained confidential company data, including private and personal records, client documents, payroll and accounting files, tax information, identification documents and more.
Information Exposed
- Name
- Social Security number
- Bank account and routing numbers
- Driver’s license number
- Health insurance information
- Medical information
- Online account credentials
- Passport number
- Taxpayer identification number
Rockrose disclosed the breach to the Texas and California Attorney Generals' offices on Dec. 12, 2025, posted a Notice of Data Security Incident on its website, and notified affected individuals by mail.
Your Rights and Next Steps
If you received a notice about the Rockrose Development data breach or believe your information may have been involved, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Communication and credit monitoring services: Review and save any notification letters you receive. Enroll in free credit monitoring and identity protection services, if offered.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If your personal information was exposed in the Rockrose Development data breach, you may be eligible for compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
Data breach laws provide protections and remedies for individuals whose sensitive information is compromised due to a company’s failure to safeguard data. To find out if you qualify and to join a lawsuit, complete the form below.
.png)