.png)
Thomas Safran & Associates Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Thomas Safran and Associates data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Thomas Safran and Associates
Thomas Safran & Associates is a real estate development and management company based in Brentwood, Los Angeles. Since its founding in 1974, the company has focused on developing, owning, and managing affordable, luxury, and mixed-use rental housing throughout Southern California.
The company is known for its commitment to affordable housing, having developed over 6,300 units, with the majority located in Los Angeles County. Thomas Safran & Associates also manages most of its properties, employs approximately 250 people, and has a significant number of new units under construction or in preconstruction.
What Happened?
On or around Sept. 8, 2025, Thomas Safran & Associates detected suspicious activity on its network. The company responded quickly by securing its systems and hiring outside forensic experts to investigate. It was determined that an unauthorized party accessed a server containing confidential information.
According to public disclosures, the PLAY ransomware group claimed responsibility for the attack and threatened to publish stolen data, which may have included private and personal confidential data, client documents, payroll, accounting, tax information, IDs, and financial data.
Possible Information Exposed
- Name
- Date of birth
- Address
- Social Security number
- Government-issued ID numbers
- Financial information
The breach was posted on the dark web on Sept. 17, 2025. The breach was also disclosed to the California Attorney General’s office on Nov. 24, 2025.
Your Rights and Next Steps
If you received a notice about the Thomas Safran & Associates data breach or believe your information may have been involved, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Communication and credit monitoring services: Review and save any notification letters you receive. Enroll in the free Cyberscout credit monitoring and identity protection services offered by the company.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If your information was compromised in the Thomas Safran & Associates data breach, you may be eligible for compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
Lawyers are currently investigating claims related to this incident. To find out if you qualify and to join a lawsuit, complete the below form.
.svg)