JRK Property Holdings data breach: 113,641 people after a March 2026 network incident

How many people were affected by the JRK Property Holdings data breach?

113,641 in total, the number JRK reported to Indiana. The letter gives no count.

Regulator	Who it counts	Number	Recorded
Indiana attorney general	Total reported by JRK	113,641	Notice sent July 24, 2026
Texas attorney general	Texans	11,120	Posted July 28, 2026
Washington attorney general	Washington residents	5,667	Reported July 27, 2026
Indiana attorney general	Indiana residents	514	Notice sent July 24, 2026
California attorney general	No count published	—	Recorded July 27, 2026

Texas's attorney general lists 11,120 Texans for JRK Property Holdings, posted on July 28, 2026.

The ranking of 2026's largest breaches explains how Indiana's list counts totals, and why the same notice carries different numbers on different state lists.

What happened, and when?

As soon as it saw the activity, JRK says, it started its incident response, secured its systems and brought in cybersecurity experts.

Date	Event
March 26, 2026	JRK identifies suspicious activity on its network; the breach date on the California, Indiana and Washington records
June 28, 2026	Investigation finds files and folders with personal information may have been accessed
July 24, 2026	Notice sent, per Indiana
July 27, 2026	Notice reported to California and Washington

Discovery to the Indiana notice took 120 days: 94 to find which files were reached, then 26 to send letters. The guide to notice delays compares this with the rest of the log.

What information was involved?

Each letter pairs the reader's name with its own combination of data elements, and the filed copy leaves that list blank. For its residents, Washington's attorney general lists names, Social Security numbers, driver's license or state ID numbers, financial and banking information, military ID numbers, passport numbers and other information. JRK says there has been no evidence the information was misused. The letter does not say whether the people affected are residents, applicants, employees or others.

What is JRK offering?

Item	Detail from the letter
Service	Experian IdentityWorks credit monitoring and identity theft protection, with identity restoration and $1 million identity theft insurance
Length	12 or 24 months; the filed template shows both options
Enrollment	experianidworks.com/3bcredit with the activation code, before the date printed on the letter
Experian help	877-288-8057, with the engagement number on the letter

The letter also points readers to identitytheft.gov and asks them to review account statements and free credit reports. The guide to credit monitoring offers compares this offer with others in the log.

What Massachusetts recorded

Massachusetts' Office of Consumer Affairs and Business Regulation lists a report from JRK Property Holdings Inc, received on May 12, 2026, with 4,328 Massachusetts residents affected. For those residents it marks Social Security numbers, financial account numbers and credit or debit card numbers as breached. That report is dated before the June 28, 2026 finding the letter describes; the record does not say why.

What the documents leave open

• Who the 113,641 people are, and which data elements each letter lists.
• How the intruder got in, and whether files were copied as well as reached.
• Whether JRK's properties or their residents' accounts were affected.