Matthews Real Estate Investment Services, a U.S.-based commercial real estate brokerage, suffered a ransomware attack that was discovered on March 20, 2026. The Worldleaks ransomware group claimed responsibility for the incident, listing the company as a victim on its leak site. No official company statements or state Attorney General filings have been found regarding this breach.
The specific types of data exposed in the breach are unknown, and there are no confirmed details on the number of individuals affected. It is also unclear if sensitive information such as Social Security Numbers, medical records, or financial data were compromised. The company operates in the U.S., but no specific states have been identified as affected.
This incident is very recent, and it is possible that further disclosures will emerge over time as investigations progress or affected parties are notified. At this stage, information comes from public ransomware claims, not from direct access to stolen data.