Where does the AppFolio, Inc. case file come from?

Every entry is taken from the breach report AppFolio, Inc. lodged with the California Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: AppFolio, Inc. Data Breach

This file collects the dated facts on record for the AppFolio, Inc. incident. The state report is dated October 6, 2025. The incident itself is dated August 8, 2025.

Timeline

59 days separate the incident date from the date it was reported.

August 8, 2025Incident dateWhen the filing says the breach took place.
October 6, 2025Report filed in CaliforniaDate the notice was lodged with the California Attorney General.

Case facts

Filing state: California
Date reported: October 6, 2025
Incident date: August 8, 2025
Receiving office: California Attorney General

Case notes

AppFolio, Inc., based in California, reported a data security incident to state regulators on October 6, 2025. The official filing indicates that the breach event took place on August 8, 2025, and the company has stated it is currently investigating the matter.

The public record from this filing does not specify the exact nature of the breach or the specific types of personal information that may have been involved. AppFolio, Inc. has acknowledged a security event that could potentially affect individuals.

Further details regarding the incident's scope, including the number of people impacted or the precise data types exposed, have not been released by the company or specified in the initial public filing.

For any individuals who may receive direct notification from AppFolio, Inc., it is important to review that communication carefully. Pay attention to any specific advice or actions the company recommends in response to this incident.

As a general best practice following any data security event, individuals should remain vigilant for unusual activity. This includes monitoring personal accounts and being cautious of unsolicited emails or messages that might attempt to illicitly gain further personal information.

It is also advisable to consider general protective measures, such as reviewing account statements regularly and being wary of any requests for personal data, especially if they seem urgent or unexpected. Taking proactive steps can help mitigate potential risks associated with data exposures.

Questions about this case file

Where does the AppFolio, Inc. case file come from?: Every entry is taken from the breach report AppFolio, Inc. lodged with the California Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

California data breaches

Filing source: California Attorney General

Named in the AppFolio, Inc. breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More California case files