Washington Prime Group Holdings L.P. Reports 2025 Data Breach
Washington Prime Group Holdings L.P., a commercial real estate firm, reported a data breach to the Montana Attorney General on December 23, 2025. The incident, which occurred in July 2025, potentially exposed a range of sensitive personal information. Affected individuals are advised to monitor their personal accounts and credit for signs of misuse.
- State
- Montana
- Breach date
- July 30, 2025
- Reported
- December 23, 2025
What may have been exposed
- Full Name
- Social Security Number
- Date of Birth
- Wage and Compensation Information
- Tax Return Information
- Direct Deposit Account Details
- Mailing Address
- Phone Number
Washington Prime Group Holdings L.P., which operates within the commercial real estate and property management sector, formally reported a data breach to the Montana Attorney General's office on December 23, 2025. The security incident itself took place on July 30, 2025, though the specific nature of the breach was not detailed in the public filing.
The breach filing indicates that a wide array of personal data categories were reported as exposed. These include individuals' Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, and Tax Return Information. Additionally, Direct Deposit Account Details, Mailing Address, and Phone Number were also part of the compromised information.
The exposure of these sensitive data types creates considerable risks for affected individuals. Compromised Social Security Numbers and Dates of Birth are foundational elements often used in identity theft schemes, enabling fraudsters to open new accounts or commit financial fraud. Direct Deposit Account Details and Tax Return Information can also be used to divert funds or file fraudulent tax returns.
Individuals who believe they may be affected by this incident are advised to take protective measures. This includes regularly reviewing credit reports from the major bureaus for any unauthorized accounts or suspicious activity. Placing a credit freeze on their files can further restrict unauthorized access. Additionally, monitoring bank and credit card statements for unfamiliar transactions and being wary of unsolicited communications requesting personal data are generally recommended precautions.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Montana Attorney General filing
Related data breach cases
- MemberSource Credit Union
- MemberSource Credit Union
- GrayRobinson P.A.
- GrayRobinson P.A.
- First Advantage Corporation
- County of Murray dba Murray County Medical Center
- County of Murray dba Murray County Medical Center
- Total Wireless
- Central Ozarks Medical Center
- Total Wireless
- Central Ozarks Medical Center
- Brett Robinson Vacation Rentals
- Standard Sales Company, LP
- Clackamas Community College