The UK property sector is becoming an increasingly attractive target for cyber criminals, according to intermediary Karis Insurance. The firm says the amount and sensitivity of data routinely collected from buyers, sellers, landlord and tenants is behind the 17% uptick in cyber attacks experienced by the sector.

Citing figures from the Information Commissioner’s Office, Karis Insurance says the number of cyber attacks against UK property services businesses jumped from 178 in 2024 to 208 in 2025.

Ravi Sejpal, director of insurance at Karis Insurance, said: “In many cases, property businesses hold just as much detail about their client base as a bank would. However, there are very few businesses in the property sector who have bank-level data security arrangements.”

“The sort of personal data that property agencies hold about their clients could be hugely valuable if it fell into the wrong hands. These figures show that hackers are increasingly realising that.”

The warning builds on data published by the Royal Institution of Chartered Surveyors that highlighted the threat not just to firms operating in the property market, but to buildings themselves.

The RICS research found that in the year to June 2025, more than a quarter (27%) of facilities managers, service providers and FM consultancies said their building had been the victim of a cyberattack.

Paul Bagust, head of property practice at RICS, said: “Buildings are no longer just bricks and mortar, they have evolved into smart, interconnected digital environments embracing increasingly sophisticated and ever-evolving technologies to enhance occupier experience.

“This has led to increasing data being collected and used to inform decision making; at the property manager, building user, occupier and owner levels. However, while these technologies bring many benefits, from efficiency gains and reduced negative impacts on the planet, they also create multiple risks and vulnerabilities which can be exploited by those looking to cause disruption.”

He added: “Failure to identify these growing digital challenges and incorporate security countermeasures risks businesses sleepwalking into cyber attacks.”