A ransomware group calling itself Helix claims to have carried out an attack on Highwoods Properties, with the claim dated August 7, 2026. This claim comes from an entry on the group’s own leak site, which is tracked and archived by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. At this time, Highwoods Properties has not confirmed this claim, and no regulator or independent authority has verified it either. It should be treated strictly as an unverified assertion made by a criminal group, not as an established fact.
What we know — and don’t
- A group identifying itself as Helix listed Highwoods Properties on its leak site, with a claimed date of August 7, 2026.
- Highwoods Properties operates in the commercial real estate sector, categorized here under ‘other’ for tracking purposes.
- The specific types of data the group claims to have obtained have not been disclosed in the listing and have not been confirmed by any party.
- No official statement from Highwoods Properties or from any regulatory body has been issued regarding this claim as of this writing.
- Claims made on ransomware leak sites are not independently verified at the time of posting and can sometimes be exaggerated, false, or recycled from earlier incidents.
What should you do if you have an account with this company?
- Change your password for any account associated with Highwoods Properties, and avoid reusing that password on other sites.
- Enable two-factor authentication (2FA) wherever it is offered, using an authenticator app rather than SMS if possible.
- Be cautious of unexpected emails, texts, or calls referencing Highwoods Properties, especially those asking you to click links, verify account details, or make payments — these could be phishing attempts, whether or not this claim is later confirmed.
- Monitor your financial statements and any accounts tied to this company for unfamiliar activity.
- Consider using an identity monitoring service like a service like Aura or LifeLock to help watch for signs your personal information is being misused elsewhere.
- Keep records of any suspicious communications in case they become relevant if the incident is later confirmed.
BreachLetter will update this page if Highwoods Properties confirms this incident, if it is officially reported to regulators, or if additional verified details become available.