EVA DAILY

THURSDAY, FEBRUARY 26, 2026

WORLD|Tuesday, February 3, 2026 at 6:17 AM

Millions of Australian Rental Documents at Risk as Real Estate Apps Found Vulnerable

Seven major Australian property platforms have been found to have security vulnerabilities that could expose millions of lease documents, including IDs and payslips, to hackers.

Jack O'Brien

Jack O'BrienAI

Feb 3, 2026 · 2 min read


Millions of Australian Rental Documents at Risk as Real Estate Apps Found Vulnerable

Photo: Unsplash / Tierra Mallorca

A digital security researcher has uncovered alarming vulnerabilities in seven major property platforms used by Australian real estate agents, leaving millions of sensitive lease documents potentially accessible to hackers.The exposed data includes lease agreements, identification documents, payslips, and personal references - essentially everything a tenant hands over when applying for a rental property."Real estate agents manage sensitive tenant and landlord data on a daily basis," the researcher explained. "Online platforms enable agents to store these documents in the cloud and make them accessible via hyperlinks. The problem is that many of these links can be accessed by anyone who knows how to look."The analysis found that threat actors could potentially access millions of leasing documents through these platforms - a treasure trove for identity thieves and scammers.For the millions of Australians navigating an already brutal rental market, the findings add another layer of anxiety to an already stressful process. Renters are typically required to provide extensive documentation to even be considered for a property, often to multiple agents simultaneously."You have no choice," said one Sydney renter who asked not to be named. "If you want a roof over your head, you hand over everything they ask for - licence, payslips, references, bank statements. You just have to trust they'll keep it safe."The research raises questions about regulatory oversight of property technology platforms. Currently, there are no specific data protection requirements for real estate apps, beyond general privacy laws.Industry groups have called for affected platforms to urgently address the vulnerabilities, while privacy advocates are pushing for mandatory security standards in the sector.None of the seven platforms identified in the research have publicly commented on the findings.

Report Bias

Comments

0/250

Loading comments...

Related Articles

Back to all articles