News for hackers. Stuff that matters.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by consensus1 on Monday August 24, 2026 @01:00PM (#49422704)
There absolutely is everything wrong with implicating a company that has no knowledge of and no responsibility for the breach.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by tptacek on Monday August 24, 2026 @01:03PM (#49422753)
You mean the Blackstone namedrop? I had the same reaction. Beam is an internal division of Blackstone, for whatever that's worth, but I don't think there's a news hook about Blackstone here. This is, like, every property management company everywhere, whether indie or corporate.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by bearsyankees on Monday August 24, 2026 @01:05PM (#49422777)
If this is the case then IMO all the more reason to publicize it -- my SSN shouldn't be exposed just because I applied for a lease [ and we shouldn't just brush that off as something that is a given ]
Re:A Blackstone real estate company exposed SSN digits, DOBs... by tptacek on Monday August 24, 2026 @01:13PM (#49422919)
I mean, that's true, and I'm not saying there's anything misleading about the post, just that this is true of basically all the companies that do this. All I'm saying is that there isn't a meaningful Blackstone hook here.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by antonvs on Monday August 24, 2026 @03:39PM (#49424849)
> this is true of basically all the companies that do this

Evidence?

Re:A Blackstone real estate company exposed SSN digits, DOBs... by tptacek on Monday August 24, 2026 @03:45PM (#49424909)
Just Google "property manager" "data leak".
Re:A Blackstone real estate company exposed SSN digits, DOBs... by antonvs on Monday August 24, 2026 @08:36PM (#49427718)
Sorry, but that's not evidence of "true of basically all the companies that do this". Your vibes are not evidence.

I don't understand what you even think you're getting at. Are you saying we should accept this because all companies are like this? Except not all companies are like this.

The only way this kind of thing ever gets fixed is if it's not considered acceptable. You're essentially arguing that it's acceptable. Why? It's a weird sort of kowtowing to incompetent corporations that I just don't understand. Is it that you work for one of them?

Re:A Blackstone real estate company exposed SSN digits, DOBs... by tptacek on Monday August 24, 2026 @09:00PM (#49427874)
I'm sure it would be enjoyable to find someone to argue with who would take the other side of "vulnerabilities are bad" but I can't be that person for you, sorry.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by antonvs on Tuesday August 25, 2026 @10:29AM (#49434807)
DARVO only works if it's plausible.

You were implicitly defending the existence of this vulnerability by making the unsupported claim that this was "true of basically all the companies that do this." When asked to back up the claim, you deflected.

I'm reminded of the banality of evil. You're not trying to be evil, you're just defending large corporations because you've irrationally concluded from some individual examples you've seen that "everyone does it", and therefore there's nothing that can or should be done about it, including even just mentioning it in a post. That's false, and you're wrong.

Re:A Blackstone real estate company exposed SSN digits, DOBs... by tptacek on Tuesday August 25, 2026 @12:42PM (#49436909)
Super reasonable comment. Totally see how you got there.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by antonvs on Tuesday August 25, 2026 @06:19PM (#49441471)
It’s fun to watch people try to back off from their defense of sleazy corporations once they’re called out on it.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by DANmode on Monday August 24, 2026 @01:38PM (#49423294)
If you’re too big to manage your subsidiaries, don’t buy them/build them.

This is no different than blaming the big AI tool because it messed up doing work in your spaghetti codebase - “how else was I supposed to do it?”.

Stay small enough to do business properly.

Yes, this is a ding on the parent company.

How indicative it is of their other companies making the exact same mistakes is a different question.

But I’d expect issues somewhere.

Re:A Blackstone real estate company exposed SSN digits, DOBs... by tptacek on Monday August 24, 2026 @02:11PM (#49423742)
Beam Living manages giant high-rise housing developments in New York City. It's not a mom-and-pop problem space, unless you're for some reason opposed to density.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by DANmode on Monday August 24, 2026 @03:25PM (#49424674)
I’m opposed to using your scale as an excuse to be an incompetent.

It’s one of the major ethical / effectiveness issues with business - especially American business - today.

Re:A Blackstone real estate company exposed SSN digits, DOBs... by tptacek on Monday August 24, 2026 @03:31PM (#49424748)
You'd much rather rent from someone like Beam Living than a mom-and-pop operator that owns a small apartment building. Things will get fixed, and you'll get most of your security deposit back.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by tmnvix on Monday August 24, 2026 @03:59PM (#49425085)
Personally, I've always had a better experience dealing directly with small time landlords than with property managers. For a start, they have been less likely to raise rents at every opportunity. I also prefer when my money goes to someone in my community/local area.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by tptacek on Monday August 24, 2026 @04:02PM (#49425119)
I've never once gotten a security deposit back from a mom-and-pop landlord without forcing the issue legally, and I did an informal poll of acquaintances last year and we had never even heard of that happening. Unlike mom-and-pops, corporate property managers just do what they say they're going to do.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by tmnvix on Monday August 24, 2026 @04:30PM (#49425440)
That sucks. Maybe it's a cultural thing or due to different regulations (I'm not in North America)?

Anyhow, all else being equal, so long as I am living in a transactional society, I prefer those transactions to be with people I actually know. I like real relationships. So much of the way we are changing as a society seems to be alienating us from each other - I make a point of trying to counter that in my daily life.

Re:A Blackstone real estate company exposed SSN digits, DOBs... by tptacek on Monday August 24, 2026 @04:48PM (#49425636)
Oh, yeah, for sure, I'm making confident assertions exclusively about American rental norms. I have no idea if corporate property management in Europe is better or worse than independent building owners. All I know is that renting is much more normalized there than it is here, where renters are considered a second-class state of residency that one expects to graduate from into full ownership as soon as possible.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by FireBeyond on Monday August 24, 2026 @05:03PM (#49425827)
I have, multiple times, before I bought.

On the flip side, corporate PMs tried billing my friends for damage that was questionable/grasping at best on an apartment they'd told my friends, in writing, that was going to be gutted down to the studs on the expiry of their lease.

The largest corporate PM in my county has this "look how tenant-friendly we are, we won't raise your leases just because we can" all happy and smiley website where they advertise their open listings...

... and a much less advertised site dedicated just to property owners where they "promise to get you the maximum value out of your investment, looking for every opportunity to maximize its income-earning potential (i.e. raise rents at every possible opportunity to the maximum legally allowed), and "ensuring that when you do change tenants, the minimum effort and cost is required" (i.e. bill your previous tenants for as much of their security deposit as possible, while doing as little as possible).

This led to situations where my partner and I saw that the "inspection form" for the apartment we'd left not twenty minutes prior (it was initially meant to be previously) was sitting on the desk of the property manager filled with remarks like "blinds not cleaned, needed professional cleaning", "drywall holes, needed professional repair", "odors, needed remediation, professional cleaning".

In other words, they'd planned ahead to take the deposit, and when our meeting with the PM was rescheduled it pointed out the lie, "Oh, when was this inspection and these repairs all done? In the fifteen minutes since us locking the door and going down the elevator to wait for you in the lobby?" Of course, said PM company also owned, helpfully, a carpet cleaning company, a housecleaning company, and everything else, so you knew they were going to give you a good deal (not).

"Oh... um... oops... that's a mistake, I must have printed off from a template and not tidied it up".

But this is just dueling anecdotes.

Re:A Blackstone real estate company exposed SSN digits, DOBs... by DANmode on Tuesday August 25, 2026 @02:16PM (#49438266)
Yes.

Bad customer service (intentional and otherwise) comes in all shapes and sizes!

Re:A Blackstone real estate company exposed SSN digits, DOBs... by DANmode on Tuesday August 25, 2026 @01:25AM (#49429415)
I’ve unfortunately battle-tested this thesis.

Mom-and-pop aren’t financially insulated from threat of lawsuits. Or being looked at poorly in public.

Some random LLC in Utah? Good luck.

Re:A Blackstone real estate company exposed SSN digits, DOBs... by jimbo89 on Monday August 24, 2026 @01:10PM (#49422858)
Beam is actually a little bit unique here. They have a spent a lot of money building a lot of custom software that most other property managers just buy off the shelf.
Re:A Blackstone real estate company exposed SSN digits, DOBs... by consensus1 on Monday August 24, 2026 @02:29PM (#49423985)
Yes, that's what I meant, but I thought your comment meant that it was a property management company hired by Blackstone, not an internal division of Blackstone. That changes things completely.