Research Cybersecurity 70+ Modern Real Estate Investment Trusts

Cybersecurity for modern Real Estate Investment Trusts (REITs) is a growing priority, especially as these entities digitize operations, adopt smart building technologies, and rely heavily on cloud-based financial platforms and investor portals.

Unlike traditional real estate firms, modern REITs often manage large portfolios across various sectors (commercial, residential, industrial, data centers), which amplifies their exposure to cyber risk through:

• Investor and tenant portals
• Financial data systems
• Operational technology (OT) in smart buildings
• Third-party property management software
• Regulatory compliance needs (SEC, SOX, GDPR, etc.)

In this post you'll discover an overview of the largest real estate investment trusts. Our cybersecurity engineers of Niagaros have the intention to make them healthier, safer and future proof by testing their cybersecurity. 

Niagaros is a cybersecurity agency focused on modern infrastructure. Our services consist of foundational security pillars, offensive/defensive security and OWASP Top 10 (Web/Mobile/API).

Need help with your cybersecurity? Contact us here. 

Cybersecurity for Real Estate Investment Trusts

Key Cybersecurity Threats Facing REITs

1. Phishing and Business Email Compromise (BEC): REITs are prime targets for phishing attacks due to the high-value transactions they handle. For instance, a phishing scam led to a $3.3 million loss for NETSTREIT when an employee was deceived into wiring funds to a fraudster impersonating a development partner.
2. Third-Party and Vendor Risks: REITs often rely on third-party vendors for various services, including property management and IT support. These external partners can introduce vulnerabilities if their cybersecurity measures are inadequate.
3. IoT and Building Management Systems Vulnerabilities: The integration of IoT devices and smart building systems can expose REITs to cyber risks if these systems are not properly secured. 
4. Regulatory Compliance Challenges: Evolving regulations, such as proposed SEC rules, require REITs to report material cyber incidents promptly and disclose their cybersecurity policies and procedures.

Core Cybersecurity Strategies for REITs

1. Governance and Risk Management

• Develop a cyber risk management program aligned with frameworks like NIST CSF or ISO/IEC 27001.
• Establish cybersecurity leadership (CISO or security officer) with board-level oversight.

2. Network and Endpoint Protection

• Deploy EDR/XDR solutions.
• Use firewalls, microsegmentation, and zero-trust network access (ZTNA) to secure internal systems.
• Regular vulnerability scans and patch management for all systems, especially legacy OT.

3. Identity & Access Management

• Enforce multi-factor authentication (MFA) across investor portals, admin panels, and internal systems.
• Use privileged access management (PAM) for executives and admins with access to sensitive data.

4. Investor Portal Security

• Use secure-by-design SaaS platforms or develop with secure DevOps practices.
• Ensure encryption, rate limiting, and continuous monitoring are in place.
• Regular penetration testing of customer-facing applications.

5. Operational Technology (OT) Security

• Separate IT and OT networks.
• Use secure gateways for building management systems.
• Monitor OT traffic for anomalies (via tools like Nozomi Networks or Claroty).

6. Data Protection & Privacy

• Encrypt sensitive tenant, investor, and financial data (AES-256, TLS 1.2+).
• Implement data loss prevention (DLP) and cloud access security brokers (CASB).
• Create data retention and disposal policies in line with compliance requirements.

7. Incident Response & Business Continuity

• Develop and test an Incident Response Plan (IRP) and Disaster Recovery Plan (DRP).
• Include ransomware-specific playbooks.
• Ensure backups are frequent, encrypted, and stored offline.

8. Third-Party Risk Management

• Conduct security assessments and audits of all vendors and SaaS providers.
• Include cybersecurity clauses in vendor contracts and SLAs.

Regulatory Compliance Considerations

Modern REITs are subject to multiple regulations and must demonstrate strong cyber hygiene:

Useful Tools for REIT Cybersecurity

Cybersecurity Checklist for REITs

• Board-level oversight of cybersecurity risk
• Incident Response Plan tested quarterly
• Investor and tenant portals penetration-tested annually
• MFA enforced across all systems
• Regular audits of third-party vendors
• Zero-trust principles implemented
• Building systems segmented and monitored
• SEC cyber incident disclosure process in place

Europe

• Klepierre (France) – Major retail REIT focusing on shopping centers across continental Europe.
• Gecina (France) – Owns and manages prime office and residential properties in Paris.
• SEGRO plc (UK) – Leading owner and developer of logistics and industrial properties across Europe.
• Alstria Office REIT AG (Germany) – Specializes in office properties located in major German cities.
• Shaftesbury plc (UK) – Focuses on retail, dining, and leisure properties in London’s West End.
• Aedifica SA (Belgium) – Invests mainly in healthcare real estate, including senior housing.
• Workspace Group plc (UK) – Provides flexible office and studio spaces for small and medium businesses in London.

America

• Prologis – World’s largest logistics and industrial REIT, serving global supply chains.
• Annaly Capital Management – Mortgage REIT investing in agency and non-agency mortgage-backed securities.
• AGNC Investment Corp – Agency mortgage REIT focusing on residential mortgage-backed securities.
• American Tower Corporation – Owns and operates wireless and broadcast communication infrastructure globally.
• Realty Income Corporation – “The Monthly Dividend Company,” investing in retail and commercial net-leased properties.
• Crown Castle International – Specializes in telecom infrastructure like towers and fiber networks in the U.S.
• VICI Properties – Owns gaming, hospitality, and entertainment destinations, including Caesars and MGM properties.
• Welltower Inc – Focused on healthcare real estate: senior housing, medical offices, and wellness facilities.
• Digital Realty Trust – Global data center REIT supporting cloud and internet infrastructure.
• Simon Property Group – Largest U.S. retail REIT, owning top-tier malls and outlet centers.
• Alexandria Real Estate Equities – Life science and biotech campuses near major innovation clusters.
• Starwood Real Estate Income Trust – Diversified REIT investing in commercial and residential properties.
• Ventas, Inc. – Healthcare-focused REIT with senior housing, medical offices, and hospitals.
• Equinix, Inc – Leading global colocation and interconnection data center REIT.
• Boston Properties – Owns and manages Class A office buildings in major U.S. cities.
• Blackstone Mortgage Trust – Originates and invests in senior commercial real estate loans.
• Two Harbors Investment Corp – Residential mortgage REIT investing in agency RMBS and MSRs.
• Weyerhaeuser Company – Timberland REIT managing forest resources and wood products.
• Vornado Realty Trust – Invests in high-end office and retail properties, mainly in New York City.
• Healthpeak Properties, Inc – Focused on healthcare real estate including life science and senior housing.
• Medical Properties Trust – Owns hospital and healthcare facilities leased to operators.
• Redwood Trust, Inc – Focuses on residential mortgage credit investments.
• DigitalBridge Group – Invests in digital infrastructure like data centers, towers, and fiber.
• Essex Property Trust – Apartment REIT with assets primarily on the U.S. West Coast.
• Host Hotels & Resorts, L.P. – Largest lodging REIT, owning luxury and upscale hotels.
• Sun Communities – Owns manufactured housing, RV, and marina properties.
• SL Green Realty Corporation – Manhattan’s largest office landlord.
• Choice Properties REIT (Canada) – Focused on retail and industrial assets anchored by Loblaw stores.
• Public Storage – Largest U.S. self-storage REIT.
• RioCan Real Estate Investment Trust (Canada) – Canadian retail and mixed-use property REIT.
• Regency Centers Corporation – Grocery-anchored retail centers across the U.S.
• Mid America Apartment Communities (MAA) – Owns and operates multifamily apartments in the Sunbelt region.
• Kilroy Realty Corporation – Office and mixed-use REIT focused on West Coast innovation hubs.
• Park Hotels and Resorts – Owns large hotel properties, often branded with Hilton and other chains.
• Gaming and Leisure Properties – Owns casino and entertainment real estate leased to operators.
• Douglas Emmett – Owns office and multifamily properties in Los Angeles and Honolulu.
• American Homes 4 Rent – Owns and leases single-family rental homes.
• Allied Properties REIT (Canada) – Urban office REIT with properties in Canadian cities.
• The Macerich Company – Owns regional malls and shopping centers in U.S. urban markets.
• Hospitality Properties Trust – Owns hotels and service-focused properties.
• Brixmor Property Group Inc – Owns open-air shopping centers anchored by essential retailers.
• Hudson Pacific Properties, Inc. – Focused on media, tech, and office properties on the West Coast.
• American Campus Communities Inc – Largest owner and manager of student housing.
• Claros Mortgage Trust – Commercial real estate finance REIT originating senior loans.
• Kite Realty Group Trust – Owns open-air retail properties in U.S. suburban markets.
• Camden Property Trust – Apartment REIT operating in high-growth U.S. cities.
• Diversified Healthcare Trust – Invests in healthcare and senior living properties.
• Pebblebrook Hotel Trust – Owns upscale urban and resort hotels.
• Arbor Realty Trust Inc – Mortgage REIT focused on multifamily and commercial loans.
• NorthWest Healthcare Properties REIT (Canada) – Healthcare properties globally, including hospitals and clinics.
• Sabra Health Care REIT Inc – Invests in skilled nursing, senior housing, and specialty hospitals.
• Highwoods Properties – Office REIT focused on the U.S. Sunbelt region.
• KKR Real Estate Finance Trust – Provides commercial real estate debt financing.
• Veris Residential Inc – Multifamily-focused REIT in the New York metropolitan area.
• Ready Capital Corporation – Mortgage REIT providing small-balance commercial loans.
• Peakstone Realty Trust – Office and industrial real estate across the U.S.
• Office Properties Income Trust – Owns office properties leased to single tenants, often government entities.
• Rexford Industrial Realty – Specializes in Southern California industrial properties.
• Safehold – Focused on ground lease investments for commercial properties.
• RLJ Lodging Trust – Owns primarily premium-branded hotels.
• Apple Hospitality REIT Inc – Focused on select-service hotels under Marriott, Hilton, and Hyatt brands.
• Armour Residential – Mortgage REIT investing in agency RMBS.
• Life Storage – Self-storage REIT (merged with Extra Space Storage).
• Uniti Group – Owns fiber and communications infrastructure.
• Cubesmart – Self-storage REIT serving both individuals and businesses.
• New York Mortgage Trust – Invests in residential mortgage assets.
• QTS Realty Trust – Data center REIT (acquired by Blackstone).
• GEO Group Inc – Owns and manages correctional and detention facilities.
• Acadia Realty Trust – Urban retail and mixed-use properties.
• Global Net Lease – Diversified REIT investing in commercial properties under long-term net leases.
• Ashford Hospitality Trust – Owns full-service upscale hotels.
• COPT Defense Properties – Specializes in mission-critical office and defense-related properties.
• Americold Realty Trust – Owns temperature-controlled warehouses and logistics centers.
• Empire State Realty Trust Inc. – Owns office and retail properties in New York, including the Empire State Building.
• Columbia Property Trust – Office REIT focused on U.S. gateway cities (acquired by PIMCO).
• Weingarten Realty Investors – Grocery-anchored retail REIT (merged with Kimco Realty).
• Granite Point Mortgage – Commercial real estate finance REIT.
• AG Mortgage Investment Trust – Mortgage REIT investing in residential and commercial loans.
• Rayonier Inc – Timberland REIT managing forests for lumber and land development.

Asia / Pacific

• Link REIT (Hong Kong) – Largest REIT in Asia, focusing on retail and commercial assets.
• Champion REIT (Hong Kong) – Owns office and retail properties in Hong Kong’s prime districts.
• Suntec Real Estate Investment Trust (Singapore) – Invests in office and retail assets in Singapore and Australia.
• CapitaLand Ascendas REIT (Singapore) – Diversified industrial and logistics properties across Asia-Pacific.
• Vicinity Centres (Australia) – One of Australia’s largest retail-focused REITs.
• Keppel REIT (Singapore) – Owns premium office properties in Asia-Pacific cities.
• Ascott Residence Trust (Singapore) – Hospitality REIT specializing in serviced residences and hotels.
• Mapletree Industrial Trust (Singapore) – Industrial and data center REIT with properties in Singapore and North America.