Industry Insight
Property managers handle large rent payments — making them prime BEC fraud targets.
Why Property Businesses Need Cyber Insurance
Property management companies hold extensive tenant personal information and handle large financial transactions — making them targets for data theft and payment fraud. Rental bond fraud and false tenancy applications are growing threats enabled by compromised systems.
Top Cyber Risks for Property Businesses
- !Tenant data breach
- !Rental payment fraud
- !Property management software ransomware
- !Owner financial data theft
- !Email account compromise
Recommended Coverage for Property Businesses
Typical Premium Range
Premiums vary based on revenue, data held, security controls in place, and coverage limits selected. Our brokers will find the best rate for your specific profile from multiple insurers.
Property Management Cyber Risk in New Zealand
Property management companies in New Zealand handle some of the most sensitive personal and financial transactions in the economy. Tenant files contain identification documents, credit checks, income information, references and rental history. Owner files contain property details, banking information for rent disbursements, insurance records and maintenance histories. The combination of large recurring financial transactions and extensive personal data makes property management businesses particularly attractive targets for cybercriminals.
Rental Payment Fraud
The high-value recurring transactions central to property management — rent collection, bond management and owner disbursements — create significant BEC fraud exposure. Criminals who gain access to property management email systems or impersonate the agency can redirect rent payments to fraudulent accounts, submit false bond refund requests to Tenancy Services, and intercept owner disbursements. These frauds can be difficult to detect until multiple payment cycles have passed, by which time losses can be substantial.
Tenant Data Privacy Obligations
Tenant personal information is subject to the Privacy Act 2020. Property managers collect extensive personal data during the application process — identification documents, income verification, credit history and references — much of which meets the definition of sensitive information under the Act. A breach of this data creates mandatory notification obligations and potential liability to affected tenants. The volume of tenants managed by most property management companies means that a system breach can affect hundreds of individuals simultaneously.
Property Management Software Vulnerabilities
Property management platforms — Palace, Propertyware, Re-Leased and similar systems — hold the complete operational data of the business: tenant files, lease agreements, maintenance records, financial transactions and owner communications. Ransomware that encrypts these systems can make it impossible to manage properties, respond to maintenance requests, or process payments until restoration is complete — a process that can take weeks.
Tenancy Bond Fraud
With New Zealand's Tenancy Bond Centre processing bonds electronically, compromised property management credentials can be used to submit fraudulent bond refund requests. This specific fraud vector is increasingly reported in NZ and represents a direct financial loss distinct from broader data breach impacts.
Cyber Insurance for Property Managers
A cyber insurance policy for NZ property management businesses covers: tenant and owner data breach response, Privacy Act notification costs, social engineering fraud and payment diversion, property management software ransomware response, business interruption during system outages, and third-party liability for claims from affected tenants or property owners.
Written by the CyberCover Advisory Team
Licensed NZ insurance advisors specialising in cyber risk for New Zealand businesses. All content reviewed for accuracy and NZ regulatory compliance.
Last updated: May 2026 · Get personalised advice →
Frequently Asked Questions
Does cyber insurance cover redirected rent payments?
Yes, if the policy includes social engineering fraud or cyber crime cover. This specifically addresses losses from BEC attacks where payments are redirected to fraudulent accounts. Confirm the sub-limit is appropriate for your typical transaction volumes.
Are we liable if a tenant's data is stolen from our systems?
Yes. Under the Privacy Act 2020, you have obligations as a custodian of tenant personal information. A breach can result in Privacy Commissioner action and claims from affected tenants. Cyber insurance covers your response costs and legal defence against tenant claims.
Does cyber insurance cover a breach of our property management software?
Yes. Whether the breach occurs through your own systems or through a vulnerability in the property management platform itself (if it results in exposure of your tenant data), your cyber policy responds to the resulting breach costs, notification obligations and business interruption.
What should we do if we suspect our email has been compromised?
Immediately contact your IT support to secure the account and change credentials across all linked systems. Then call your cyber insurance incident response hotline. Do not use the potentially compromised email system to communicate about the incident — use a separate channel.