Harcourts

Harcourts operates as a real estate agency headquartered in Australia, delivering core services that include residential property sales, leasing, and property management for both tenants and landlords. The agency maintains rental property databases that capture personal details such as names, contact information, identification documents, and financial data related to landlords and tradespeople. To support these functions, Harcourts engages third‑party service providers like Stafflink, which host and manage portions of its data infrastructure. Its market focus spans the Australian real estate sector, facilitating transactions between buyers and sellers as well as landlords and tenants while offering ancillary services such as market appraisals and lease administration.

In October 2022, Harcourts experienced a data breach when an unauthorized party accessed its rental property database through a compromised account at Stafflink, a vulnerability traced to an employee using a personal device rather than a secured company‑issued device. The exposed information encompassed tenants’ full names, email and home addresses, phone numbers, signatures, photo identification, and landlords’ and tradespeople’s bank details. Upon discovery, the agency promptly revoked the compromised account’s access, launched an external investigation, and implemented enhanced security measures including stricter access controls and payment protections. Affected individuals were notified and offered complimentary credit monitoring and identity support services, while relevant regulators were informed of the incident. This episode underscored the agency’s reliance on external platforms for data management and highlighted the importance of device‑based security policies within its operational framework.

The source material does not provide explicit details regarding Harcourts’ ownership structure, parent company, or subsidiary relationships, so no structural notes on ownership can be included.