Oralia

Oralia Partner, also known simply as Oralia, is a real estate management company headquartered in France. The organisation focuses on the administration and oversight of property portfolios, handling tasks such as lease agreements, rent collection, maintenance coordination, and tenant relations. Its operations involve the storage and processing of tenant identification documents, financial records, and other personal data associated with the properties it manages. While the exact size of its portfolio or the number of properties under its care is not disclosed in the available sources, the company’s activities are centred within the French real estate sector, serving both residential and commercial clients. Oralia’s core business therefore revolves around providing comprehensive property management services that require reliable handling of sensitive information related to occupants and owners.

The organisation became publicly known for a cybersecurity incident that occurred on 20 April 2022, when it fell victim to a ransomware attack attributed to the previously unidentified Black Basta group. During the breach, approximately 60 gigabytes of compressed data were exfiltrated, comprising customer identification documents and internal system information. The attackers employed double extortion tactics, first stealing the data and then encrypting Oralia’s systems, threatening to release the stolen information unless a ransom was paid. Orange Cyber Defence assisted in identifying the ransomware variant and determining the initial entry point used by the attackers. In response, Oralia’s parent company confirmed that affected servers were isolated to prevent the ransomware from spreading further across the network. Although critical systems were temporarily paralysed, email functionality was restored within a few days. Following the incident, Oralia issued warnings to customers about heightened risks of identity fraud and advised caution regarding data transmission due to the potential exposure of compromised tenant records. This event highlights the organisation’s handling of sensitive personal data and underscores the importance of robust cybersecurity measures within the real estate management sector.