How can a small landlord protect rental records from ransomware?

What ransomware does to a landlord

Ransomware is software that encrypts the files on a computer or network and demands payment for the key. For a small landlord, the files at stake are leases, ledgers, applications, receipts, insurance papers and the spreadsheet that holds it all together. It often arrives as an email attachment, a link in a message or a login stolen through a fake sign-in page.

Two things make it painful. You lose access to records you need for rent, taxes and disputes, and the files may include tenant personal information, which can trigger your state's breach notice rules if someone copied it.

Backups that actually work

A backup only helps if ransomware cannot reach it. If your backup drive stays plugged in, the software can lock it too. A common approach is the 3-2-1 idea: three copies of important files, on two kinds of storage, with one stored away from the main computer.

1. Choose what matters: leases, ledgers, tax records, insurance, deeds and photos.
2. Back up automatically to a cloud storage service that keeps older versions of files, so a locked copy does not overwrite a good one.
3. Keep a second copy on an external drive that you plug in to back up and then unplug.
4. Once or twice a year, restore a few files from the backup to prove it works.
5. Store the instructions for restoring where you can reach them without the locked computer, such as on paper.

Habits that lower the odds

• Install updates for your operating system, browser and apps soon after they come out.
• Turn on two-factor sign-in for email, bank, cloud storage and accounting. CISA calls multifactor authentication one of the most effective protections.
• Do not open attachments or links you did not expect, even from a name you know, if the message is odd. Confirm by phone.
• Use a separate login for daily work and an administrator login only for installing software.
• Keep the tenant data you hold to what you need, because data you deleted cannot be locked or stolen.

The FTC's cybersecurity pages for small businesses give a similar short list, including ransomware-specific steps and a plan for what to do after an incident.

If your computer is locked

1. Disconnect the device from the internet and from other devices.
2. Do not restart or delete anything until you have photographed the message on the screen.
3. From a clean device, change passwords for email, bank and other key accounts, and turn on two-factor sign-in.
4. Report it to the FBI's IC3 at ic3.gov and to CISA. Both ask for reports and may have advice.
5. Do not assume that paying the ransom will restore your files. Law enforcement generally discourages paying.
6. If tenant personal information may have been copied, check your state's breach notification law for who must be told and by when, and consider calling an attorney and your insurer.

Records kept in an online system such as DoorKeeping live on its servers and not on your laptop, so a locked laptop does not lock your leases and ledgers there. Keep your own downloaded copies backed up as well.

Sources

1. CISA, StopRansomware, read Oct 30, 2026
2. FTC, Cybersecurity for Small Business, read Oct 30, 2026
3. FBI Internet Crime Complaint Center (IC3), read Oct 30, 2026

Questions

Should I pay a ransomware demand?

Law enforcement generally discourages it, because payment does not guarantee you get files back. A tested backup is the better protection.

Is cloud storage a backup?

It can be, if it keeps older versions of files so a locked file does not overwrite a good one. Keep a second, offline copy as well.

Do I have to notify tenants after ransomware?

Only if state law treats the event as a breach of personal information. Many states do when data may have been copied, so check your state's law.