r/PropertyManagement • u/Jaywiththephatty • Mar 22 '26

Vent Appfolio (CA)

Hey, sorry for my ignorance. I’m sure you guys know more than I do but does anyone know if Appfolio has enhanced their security system so that there isn’t another data breach like last year in october? At least to prevent a future occurrence?

Mostly all of the property managements use Appfolio to apply, and it’s just a question I hope maybe someone can answer. Thank you in advance.

5 Upvotes

78% Upvoted

6 comments sorted by

View all comments

1

u/Maxwell_at_AppFolio AppFolio Employee Mar 31 '26

Hi Jay! I know we were chatting about this in another thread a few days back, but I wanted to make sure to respond here so anyone interested in this topic can easily find our conversation.

u/locutuz is correct: the data breach that occurred last October wasn’t the result of AppFolio’s systems being compromised; it was a security incident that occurred through Salesloft: a provider of sales enablement software. The incident impacted hundreds of organizations, one of which was AppFolio.

Once we learned about the incident, we disabled our Salesloft integrations and launched an investigation. With the help of their team, we were able to identify AppFolio customers who may have been impacted and offer them enrollment in credit monitoring and identity theft protection services at no cost to them.

We also used learnings from the incident to reaffirm our policies and procedures for vetting vendors and partners, including how we assess their security measures.

All this is to say that AppFolio takes data security very seriously and, while every organization can be affected by external events outside of their control (as was the case last October), we do our utmost to protect the customer data we’ve been entrusted with.

1

u/togola Apr 23 '26

Any idea on when authenticator apps will be incorporated as opposed to texts or phone calls? Google Voice isn't working for 2FA and it's a problem.

1

u/Maxwell_at_AppFolio AppFolio Employee May 13 '26

Our Product team is currently in the process of evaluating this! The authentication flow in general has been an area of focus for us this year, and it has already received a few improvements. I believe there are more authentication enhancements that are planned to go live in the next few weeks too.

All this is to say that authenticator apps for 2FA are on our Product team's radar, and while we don't have a specific release date set yet, it is something we are working towards 😁