Walk through any recently renovated Boston property and count the connected systems: card access, cameras, HVAC controls, elevator management, leak sensors, EV chargers, tenant apps. Every one is a computer on a network. Property managers have quietly become operators of industrial control systems — usually without anyone owning their security.
Why Buildings Get Attacked
Sometimes the building is the target: ransomware that locks the access control system creates immediate, physical pressure to pay. More often the building is the doorway — a vulnerable HVAC controller or camera DVR becomes the entry point to the management company’s network, where the actual money is: tenant data, rent payments, vendor invoices ripe for payment fraud.
The Ownership Gap
Ask who’s responsible for patching the access control server and you’ll usually get three answers: the vendor who installed it thinks the IT company handles it, the IT company doesn’t know it exists, and the property manager assumed someone else had it. Attackers rely on exactly this gap. Closing it starts with an inventory: every connected system in every building, who maintains it, and when it was last updated.
Five Moves That Matter
First, segment building systems onto their own networks — a compromised camera should never see the leasing office’s computers. Second, change default passwords and remove vendor remote access that’s no longer needed; exposed building controllers with factory credentials are trivially findable online. Third, put multi-factor authentication on email and any system touching rent or vendor payments, because payment fraud remains the most expensive attack on property firms. Fourth, back up the management side — leases, financials, tenant records — with tested restores. Fifth, write vendor security expectations into contracts for anyone installing connected equipment.
Tenant Trust Is the Asset
A breach that leaks tenant financial data or shuts down building access doesn’t just cost remediation — it shows up at lease renewal. Institutional owners increasingly ask property managers about cybersecurity during RFPs. Being able to answer well is becoming a competitive advantage.
One Partner for Both Sides
Boston Networks is one of the few Boston-area providers covering both worlds: managed IT for the office and OT security for building systems. We work with property management companies across Greater Boston to inventory, segment, and secure the whole portfolio. Schedule a building-systems security review.