The international real estate group was listed on the dark web leak site of the SafePay ransomware syndicate. Harcourts launched an immediate investigation into the claims; initial internal diagnostics reported no definitive evidence of active network impact or data exfiltration at the preliminary stage.