London property manager City Relay says attackers accessed its Metabase Cloud instance twice and may have extracted customers’ personal, financial and property-access data. The incident matters because the information potentially included bank details, account passwords, key locations and lockbox codes, creating both fraud and physical security risks.

The exposed financial information may include account numbers, sort codes, IBANs and SWIFT references, while property data could identify stored keys and access codes. City Relay has replaced relevant codes, found no evidence of unauthorised property access or data misuse, and is continuing its investigation; the number of affected customers remains undisclosed.