v3.25.4
Cybersecurity Risk Management and Strategy Disclosure
12 Months Ended
Dec. 31, 2025
Cybersecurity Risk Management, Strategy, and Governance [Line Items]  
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block]
We regularly assess risks from cybersecurity threats, monitor our information systems for potential vulnerabilities and test those systems pursuant to our cybersecurity policies and procedures, which are integrated into the Company’s overall risk management framework. We use a combination of internal personnel and third-party service providers to monitor, detect and respond to potential cybersecurity threats.
We maintain a cyber incident response plan that is reviewed periodically and tested through tabletop exercises involving management and other key personnel. We also conduct periodic testing and employee training designed to assess and enhance the effectiveness of our cybersecurity controls.
To date, cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and we believe are not reasonably likely to materially affect our business strategy, results of operations or financial condition. Refer to the risk factor captioned “Cyberattacks and any failure to comply with related laws could negatively impact us.” in Part I, ITEM 1A. “Risk Factors” for additional description of cybersecurity risks and potential related impacts on the Company.
Governance
Cybersecurity Risk Management Processes Integrated [Flag] true
Cybersecurity Risk Management Processes Integrated [Text Block]
We regularly assess risks from cybersecurity threats, monitor our information systems for potential vulnerabilities and test those systems pursuant to our cybersecurity policies and procedures, which are integrated into the Company’s overall risk management framework. We use a combination of internal personnel and third-party service providers to monitor, detect and respond to potential cybersecurity threats.
Cybersecurity Risk Management Third Party Engaged [Flag] true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] false
Cybersecurity Risk Board of Directors Oversight [Text Block]
ESRT's Board of Directors oversees cybersecurity risk management, primarily through the Audit Committee. The Audit Committee receives periodic reports regarding cybersecurity risks, strategy and incidents.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] The Audit Committee receives periodic reports regarding cybersecurity risks, strategy and incidents.
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] Our Chief Technology Officers ("CTOs") are responsible for leading our cybersecurity risk management efforts and reports to the Audit Committee on cybersecurity matters.
Cybersecurity Risk Role of Management [Text Block] Our Chief Technology Officers ("CTOs") are responsible for leading our cybersecurity risk management efforts and reports to the Audit Committee on cybersecurity matters.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] Our Chief Technology Officers ("CTOs") are responsible for leading our cybersecurity risk management efforts and reports to the Audit Committee on cybersecurity matters.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] Our CTOs have extensive experience in information technology and cybersecurity.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] Our Chief Technology Officers ("CTOs") are responsible for leading our cybersecurity risk management efforts and reports to the Audit Committee on cybersecurity matters.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] true