Breachesby GlyphCushman & Wakefield
Disclosed May 12, 2026250,576 affectedConfirmed
In May 2026, the real estate services firm Cushman & Wakefield was the target of a "pay or leak" extortion campaign by the ShinyHunters group . Following the threat, the group publicly published data they alleged had been obtained from the firm, consisting mostly of C&W email addresses along with tens of thousands of external email addresses and corporate contact records. The exposed data was primarily business information, including names, job titles, company addresses and phone numbers.
What is known
| People affected | 250,576 (as reported by the organization) |
|---|---|
| Disclosed | May 12, 2026 |
| Happened | Apr 21, 2026 |
| Attack | Extortion |
| Data exposed | EmailsEmploymentNamesPhone numbersAddressesSocial Security numbers |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
hibp to organizationby dailySource
310431 to 250576by dailySource
["emails","employment","names","phone","addresses"] to ["emails","employment","names","phone","addresses","ssn"]by backfillSource
empty to CushmanWakefieldby backfillSource
other to techby backfillSource
unknown to extortionby backfillSource
[] to ["emails","employment","names","phone","addresses"]by backfillSource
empty to hibpby backfillSource
empty to 310431by backfillSource
2026-08-07 to 2026-05-12by backfillSource
empty to In May 2026, the real estate services firm Cushman & Wakefield was the target of a "pay or leak" extortion campaign by the ShinyHunters group . Following the threat, the group publicly published data they alleged had been obtained from the by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.