Cushman & Wakefield
Disclosed May 12, 20264 months ago310,431 accountsConfirmed
In May 2026, the real estate services firm Cushman & Wakefield was the target of a "pay or leak" extortion campaign by the ShinyHunters group . Following the threat, the group publicly published data they alleged had been obtained from the firm, consisting mostly of C&W email addresses along with tens of thousands of external email addresses and corporate contact records. The exposed data was primarily business information, including names, job titles, company addresses and phone numbers.
What is known
| People affected | 310,431 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | May 12, 2026 |
| Happened | Apr 21, 2026 |
| Attack | Extortion |
| Data exposed | Emails, Employment, Names, Phone numbers, Addresses, Social Security numbers |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Cushman & Wakefieldoag.ca.gov · Official notice | Official notice |
| Have I Been Pwned: Cushman & Wakefieldhaveibeenpwned.com · Aggregator | Aggregator |
| Vermont Attorney General breach report: Cushman & Wakefieldago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | May 12 | 310,431 |
| California AGresidents of CA | Aug 7 | |
| Vermont AGresidents of VT | Aug 7 | 2 |
History of this record
- 2026-09-25 · data_types: ["emails","employment","names","phone","addresses"] to ["emails","employment","names","phone","addresses","ssn"] · backfill source
- 2026-09-25 · hibp: empty to CushmanWakefield · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · attack: unknown to extortion · backfill source
- 2026-09-25 · data_types: [] to ["emails","employment","names","phone","addresses"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 310431 · backfill source
- 2026-09-25 · disclosed: 2026-08-07 to 2026-05-12 · backfill source
- 2026-09-25 · summary: empty to In May 2026, the real estate services firm Cushman & Wakefield was the target of a "pay or leak" extortion campaign by the ShinyHunters group . Following the threat, the group publicly published data they alleged had been obtained from the · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.