Breachesby GlyphMarcus & Millichap
Disclosed May 3, 20261,837,078 accountsConfirmed
In April 2026, the commercial real estate brokerage firm Marcus & Millichap was named as one of multiple alleged victims of the ShinyHunters hacking and extortion group . Data alleged to have been obtained from the company was subsequently released publicly and included 1.8M unique email addresses, along with names, phone numbers and employment-related information including employer, job title and physical company address. In their disclosure notice , Marcus & Millichap advised that data which may have been accessed appeared limited to "company forms, templates, marketing materials, and genera
What is known
| People affected | 1,837,078 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | May 3, 2026 |
| Discovered | Apr 10, 2026 |
| Happened | Apr 7, 2026 |
| Attack | Phishing |
| Data exposed | EmailsEmploymentNamesPhone numbersAddresses |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.