Cushman & Wakefield: a data breach
In May 2026, the real estate services firm Cushman & Wakefield was the target of a "pay or leak" extortion campaign by the ShinyHunters group . Following the threat, the group publicly published data they alleged had been obtained from the firm, consisting mostly of C&W email addresses along with tens of thousands of external email addresses and corporate contact records. The exposed data was primarily business information, including names, job titles, company addresses and phone numbers.
The record
- Organisation
- Cushman & Wakefield →
- Identity
- Cushman & Wakefieldidentified by its domain in a verified breach record
- Records affected
- 310,431 records
- Data exposed
- Email addresses, Job titles, Names, Phone numbers, Physical addresses, Salutations
- Sector
- Not recorded
- Occurred
- 2026-05-05
- Disclosed
- 2026-05-12
- First recorded here
- 2026-09-09
Fastnexa security experts
Worried the same could happen to your company?
If you are a customer or supplier of Cushman & Wakefield, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Sources (2)
More than one source reported this. Agreement across independent sources is the strongest signal available, and the order below is the order they reported.
- Have I Been Pwned ↗First reported
2026-05-12
2026-08-07