Cushman & Wakefield Data Leaked by ShinyHunters
ShinyHunters targeted the commercial real estate firm in a pay-or-leak extortion campaign, publicly releasing a dataset of over 310,000 records. The exposed information consists primarily of business contact details including names, job titles, company addresses, phone numbers, and email addresses. The breach was indexed by Have I Been Pwned on May 12, prompting class-action litigation.
- personal-information
- contact-details
On May 12, 2026, the commercial real estate firm Cushman & Wakefield became the latest victim of the ShinyHunters hacking group, which publicly released a dataset containing more than 310,000 records after an unsuccessful pay-or-leak extortion attempt. The breach exposed business contact details including names, job titles, company addresses, phone numbers, and email addresses. Available reporting indicates the incident has already prompted class-action litigation.
Public reporting and the breach record indexed by Have I Been Pwned confirm that the data consists primarily of professional contact information rather than financial or government identifiers. ShinyHunters followed their established pattern of targeting large organizations, demanding payment to withhold the dataset, then releasing it when payment was not forthcoming. The exposed records relate to individuals affiliated with Cushman & Wakefield in a business capacity, though many records also contain personal email addresses and mobile phone numbers that are used across both professional and private contexts.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary DoxxScan™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15B+ leaked records (including this breach) in 15 seconds — then show you the $14.99 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →
