2026 Cushman & Wakefield - alleged ShinyHunters Salesforce theft affecting 500k+ records
Data compromised
Alleged Salesforce records containing PII and internal corporate data
Technical writeup
Ransom-monitoring coverage and an X post by TweetThreatNews reported that ShinyHunters claimed responsibility for an incident affecting Cushman & Wakefield. The claim alleged more than 500,000 Salesforce records containing PII and internal corporate data, with a final warning deadline of May 6, 2026. Hendry Adrian explicitly marked the post as based on public ransomware-group claims and not independently confirmed, so this record is treated as alleged pending official confirmation.
Root cause
Alleged ShinyHunters access to Salesforce data; confirmation and vector pending