Cushman & Wakefield confirms vishing breach claimed by ShinyHunters and Qilin
Commercial real estate firm Cushman & Wakefield confirmed a vishing-related cyber incident after being listed by both ShinyHunters and Qilin. ShinyHunters claimed theft of over 500,000 Salesforce records containing PII and internal data. The company activated its incident response protocols.
- pii
- salesforce-records
Cushman & Wakefield, a global commercial real estate services firm, has confirmed a vishing incident that resulted in the theft of more than 500,000 Salesforce records containing personally identifiable information and internal company data. The breach was publicly claimed by both the ShinyHunters and Qilin threat groups, prompting the company to activate its incident response protocols.
Public reporting indicates that the attackers used voice phishing, or vishing, techniques to gain initial access. ShinyHunters specifically claimed responsibility for exfiltrating over 500,000 Salesforce records that included PII along with other internal information. Cushman & Wakefield has acknowledged the cyber incident but has not yet disclosed the exact number of individuals affected. Available reporting describes the data as encompassing client and employee details stored within the Salesforce environment. The company stated that it immediately launched an investigation and engaged appropriate resources to contain and remediate the breach.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary DoxxScan™ to see if their identity is exposed in the breaches we cover.
Were you affected by this breach?
See exactly what an attacker can piece together from your email, username, or handle. Free first scan, no credit card.
Try DoxxScan — 72hr free trial →
