Cushman & Wakefield confirms vishing breach after dual claims

Cushman & Wakefield has confirmed a vishing attack that resulted in the theft of Salesforce records containing personal information, following claims by both the ShinyHunters and Qilin ransomware groups. The commercial real estate services firm activated its incident response protocols after the social engineering incident, which public reporting indicates targeted employees through voice phishing techniques designed to extract credentials or sensitive data.

According to available reporting, ShinyHunters asserted that more than 500,000 Salesforce records had been compromised. The company has described the breach as limited in scope. It remains unclear exactly how many individuals’ personal information was accessed, though the involvement of Salesforce data suggests details such as contact information, business records, and potentially client or employee personal data were exposed. Cushman & Wakefield has not released a full list of affected parties, and the precise number of impacted records has not been independently verified beyond the attackers’ claims. The dual listing by ShinyHunters and Qilin has raised questions about possible collaboration or data sharing between the groups.