Berkadia, a commercial real estate finance company, had data from its Salesforce instance published by the ShinyHunters group in March 2026, exposing over 300,000 individuals' contact and employer information.
What happened
According to Have I Been Pwned, in March 2026 Berkadia was targeted by a ShinyHunters "pay or leak" extortion campaign. After the extortion demand, the group published data they alleged was taken from Berkadia's Salesforce instance.
What was exposed
Reported by HIBP, the published data included email addresses, names, physical addresses, phone numbers, and employer information for more than 300,000 individuals.
Who is affected
Approximately 305,216 accounts are listed as affected. Those impacted are likely clients, contacts, or business partners associated with Berkadia's commercial real estate finance operations.
What to do now
If you have a relationship with Berkadia, be alert for phishing emails or phone calls that use your personal details to appear legitimate. Consider updating passwords on any accounts that share credentials with Berkadia-related services. Monitor your email and phone for unsolicited contact, and report suspicious outreach to the relevant platform or authority.