Cushman & Wakefield, a prominent commercial real estate services firm, reported a data security incident to the Indiana Attorney General on August 7, 2026. The company confirmed that its systems were affected by an unspecified breach, which occurred on April 21, 2026. This incident has led to concerns for individuals whose personal data was managed by the company.
The compromised data types include Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Mailing Address, and Banking Institution Details. This combination of personal and financial information presents a significant risk to affected individuals.
The exposure of sensitive data like Social Security Numbers and banking details can lead to various forms of identity theft and financial fraud. Malicious actors could potentially use this information to open new accounts, file fraudulent tax returns, or gain unauthorized access to existing financial accounts. It is crucial for recipients of notification letters to understand these potential risks.
Companies like Cushman & Wakefield have a legal obligation to protect the sensitive personal data they collect and store. This duty includes implementing robust security measures to prevent unauthorized access and data breaches. When a breach occurs, it often suggests that these security obligations may not have been adequately met.
If you received a data breach notification letter from Cushman & Wakefield, it means your private information was involved in this security incident. You may have legal rights to seek compensation and other protections. Our firm is investigating this Cushman & Wakefield data breach and offers a free case review to help you understand your options.