In May 2026, Cushman & Wakefield faced an extortion attempt by the ShinyHunters group, which threatened to leak data unless paid. The group published what they claimed was data from C&W, revealing a significant breach of over 310,431 accounts primarily consisting of email addresses and corporate contacts.