Back to Radar
BE

Berkadia

Medium

Berkadia's 2026 breach affected over 305,000 individuals via leaked Salesforce data.

Records exposed
305,216 records
Breach date
Breach Mar 19, 2026
Last update
Updated Jun 15, 2026

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesEmployersNamesPhone numbersPhysical addresses

Why does this breach matter?

In-depth analysis of the breach and its implications.

In March 2026, Berkadia, a notable commercial real estate financing firm, was victim to a data breach incident orchestrated by the cyber extortion group ShinyHunters. This group is reported to have infiltrated Berkadia's Salesforce database, leading to the exposure of over 305,000 records encompassing names, email addresses, telephone numbers, physical addresses, and employer details. The perpetrators employed a 'pay or leak' extortion scheme, escalating risks and compromising user trust.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users potentially faced privacy invasion and phishing threats.
Business Impact
Berkadia suffered reputational damage and required significant mitigation efforts.
Affected Sectors
  • Real estate
  • Finance
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Monitor financial and online accounts for unusual activity.
  • Update affected email passwords.
  • Enable multifactor authentication on personal accounts.

Preventive Measures

  • Invest in robust database security measures.
  • Conduct regular cybersecurity audits.
  • Train employees about recognizing extortion and other cyber threats.

Frequently Asked Questions

Common questions about this breach and what it means for you.

The breach involved names, email addresses, phone numbers, physical addresses, and employer information.

Osintly · Berkadia Data Breach Analysis