Marcus & Millichap
HighMarcus & Millichap faced a breach in 2026 exposing 1.8M records of employment-related and contact data.
- Records exposed
- 1,837,078 records
- Breach date
- Breach Apr 12, 2026
- Last update
- Updated May 3, 2026
What data was exposed?
Fields reported as compromised in this breach record.
Why does this breach matter?
In-depth analysis of the breach and its implications.
In April 2026, the commercial real estate firm Marcus & Millichap experienced a data breach attributed to the ShinyHunters hacking group. Publicly disclosed data included 1.8 million unique email addresses, along with names, phone numbers, and employment-related information. Marcus & Millichap reported that only non-sensitive company materials and contact information were accessed, affirming data confidentiality.
Impact Analysis
Understanding the scope and consequences of this breach.
- User Impact
- Potential exposure of users' professional contact information, increasing phishing risks.
- Business Impact
- Reputational damage and required disclosure, impacting market trust and client relationships.
- Affected Sectors
- Real Estate
- Geographic Impact
- Global
What You Should Do
Recommended actions to take in response to this breach.
If You Were Affected
- •Monitor communications for phishing attempts.
- •Update any contact information associated with professional accounts.
- •Inform employers and relevant organizations about potential data compromise.
Preventive Measures
- •Regular review and update of cybersecurity practices.
- •Utilize secure storage and strict access controls for sensitive data.
- •Provide employee training against potential phishing and social engineering risks.
Frequently Asked Questions
Common questions about this breach and what it means for you.