ShinyHunters Claims Marcus & Millichap Was Compromised and Threatens to Leak Data
Summary
A monitoring post attributes to ShinyHunters a claim that Marcus & Millichap was compromised, alleging exposure of more than 30 million Salesforce records and demanding payment before a threatened leak. The claim is unconfirmed.
Key points
- The post attributes the claim to ShinyHunters and identifies Marcus & Millichap, Inc. as the alleged victim.
- The group allegedly claims that more than 30 million Salesforce records containing PII and other internal corporate data were compromised.
- The post reports a pay-or-leak demand and a final warning to contact the group by April 14, 2026.
- The monitoring post says the claims are based on public statements by the group and that their accuracy has not been confirmed.
Article Details
- Victim
- Marcus & Millichap, Inc.
- Claim Date
- 2026-04-11
- Encryption Status
- Not disclosed.
- Exfiltration Status
- The article reports that data was allegedly compromised, but does not confirm exfiltration.
- Exfiltrated Data
- The claim alleges that over 30 million Salesforce records containing PII and other internal corporate data were compromised; the article says the claim's accuracy cannot be confirmed.
- Ransom Demand
- The actor's warning says “pay or leak”; no monetary amount is disclosed.
- Leak Status
- No leak is reported. The actor's warning threatened a leak if the victim did not respond by 2026-04-14.