ShinyHunters Claims Salesforce Data Theft at Berkadia

Summary
ShinyHunters claims it obtained 27GB of Berkadia Salesforce records containing PII and internal data; the monitoring post says the claim is unconfirmed.
Key points
- ShinyHunters claims Berkadia Salesforce records containing PII and internal corporate data were compromised.
- The group claims the data dump is 27GB compressed and says Berkadia did not reach an agreement.
- The post was monitored by ransomware.live and states that the claim has not been independently confirmed.
Article Details
- Victim
- Berkadia Commercial Mortgage, LLC.
- Victim Domain
- berkadia.com
- Claim Date
- 2026-03-24
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- ShinyHunters claims Salesforce records containing PII and other internal corporate data were compromised; this is unverified.
- Exfiltrated Data
- ShinyHunters claims the records included PII and other internal corporate data.
- Exfiltrated Size
- 27GB (compressed), according to ShinyHunters' claim.
- Ransom Demand
- Not disclosed; ShinyHunters says Berkadia failed to reach an agreement despite offers, but gives no amount.
- Leak Status
- ShinyHunters claims a 27GB data dump; the source says it cannot confirm the claim or whether the data was published.
