ShinyHunters Claims Berkadia Salesforce Data Compromise
Summary
A ransomware[.]live monitoring post attributes to ShinyHunters an unverified claim that more than 5 million Berkadia Salesforce records and other corporate data were compromised. The group warns of a leak unless contacted by March 22, 2026.
Key points
- The post identifies Berkadia Commercial Mortgage LLC as the named victim and ShinyHunters as the actor.
- ShinyHunters claims more than 5 million Salesforce records containing PII and other internal corporate data were compromised; the claim is unconfirmed.
- The group issued a final warning demanding contact by March 22, 2026, and threatened data leaks and additional digital disruption.
- The post says it is based on public claims by the group and notes that the information could not be confirmed.
Article Details
- Victim
- Berkadia Commercial Mortgage LLC
- Claim Date
- 2026-03-19
- Encryption Status
- Unknown
- Exfiltration Status
- Unconfirmed; ShinyHunters claimed records were compromised, but the source says it cannot confirm the claim.
- Exfiltrated Data
- ShinyHunters claimed that over 5 million Salesforce records containing PII and other internal corporate data were compromised.
- Ransom Demand
- The group demanded contact by 22 Mar 2026; no monetary ransom amount was reported.
- Leak Status
- Threatened; the group warned it would leak data if not contacted by 22 Mar 2026. No leak was reported.