Cushman & Wakefield Sample Notice Describes Unauthorized Access and Data Exfiltration

Summary

A sample breach notice says Cushman & Wakefield discovered unauthorized access on April 29, 2026, and that a third party exfiltrated files containing personal data. The company says it reset credentials and increased monitoring.

Key points

• The sample notice says Cushman & Wakefield became aware of unauthorized access on April 29, 2026, and determined a third party exfiltrated certain files.
• The notice says the review identified personal data relating to the recipient as accessed and exfiltrated; the listed data is the recipient’s name and a placeholder, “[Extra2].”
• The notice says there was no indication the personal information was actually viewed or misused.
• Cushman & Wakefield says it investigated with third-party cybersecurity experts, reset system passwords and access credentials, and heightened monitoring.
• The company says it notified law enforcement and offered 24 months of Experian IdentityWorks services.
• The document is labeled a sample notification letter and contains placeholders, so it does not provide a complete account of the affected data or population.