Berkadia — data breach (Berkadia)

Domain: berkadia.com · Accounts affected: 305,216 · Data exposed: Email addresses, Employers, Names, Phone numbers, Physical addresses · Verified breach — In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Berkadia's Salesforce instance, including over 300k unique email addresses as well as names, physical addresses and phone numbers, among other data.