Cushman & Wakefield data breach
Cushman & Wakefield reported a data security incident in Indiana that exposed individuals' Full Name, Social Security Number, Date of Birth, and financial details. This breach requires immediate attention for those who received a notification, as their sensitive information is now at heightened risk of identity theft and financial fraud. Affected parties should understand their options for legal recourse and protection.
Docket sheet
- Company
- Cushman & Wakefield
- Venue
- Indiana Attorney General
- Filed
- August 7, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredApril 21, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralAugust 7, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Wage and Compensation Information
- Tax Return Information
- Direct Deposit Account Details
- Mailing Address
- Banking Institution Details
Clerk's notes
On August 7, 2026, Cushman & Wakefield formally reported a data security incident to authorities in Indiana, following a breach identified on April 21, 2026. This incident involved unauthorized access to systems managed by the commercial real estate services firm, which routinely processes and stores a significant volume of confidential information. The current status of this matter is listed as monitoring, indicating ongoing review of the breach's full scope and impact.
The compromised data includes Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Mailing Address, and Banking Institution Details. The exposure of such a comprehensive set of personal identifiers and financial information creates a substantial risk for individuals. Malicious actors could leverage this data for identity theft, fraudulent financial transactions, or to open new accounts in victims' names, leading to significant financial hardship.
Companies entrusted with sensitive personal data have a legal obligation to implement robust security measures to safeguard that information. This includes adherence to state consumer protection statutes, such as the Indiana Disclosure of Security Breach Law, which mandates reasonable security practices. The occurrence of a breach involving highly sensitive data suggests that Cushman & Wakefield's protective measures may have been insufficient to prevent unauthorized access.
Individuals who received a data breach notification letter from Cushman & Wakefield should recognize this as formal acknowledgment that their private information was compromised. Receiving such a notice provides legal standing to consider your options. Our firm is currently investigating this incident on behalf of affected individuals. We encourage anyone impacted by the Cushman & Wakefield data breach to request a free case review to understand potential next steps without any out-of-pocket cost.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.