Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking

## Executive summary: Cushman & Wakefield confirmed a limited data security incident stemming from vishing that led to claims by two separate cybercrime groups — ShinyHunters (which claims to have stolen over 500,000 Salesforce records containing PII) and Qilin (which listed the company on its data-leak site). The company says systems remain operational and it has engaged incident response and third-party advisors; the simultaneous claims suggest separate but coincident attacks and raise risks of extortion and PII exposure.