Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Cushman & Wakefield Inc.

cushmanwakefield.com

Discovered 2026-05-03 03:25 UTC
Est. attack date 2026-05-03
Country US
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

Over 500k Salesforce records containing PII and other internal corporate data have been compromised. This is a final warning to reach out by 6 May 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline. | Updated: 3 May 2026 | Warning: FINAL WARNING

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 1

Third Party Employee Credentials: 1


External Attack Surface: 1


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • 1z90oj703wdtidp.email
  • abusesafenames.net
  • hostmastersafenames.net
MX Records
  • No MX records found.
TXT Records
  • cw-prod-proxy.azurewebsites.net
  • 9z7gsh5qh86yfxd55gh1mspyjb4jq1xj
  • _1j79c5jlndp7fe0low32u9kf4y8ji9i
  • c7fac7af9c904405b4094757c9116026
  • 0ed1fe018afdcd346533ce4ccf9710465e18da4775
  • QuoVadis=1bef0982-5ace-4bc6-aba4-c2fe1f5d63f4
  • SFMC-XkASr1KvY8-IE28xlbyZ7XTH0OE-Gj4nSxb_Mu4Y
  • ms-domain-verification=37da63f9-88cd-4df1-867c-c43489c6363a
  • smartsheet-site-validation=wfOYbZgbrXjgQg6aa7OqnO0tNKI7tD9-
  • apple-domain-verification=zS6h3aSdG9erPKnZSe7ORID4nSmR01Ei1fBeyKXmJZY
  • pardot524671=69323c407bd142a4dfb7e07b7d360147d88351d5c660a0aeb857be81e3517484
  • pardot524671=87554bb30eff9f3c2ecf5cfa1c9e5bdf056e5ccbb3abde3000aba6ce4757ae9d
  • LJ5ReMkLxQYY0f1wfxRZe/bL2f2F+JCnH1OuV07alIPhjiRwihnM43v0WuGcfr2qIK85iyxQXUJEVNQRSaz9Dg==
  • v=spf1 include:us._netblocks.mimecast.com include:eu._netblocks.mimecast.com include:spf.protection.outlook.com ~all
  • MS=ms10260859
Cloud / SaaS Services Detected
Apple Microsoft 365 Salesforce Mimecast