Class Action Suit Filed Against Cushman & Wakefield Over Data Breach

Global commercial real estate firm Cushman & Wakefield faces a proposed class action lawsuit filed by Illinois tenant Michelle Milewski following a significant data breach. The suit alleges the company failed to protect sensitive client information after hacker groups ShinyHunters and Qilin infiltrated its systems via a vishing attack. The breach reportedly exposed personal identifiable information, including social security numbers and financial data, leading to identity theft and fraud against Milewski. The plaintiff accuses the firm of negligence and failing to implement industry-standard cybersecurity measures. Cushman & Wakefield has dismissed the lawsuit as baseless, stating the incident was limited in scope and that they did not engage with the hackers' demands. The case was filed in New York, where the company maintains a major office. This legal challenge adds to recent troubles for the firm, which also faces a separate class action from a former employee regarding climate-related financial risks in its 401(k) plan. The incident highlights growing concerns over corporate data security and the severe consequences of cyberattacks on personal privacy and financial stability.