What was exposed, when it happened, and which databases confirm it.
- accounts
- 473,424
- Breached
- March 19, 2026
- Last Update
- June 15, 2026
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Berkadia's Salesforce instance, including over 300k unique email addresses as well as names, physical addresses and phone numbers, among other data.
Compromised Info
- Email addresses
- Employers
- Names
- Phone numbers
- Physical addresses
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the Berkadia breach?
The Berkadia breach exposed: Email addresses, Employers, Names, Phone numbers, and Physical addresses.
When did the Berkadia breach happen?
The Berkadia breach was disclosed on March 19, 2026 and affected 473,424 records.
Am I affected by the Berkadia breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Berkadia leak.